Re: multiply Cisco-AVPair request attribute process by regular expression

2013-05-07 Thread Mehdi Ravanbakhsh
Dear Phil Mayers thanks for your reply i am finally do this in my PostgreSQL function before importing to database . Best regards. On Mon, May 6, 2013 at 6:07 PM, Phil Mayers wrote: > On 04/28/2013 09:14 PM, Mehdi Ravanbakhsh wrote: > > i have tow Cisco-AVPair attribute in reque

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-05-06 Thread Phil Mayers
On 04/28/2013 09:14 PM, Mehdi Ravanbakhsh wrote: i have tow Cisco-AVPair attribute in request and i need to process one of them that being started by 'circuit-id-tag=' so i use this : if (Cisco-AVpair =~ /^circuit-id-tag=(.*)$/) { upda

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-29 Thread A . L . M . Buxey
Hi, >i test it , but if i use Cisco-AVPair[0] and Cisco-AVPair[1] first one >and second one is not working. you need to check which attribute is which. >Do i need to to move them in some variable then use regular exertion >?(soothing like this) : > >

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-29 Thread Mehdi Ravanbakhsh
ero. This feature is NOT available for non-attribute dynamic > translations, like %{sql:...}. > > For example, %{User-Name[0]} is the same as %{User-Name} > > The variable %{Cisco-AVPair[2]} will reference the value of the THIRD > Cisco-AVPair attribute (if it exists) in the request p

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-29 Thread Olivier Beytrison
N'th occurance of the given attribute. The syntax %{:Attribute-Name[index]} may also be used. The indexes start at zero. This feature is NOT available for non-attribute dynamic translations, like %{sql:...}. For example, %{User-Name[0]} is the same as %{User-Name} The variable %{Cisco-AVP

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread Mehdi Ravanbakhsh
Dear A.L.M.Buxey you still havent said what you actually want as values. you just say it doesnt work. you also ignore my request for debug output to see what/where. I need "*Azadegan-1 atm 2/16:251:0.35*" from this attribute :Cisco-AVPair = "circuit-id-tag=Azadegan-1 at

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread A . L . M . Buxey
Hi, >i have 2 Cisco-AVPair in request attribute : > > Cisco-AVPair = "client-mac-address=90f6.52d2.384f" > > and > >Cisco-AVPair = "circuit-id-tag=Azadegan-1 atm 2/16:251:0.35" you still havent said what you actually want as values. you

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread Mehdi Ravanbakhsh
avr. 2013, at 22:58, Mehdi Ravanbakhsh wrote: > > Dear > A.L.M.Buxey > > i have 2 Cisco-AVPair in request attribute : > > Cisco-AVPair = "client-mac-address=90f6.52d2.384f" > > and > > Cisco-AVPair = "circuit-id-tag=Azadegan-1 atm 2/16:251:0.35" >

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread Olivier Beytrison
On 28 avr. 2013, at 22:58, Mehdi Ravanbakhsh wrote: > Dear > A.L.M.Buxey > > i have 2 Cisco-AVPair in request attribute : > > Cisco-AVPair = "client-mac-address=90f6.52d2.384f" > > and > > Cisco-AVPair = "circuit-id-tag=Azadegan-1 atm 2/

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread Mehdi Ravanbakhsh
Dear A.L.M.Buxey i have 2 Cisco-AVPair in request attribute : Cisco-AVPair = "client-mac-address=90f6.52d2.384f" and Cisco-AVPair = "circuit-id-tag=Azadegan-1 atm 2/16:251:0.35" for first one i use : if (Cisco-AVpair =~ /^client-mac-address=([a-f0-9] [a-f0

