Alan DeKok <[EMAIL PROTECTED]> said:

> "Shah, Nishant B" <[EMAIL PROTECTED]> wrote:
> > >> YES I DO HAVE SPECIFIC QUESTION.
> >    AS FOR EXAMPLE,
> 
>   No need to shout.
I apologise for that, I didn't mean to shout. sorry if I hurt someone's 
feelings
> 
> > If the user sends a packet with Cisco-AVPair="ip:xxx" 
> > attribute and Cisco NAS is using RADIUS for authorization, what does 
RADIUS 
> > do besides authorization.
> 
>   I don't mean to be rude, but it does what you tell it to do.
> 
>   That's really the only possible answer to such a general question.
> I suggest you stop asking "what does it do", and instead describe what
> you want it to do.
> 
> > I mean to say does it send any special attribute in access-accept
> > packet to Cisco NAS so that Cisco-AVPair's value is used in NAS.
> 
>   No.  That's up to you to configure.
> 
> > UIf I am not misunderstanding, RADIUS authorizes the user with
> > password only and not with vendor specific attribute in the packet
> > too.
> 
>   The authorization is done however you want.  If you decide to reject
> all requests containing Cisco-AVPair, you can configure the server to
> do that.
Could you please give me an example of configuring the server according to 
following need.
   I have a cisco router between user sending access-request and server. I 
want router to route the fax request(fax machine on the network) to authorize 
the user's request by RADIUS.
   I want to put Cisco-Fax-Pages=5 in my access-request packet so that user 
can send only 5 fax pages. For that user needs to be authorized by RADIUS 
according to this vendor-specific attribute.
   Can you tell me ohw can I configure server to do this. I apologise if the 
problem is not clear. Please reply me and I will revert it.

Thanks,
Nishant

> 
>   Alan DeKok.
> 
> - 
> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html
> 



-- 
Nishant Shah
U4 Computer Engineering
979-268-0866 (M)281-222-3176

 


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to