Filtering out a attribute conditionally

Mike O'Connor freeradius at pineview.net
Thu Nov 1 23:05:35 CET 2007


Hi All

I have a problem with my Cisco 7301's where I apply a address pool via a
Cisco-AVPair (for each wholesale ISP customer) and the wholesale ISP
supplies a Framed-IP-Address at the same time, the connection is kicked
by the cisco.

Is there any way of adding or removing the ip_pool bases on a rule ?

Could Freeradius 2 do this ?

Thanks
Mike

--- Current Attrs File
xxxx.com
        Service-Type == Framed-User,
        Framed-IP-Address =* 255.255.255.254,
        Framed-IP-Netmask == 255.255.255.255,
        Framed-Route =* ANY,
        Cisco-AVPair := "ip:addr-pool=ip_pool_netyp",
        Framed-Compression =* Van-Jacobson-TCP-IP,
        Framed-Protocol == PPP,
        Framed-MTU =* 1492,
        Framed-Filter-ID =* ANY,
        Cisco-AVPair =* ANY,
        Reply-Message =* ANY,
        Proxy-State =* ANY,
        Idle-Timeout =* 600,
        Session-Timeout =* 28800,
        Port-Limit =* 1

--- Reply with out framed-ip-address
Packet-Type = Access-Accept
Wed Oct 31 19:55:36 2007
        Cisco-AVPair := "ip:addr-pool=ip_pool_netyp"
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-MTU = 1500
        Framed-Compression = Van-Jacobson-TCP-IP
        Session-Timeout = 14400
        Idle-Timeout = 900
        Port-Limit = 1

--- Reply with framed-ip-address
Packet-Type = Access-Accept
Wed Oct 31 19:55:36 2007
        Cisco-AVPair := "ip:addr-pool=ip_pool_netyp"
        Service-Type = Framed-User
        Framed-IP-Address = XXX.XXX.11.247
        Framed-IP-Netmask = 255.255.255.255
        Framed-Protocol = PPP
        Framed-MTU = 1500
        Framed-Compression = Van-Jacobson-TCP-IP
        Session-Timeout = 14400
        Idle-Timeout = 900
        Port-Limit = 1






More information about the Freeradius-Users mailing list