Re: multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread A . L . M . Buxey
Hi, >but it is not working ! what do you mean? what do you want to do (ie what do you want to have/get and what do you actually get?) - what does the server say/do (ie. run in full debug mode to see what its saying/doing to your logic. alan - List info/subscribe/unsubscribe? See http://www.f

multiply Cisco-AVPair request attribute process by regular expression

2013-04-28 Thread Mehdi Ravanbakhsh
Hi All I have one Cisco 1 NAS inmy network and this is the authenticate request : Packet-Type = Access-Request Cisco-AVPair = "client-mac-address=f43e.6166.dba0" Framed-Protocol = PPP User-Name = "7727221873" NAS-Port-Type = Ethernet NAS-Port = 7146

Re: Privileges cisco-avpair = "shell:priv-lvl=10" doesn't work

2012-10-12 Thread Øystein Gyland
On Fri, 2012-10-12 at 09:13 +0200, Ruben Blendeman wrote: > Hi, > > I want assign different privileges to users, these are my users: > > admin Cleartext-Password := "admin" > cisco-avpair = "shell:priv-lvl=15" > >

Privileges cisco-avpair = "shell:priv-lvl=10" doesn't work

2012-10-12 Thread Ruben Blendeman
Hi, I want assign different privileges to users, these are my users: admin Cleartext-Password := "admin" cisco-avpair = "shell:priv-lvl=15" user1Cleartext-Password := "user1" cisco-avpair = "shell:priv-lvl=10" u

Re: Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-23 Thread Matthew Newton
On Sat, Jun 23, 2012 at 08:35:31AM +0800, John wrote: > With this solution, both Ip phone or other device will be marked > as 'voice', right? Yes > Can we distinguish it is a 'voice' device?  then add > Cisco-AVPair = "device-traffic-class=voice" . oth

Re: Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-22 Thread John
  Thanks. Matthew   With this solution, both Ip phone or other device will be marked as 'voice', right?   Can we distinguish it is a 'voice' device?  then add Cisco-AVPair = "device-traffic-class=voice" . otherwise, don't add this attribute.   Hangjun --- 12年

Re: Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-22 Thread Matthew Newton
On Sat, Jun 23, 2012 at 06:24:40AM +0800, John wrote: > Is there a way that freeradius can tell it is a VOICE device?  > Like ACS server: Cisco-AVPair = "device-traffic-class=voice". man unlang update reply { cisco-avpair := "device-traffic-class=voice" } Matthew

Question on Cisco-AVPair = "device-traffic-class=voice"

2012-06-22 Thread John
Hi,   Is there a way that freeradius can tell it is a VOICE device?  Like ACS server: Cisco-AVPair = "device-traffic-class=voice".   Here is a link to IP Telephony In IEEE 802.1X ... http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/config_guide_c17-605524.html

Re: vrf-aware vpdn / l2tp termination / cisco-avpair

2010-03-16 Thread Alexander
--- On Mon, 3/15/10, Alexander wrote: > From: Alexander > Subject: vrf-aware vpdn / l2tp termination / cisco-avpair > To: freeradius-users@lists.freeradius.org > Date: Monday, March 15, 2010, 2:35 PM Problem solved, turned out that I was using wrong operators in FR and one import

vrf-aware vpdn / l2tp termination / cisco-avpair

2010-03-15 Thread Alexander
Hello all, I am using FreeRadius 2.1.8 with MySQL to authenticate BBA users. I get L2TP sessions from my ISP (=LAC) arriving in VRF l2tp_vrf which I want to terminate in a different VRF (e.g. inet_vrf). Basic authentication works as long as I do not intruduce cisco-avpair attributes. Which

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-10 Thread Joe Maimon
Alan DeKok wrote: Joe Maimon wrote: It does make the code a bit more hairy - I have been making a stab at this and it seems to be quite ugly. Hmm... much of this work could be relegated to the radius_do_cmp() function. It needs to do: a) return if condition matches b) continue if it

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Joe Maimon
Alan DeKok wrote: Joe Maimon wrote: I could use vsa hack. But it is a hack and its impact is a bit larger than the actual functionality I want. I just want to leave everything else unchanged but to have the mac address represented as calling-station-id, which for anything ethernet and not POTS

