Multiple VSA pairs

Peter Hicks peter.hicks at poggs.co.uk
Wed Aug 31 14:20:27 CEST 2005


Hello

I'm using FreeRADIUS with MySQL for accounting and authentication.

>From a Cisco 2651XM router, I have multiple Cisco-AVPair attributes send in
accounting packets:

   rad_recv: Accounting-Request packet from host 192.168.167.14:1646, id=186, length=201
           Acct-Session-Id = "00009E13"
           Cisco-AVPair = "isakmp-group-id=cg-ectvpn"
           Framed-IP-Address = 172.16.33.119
           Cisco-AVPair = "isakmp-initator-ip=82.104.97.16"
           User-Name = "pwh"
           Cisco-AVPair = "connect-progress=Auth Open"
           Acct-Authentic = RADIUS
           Acct-Status-Type = Start
           Cisco-NAS-Port = "FastEthernet0/1"
           NAS-Port = 1
           NAS-IP-Address = 192.168.167.14
           Acct-Delay-Time = 0

When trying to refer to these in a SQL INSERT statement for accounting
(where if the AVPair is 'isakmp-initiator-ip', it gets stripped and the
address inserted), the AVPairs overwrite each other.

Is there a workaround for this, or is the behaviour of a Cisco IOS router
'broken' for sending the same attribute twice in the same packet?

Best wishes,


Peter.



More information about the Freeradius-Users mailing list