Ascend-Data-Filter with srcip from ippool

[Andreas Kalb (akalb)]

Hello,

sorry for my ignorance, I'm still a novice on FreeRadius :-( After installing 2.0.3 I'm even facing more trouble (most likely because parts of radiusd.conf are split now and I'm unsure how to get the ippool called).

Where was the related functionality moved to?

Kind Regards,

   Andreas

-----Original Message-----
From: freeradius-users-bounces+akalb=cisco.com at lists.freeradius.org [mailto:freeradius-users-bounces+akalb=cisco.com at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: Montag, 31. März 2008 16:29
To: FreeRadius users mailing list
Subject: Re: Ascend-Data-Filter with srcip from ippool

Andreas Kalb (akalb) wrote:
> I'm trying to use Ascend-data-filters together with IP-pool
...
> DEFAULT User-Name := "test_...", Cleartext-Password := test
...
>         Ascend-Data-Filter := "ip in forward srcip
> %{Framed-IP-Address}/32 dstip 1.1.1.2/32"
> 
> The pool is working well, but the filter doesn't:

  Because there's no Framed-IP-Address attribute in the request.  Use %{reply:Framed-IP-Address}.  For version 1.x, this is documented in doc/variables.txt.

> Login OK: [test_001/test] (from client bb-10k port 808583209)
>   Processing the post-auth section of radiusd.conf
> modcall: entering group post-auth for request 0
...
> rlm_ippool: Allocated ip 172.16.103.107 to client on nas 
> 172.16.1.7,port
> 808583209

  Which runs after the "files" module.  So the "files" module doesn't have access to the IP address.

> Looks like IP is taken from pool after users-file got processed. I 
> wouldn't know how to change that order or where to add the filter then.

  Read the documentation and see the examples.  The modules are processed in the order that they are listed in radiusd.conf.

> Pls let me know whether this should work in some way and how to 
> configure it then?

  It's pretty easy to do in 2.0.  See "man unlang".

  I suggest you upgrade.  What you want to do will be a LOT easier in 2.0.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html