Framed-IP-Address not sent to ASA/NAS in proxy mode

[Aleksander Roer Olsen]

Thank you Phil.

I changed it to this and it works like I hoped. If this what you would
recommend I don't know, but I suppose it's OK.

freeradius/attrs:

[...]

domain.com
        Class := "ou=domain.com-GP",
        Framed-IP-Address =* ANY,
        Framed-IP-Netmask = 255.255.255.0

[...]


Sending Access-Accept of id 78 to xx.xx.xx.xx port 48206
        Class := 0x6f753d566f6963632e6e6f2d4752
        Framed-IP-Netmask := 255.255.255.0
        Framed-IP-Address = 10.42.7.150



Thank you very very much :-)



On Thu, May 22, 2014 at 2:46 PM, Phil Mayers <p.mayers at imperial.ac.uk>wrote:

> On 22/05/14 13:21, Aleksander Roer Olsen wrote:
>
>  I also tried to define a update reply like this without success: update
>> reply {  Framed-IP-Address = "%{ Framed-IP-Address }"  }
>>
>
> That's bad syntax. See "man unlang"
>
> Anyway, your problem is almost certain this:
>
>
> [attr_filter.post-proxy]        expand: %{Realm} -> domain.com
> attr_filter: Matched entry domain.com at line 103
>
> You have an attribute filter defined. Ensure Framed-IP-Address is in there.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140522/f07e7ba1/attachment.html>