Hi - does anyone know how send taged attributes from FreeRadius. I'm including the tag number with a colon after the attribute but not sure if this is correct (the last two attributes): DEFAULT User-Name =~ "([a-z]+):([0-9]+)[^a-z]+([a-z]+):([0-9]+)$", Auth-Type := Local, User-Password == "usrpass" Framed-Pool := "4", ERX-Ingress-Policy-Name := "ingressFilter", ERX-Egress-Policy-Name := "egressFilter", ERX-CoS-Parameter-Type:1 = "basic_sch", ERX-CoS-Parameter-Type:2 += "8m" And this is how the attribute is defined in dictionary: ATTRIBUTE ERX-CoS-Parameter-Type 108 string has_tag But Juniper is complaining about wrong Tag-characters. Feb 1 07:41:38 Vendor-Id: 4874 Attribute Type:ERX-CoS-Parameter-Type(108) Value:string-type Length:10 Feb 1 07:41:38 authd_radius_parse_message:juniper-BRAS type:108 Feb 1 07:41:38 parse_tag_based_vsa: Tag based VSA contains the wrong Tag-character Feb 1 07:41:38 Tag-based VSA parsing failed vendor-id: 4874 type: 108 Feb 1 07:41:38 Vendor-Id: 4874 Attribute Type:ERX-CoS-Parameter-Type(108) Value:string-type Length:3 Feb 1 07:41:38 authd_radius_parse_message:juniper-BRAS type:108 Feb 1 07:41:38 parse_tag_based_vsa: Tag based VSA contains the wrong Tag-character Feb 1 07:41:38 Tag-based VSA parsing failed vendor-id: 4874 type: 108 Feb 1 07:41:38 authd_radius_parse_message: Error parsing ERX avps Feb 1 07:41:38 Framework - module(radius) return: ADMIN CANCELLED Is this above the correct way to send tagged attributes in FreeRadius? Thanks, Marlon
Marlon Duksa wrote:
Hi - does anyone know how send taged attributes from FreeRadius. I'm including the tag number with a colon after the attribute but not sure if this is correct (the last two attributes):
DEFAULT User-Name =~ "([a-z]+):([0-9]+)[^a-z]+([a-z]+):([0-9]+)$", Auth-Type := Local, User-Password == "usrpass"
Don't set Auth-Type. Use "Cleartext-Password :=... ", not "User-Password ==". See the FAQ for an example.
Framed-Pool := "4", ERX-Ingress-Policy-Name := "ingressFilter", ERX-Egress-Policy-Name := "egressFilter", ERX-CoS-Parameter-Type:1 = "basic_sch", ERX-CoS-Parameter-Type:2 += "8m"
That should work.
And this is how the attribute is defined in dictionary: ATTRIBUTE ERX-CoS-Parameter-Type 108 string has_tag
Quoting the dictionaries doesn't help. Do you think we don't have access to them?
Feb 1 07:41:38 parse_tag_based_vsa: Tag based VSA contains the wrong Tag-character
Show a TCPdump or wireshark packet capture. Also, are you sure you're using the latest version of the server? If not, upgrade. Alan DeKok.
participants (2)
-
Alan DeKok -
Marlon Duksa