Ascend-Data-Filter with srcip from ippool

[Andreas Kalb (akalb)]

Hello Alan,

as I see your result I better understand unlang and the mighty of it.
Thx for your patience. All working perfectly well now.

Kind Regards,

    Andreas 

-----Original Message-----
From: freeradius-users-bounces+akalb=cisco.com at lists.freeradius.org
[mailto:freeradius-users-bounces+akalb=cisco.com at lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: Mittwoch, 2. April 2008 08:19
To: FreeRadius users mailing list
Subject: Re: Ascend-Data-Filter with srcip from ippool

Andreas Kalb (akalb) wrote:
> Now I'm back to my original problem, where I wanted to use an 
> Ascend-filter with entries matching IP-address from pool. I still 
> don't know, how to change order of modules to make the IP-address 
> known to the files-module and appreciated your uidance again.

  You don't have to.  You can add the ascend data filter via "unlang",
in the "post-auth" section, right after the "test_pool" module is
called:

post-auth {
	...
	test-pool
	if (ok) {
		update reply {
			...
			Ascend-Data-Filter := "ip in forward srcip
%{reply:Framed-IP-Address}/32 dstip 1.1.1.2/32"
			...
		}
	}

  Again, this is documented.  See "man unlang", and the examples.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html