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Alan DeKok
age, its the second one. > In interim-update, its the fourth. For my purposes, only the Start one > is of value, but having to know the order of attributes seems to be a > bit flimsy. Well... yes. > Its problematic enough that a NAS can behave badly when sending them >

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Joe Maimon
to know the order of attributes seems to be a bit flimsy. Its problematic enough that a NAS can behave badly when sending them attributes in the wrong order. (cisco-avpair = lcp:interface-config="") (And how does the vsa_hack deal with this form of the avpair?) It is quite norm

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Alan DeKok
Joe Maimon wrote: > According to what I see turning on cisco vsa hack can overwrite any > existing attributes that happen to match the value in the avpair The Cisco boxes don't send: Cisco-AVPair = "foo = bar" foo = bar *both* in the same packet.

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Joe Maimon
nsequences. Like... ? unlang should properly loop over the vp list, like other paircompares do. I would prefer that behavior to be *explicit* rather than *implicit*. I have patched this kind of oversight before elsewhere, not sure if thats the right approach here. Maybe something like:

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Bryan Campbell
list, like other paircompares do. I would prefer that behavior to be *explicit* rather than *implicit*. I have patched this kind of oversight before elsewhere, not sure if thats the right approach here. Maybe something like: if (*Cisco-AVpair =~ /^client-mac-address

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Bjørn Mork
Alan DeKok writes: > Maybe something like: > > if (*Cisco-AVpair =~ /^client-mac-address=(.+)$/) { > > i.e. "*" means "any one matches" Is it ever useful to match on a single one? You'll always have a hard time knowing the order and number

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-07 Thread Alan DeKok
licit*. > I have patched this kind of oversight before elsewhere, not sure if > thats the right approach here. Maybe something like: if (*Cisco-AVpair =~ /^client-mac-address=(.+)$/) { i.e. "*" means "any one matches" Alan DeKok. - List info/subscribe/unsu

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-07 Thread Joe Maimon
the mailing list archives. This has been done before by at least a dozen people. bbc Joe Maimon wrote: I have this in preacct, and it works. if ("%{Cisco-AVpair[3]}" =~ /^client-mac-address=(.+)$/) { if (!Calling-Station-Id) { update request { Calling-Station-Id := "%{1}" }

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-07 Thread Bryan Campbell
mailing list archives. This has been done before by at least a dozen people. bbc Joe Maimon wrote: I have this in preacct, and it works. if ("%{Cisco-AVpair[3]}" =~ /^client-mac-address=(.+)$/) { if (!Calling-Station-Id) { upda

Cisco-AVpair accounting client-mac-address with unlang

2010-01-07 Thread Joe Maimon
I have this in preacct, and it works. if ("%{Cisco-AVpair[3]}" =~ /^client-mac-address=(.+)$/) { if (!Calling-Station-Id) { update request { Calling-Station-

Re: Cisco-AVPair Accounting

2009-12-08 Thread Bryan Campbell
: One of the attributes we are after is the client-mac-address from Cisco-AVPair = "client-mac-address=0012.3fb2.15d2". So far it is now converted to an attribute of its own client-mac-address=0012.3fb2.15d2. (by setting cisco-av-hack to yes and adding some attributes to the dictionar

Re: Cisco-AVPair Accounting

2009-12-08 Thread Bryan Campbell
Cisco-AVPair = "client-mac-address=0012.3fb2.15d2". So far it is now converted to an attribute of its own client-mac-address=0012.3fb2.15d2. (by setting cisco-av-hack to yes and adding some attributes to the dictionary) Now to get it to be the callingstationid. Looks like that will re

RE: Cisco-AVPair Accounting

2009-12-07 Thread Michael Bowe
> One of the attributes we are after is the client-mac-address from > Cisco-AVPair = "client-mac-address=0012.3fb2.15d2". > > So far it is now converted to an attribute of its own > client-mac-address=0012.3fb2.15d2. (by setting cisco-av-hack to yes > and >

