freeradius cisco-avpair problem

[Matthias Wolf]

Hello

I have y problem with the cisco-avpairs and a 525 cisco pix. After the pix
has gotten the avpairs and created the access-list (e.g. AAA-user-test), the
logging-table says that he needs an authorization. But radius and
authorization? No really!
Here is the line from the logging-table: "Authorization denied (acl=
AAA-user-test) for user 'test' from 10.10.10.23/1369 to xx.xx.xx.xx/53 on
interface inside".
My avpair looks like: "ip:inacl#1=permit tcp host 10.10.10.23 any ".

Where is my mistake? Either on the pix or at my kind of avpairs?


Muchas gracias, Matthias Wolf