Re: (RADIATOR) Cisco avpair problem

2001-11-20 Thread Boer, A.P. de (Alexander)

On Tuesday 20 November 2001 05:30, Gustavo Moreira wrote:
 I have problems when wanting to permit only the access only to certain
 HOSTS and DNS in a Cisco 7500.

 AddToReply  \
 cisco-avpair = ip:inacl#0=permit ip any any precedence immediate,\
 cisco-avpair = ip:inacl#1=permit udp any host 200.45.0.115 eq 53,\
 cisco-avpair = ip:inacl#2=permit udp any host 200.45.191.35 eq 53,\
 cisco-avpair = ip:inacl#3=permit tcp any any established,\
 cisco-avpair = ip:inacl#4=permit tcp any host 200.45.0.42 eq 80,\
 cisco-avpair = ip:inacl#5=permit tcp any host 200.45.190.149 eq 80,\
 cisco-avpair = ip:inacl#6=permit tcp any host 200.45.190.150 eq 80,\
 cisco-avpair = ip:inacl#7=permit tcp any host 200.45.0.35 eq 80,\
 cisco-avpair = ip:inacl#99=deny ip any any

 Would it to be ok?

Have look at www.cisco.com:

E.g.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csn
t24/csnt24ug/ap_rads.htm

http://www.cisco.com/warp/public/131/4.html

Cheers,
Alexander
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Cisco avpair problem

2001-11-19 Thread Gustavo Moreira



I have problems when wanting to permit only the accessonly to certain HOSTS and DNS in a 
Cisco 7500.

AddToReply 
\
 
cisco-avpair = "ip:inacl#0=permit ip any any precedence 
immediate",\ cisco-avpair = "ip:inacl#1=permit udp any 
host 200.45.0.115 eq 53",\ cisco-avpair = 
"ip:inacl#2=permit udp any host 200.45.191.35 eq 53",\ 
cisco-avpair = "ip:inacl#3=permit tcp any any 
established",\ cisco-avpair = "ip:inacl#4=permit tcp any 
host 200.45.0.42 eq 80",\ cisco-avpair = 
"ip:inacl#5=permit tcp any host 200.45.190.149 eq 80",\ 
cisco-avpair = "ip:inacl#6=permit tcp any host 200.45.190.150 eq 
80",\ cisco-avpair = "ip:inacl#7=permit tcp any host 
200.45.0.35 eq 80",\ cisco-avpair = "ip:inacl#99=deny ip 
any any"
Would it to be ok?



Re: (RADIATOR) Cisco avpair problem

2001-11-19 Thread Hugh Irvine


Hello Gustavo -

On Tuesday 20 November 2001 05:30, Gustavo Moreira wrote:
 I have problems when wanting to permit only the access only to certain
 HOSTS and DNS in a Cisco 7500.

 AddToReply  \
 cisco-avpair = ip:inacl#0=permit ip any any precedence immediate,\
 cisco-avpair = ip:inacl#1=permit udp any host 200.45.0.115 eq 53,\
 cisco-avpair = ip:inacl#2=permit udp any host 200.45.191.35 eq 53,\
 cisco-avpair = ip:inacl#3=permit tcp any any established,\
 cisco-avpair = ip:inacl#4=permit tcp any host 200.45.0.42 eq 80,\
 cisco-avpair = ip:inacl#5=permit tcp any host 200.45.190.149 eq 80,\
 cisco-avpair = ip:inacl#6=permit tcp any host 200.45.190.150 eq 80,\
 cisco-avpair = ip:inacl#7=permit tcp any host 200.45.0.35 eq 80,\
 cisco-avpair = ip:inacl#99=deny ip any any

 Would it to be ok?

This is more a Cisco question than a Radiator question.

Perhaps someone else on the list can answer?

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.