Re: Cisco-AVPair Accounting

2009-12-07 Thread Bryan Campbell
One of the attributes we are after is the client-mac-address from Cisco-AVPair = "client-mac-address=0012.3fb2.15d2". So far it is now converted to an attribute of its own client-mac-address=0012.3fb2.15d2. (by setting cisco-av-hack to yes and adding some attributes to the diction

Re: Cisco-AVPair Accounting

2009-12-07 Thread Bryan Campbell
will create newattributes with these names. Now all that remains is figuring out the rewrite to stuff the odd Cisco-AVPair attribute values in pre-existing attributes that are already in the schema. - t...@kalik.net wrote: We use Freeradius/MySQL with Cisco-AVPair entries to send

Re: Cisco-AVPair Accounting

2009-12-07 Thread Bob Franklin
On Mon, 7 Dec 2009, Bryan Campbell wrote: O.K. That gets us to the per packet instances of the Cisco-AVPair. We can access the array of two or five instances of Cisco-AVPair that are in the respective packets. That gets us to the strings that are defined. How about using a regexp: if

Re: Cisco-AVPair Accounting

2009-12-07 Thread Bryan Campbell
. . . >man unlang. Read about variables. > >Ivan Kalik O.K. That gets us to the per packet instances of the Cisco-AVPair. We can access the array of two or five instances of Cisco-AVPair that are in the respective packets. That gets us to the strings that are defined. Once you

Re: Cisco-AVPair Accounting

2009-12-07 Thread tnt
> We use Freeradius/MySQL with Cisco-AVPair entries to send radreplies and > radgroupreplies that specify speeds and such with great success. > However, we are having a bit of difficulty sorting out how to sort out > Cisco-AVPair accounting entries so that we can insert them into th

Cisco-AVPair Accounting

2009-12-07 Thread Bryan Campbell
Afternoon - We use Freeradius/MySQL with Cisco-AVPair entries to send radreplies and radgroupreplies that specify speeds and such with great success. However, we are having a bit of difficulty sorting out how to sort out Cisco-AVPair accounting entries so that we can insert them into the

Re: How to store multiple Cisco-AVPair to sql database

2009-11-14 Thread Alan DeKok
Mark Jones wrote: > As you can see in the below accounting packet there are multiple > cisco-avpsir entries. how can i referecne the second and seccussive > entries when trying to store them in and sql database. $ man unlang See the VARIABLES section Alan DeKok. - List info/subscribe/unsubsc

How to store multiple Cisco-AVPair to sql database

2009-11-13 Thread Mark Jones
As you can see in the below accounting packet there are multiple cisco-avpsir entries. how can i referecne the second and seccussive entries when trying to store them in and sql database. Fri Nov 13 10:56:23 2009 Acct-Session-Id = "004D8A64" Cisco-AVPair = &

Re: Cisco AVpair(client-mac-address) and Calling-Station-Id attribute

2009-10-27 Thread Alan DeKok
Egi Konomi wrote: > I want to know if there is a possibility to rewrite the : Cisco-AVPair = > "client-mac-address=000f.ea20.e1ad" to "Calling-Station-Id = > 000f.ea20.e1ad" See the "attr_filter" module. Or, in 2.x, you can just use "unlang&quo

Cisco AVpair(client-mac-address) and Calling-Station-Id attribute

2009-10-27 Thread Egi Konomi
Hello, I am using freeradius 1.1.8 with a Cisco7301 router as a NAS, but the NAS does not send the Calling-Station-Id attribute, insted it uses "Cisco-AVPair = "client-mac-address=000f.ea20.e1ad"" They have changed this attribute in modern IOS versions. I want t

Re: How can I output Cisco-AVPair Attributes in linelog?

2009-10-06 Thread Bob Franklin
On Tue, 6 Oct 2009, David Mitchell wrote: elsif ("%{Cisco-AVPair}" =~ /^ssid=(.+)$/) { # a Cisco AP update request { UCam-Location-Id := "%{NAS-IP-Address}" UCam-Essid-Name := "%{1}" } I've never seen a

Re: How can I output Cisco-AVPair Attributes in linelog?

2009-10-06 Thread Ivan Kalik
> Is usage of Cisco-AVPair, or other similar variables, common enough to > include code for it? For example, perhaps they could be accessed via a > Perl hash-like structure as %{Cisco-AVPair[ssid]} to get "TEST" from > Cisco-AVPair = "ssid=TEST". I don't think

Re: How can I output Cisco-AVPair Attributes in linelog?

2009-10-06 Thread David Mitchell
Bob Franklin wrote: > On Tue, 6 Oct 2009, Alan DeKok wrote: > >>> Start = "Connect: User: %{User-Name} ( client: %{Calling-Station-Id} >>> location: %{WISPr-Location-Name}) %{Cisco-AVPair[*]}" >>> >>> or the first one by using %{Cisco-AVPair[1]

Re: How can I output Cisco-AVPair Attributes in linelog?

2009-10-06 Thread David Mitchell
Alan DeKok wrote: > David Mitchell wrote: >> The SSID is in a Cisco-AVPair. I can include them all via >> >> Start = "Connect: User: %{User-Name} ( client: %{Calling-Station-Id} >> location: %{WISPr-Location-Name}) %{Cisco-AVPair[*]}" >> >> or the

Re: How can I output Cisco-AVPair Attributes in linelog?

2009-10-06 Thread Bob Franklin
On Tue, 6 Oct 2009, Alan DeKok wrote: Start = "Connect: User: %{User-Name} ( client: %{Calling-Station-Id} location: %{WISPr-Location-Name}) %{Cisco-AVPair[*]}" or the first one by using %{Cisco-AVPair[1]}. But I have no guarantee that the ssid will be the first AV pair. Yes...

Re: How can I output Cisco-AVPair Attributes in linelog?

2009-10-06 Thread Alan DeKok
David Mitchell wrote: > The SSID is in a Cisco-AVPair. I can include them all via > > Start = "Connect: User: %{User-Name} ( client: %{Calling-Station-Id} > location: %{WISPr-Location-Name}) %{Cisco-AVPair[*]}" > > or the first one by using %{Cisco-AVPair[1]}. But I

How can I output Cisco-AVPair Attributes in linelog?

2009-10-05 Thread David Mitchell
ents of the received accounting requests: rad_recv: Accounting-Request packet from host 10.2.2.2 port 1646, id=62, length=234 Acct-Session-Id = "004D" Called-Station-Id = "001b.d517.4080" Calling-Station-Id = "0026.4aea.ba42" Cisco-AVPair

about Cisco-AVPair attribute

2009-06-30 Thread Tseveendorj
Hello, Sorry for asking cisco related thing. What kind of Cisco-AVPair attribute's value to known for policy based shaping. Currently I'm using following configuration with known Cisco-AVPair attribute's value ip:sub-policy-Out=1024Kbps, ip:sub-policy-In=1024Kbps policy-

Re: cisco-avpair

2009-06-29 Thread Ivan Kalik
> Is it possible if I use only one cisco-avpair like: > > > Cisco-AVPair = "lcp:interface-config=ip vrf forwarding > pool;lcp:interface-config=ip unnumbered loopback > 5;lcp:interface-config=peer default ip address pool poolxxx" > > and also &

cisco-avpair

2009-06-29 Thread Martin Badie
Hi, Is it possible if I use only one cisco-avpair like: Cisco-AVPair = "lcp:interface-config=ip vrf forwarding pool;lcp:interface-config=ip unnumbered loopback 5;lcp:interface-config=peer default ip address pool poolxxx" and also Framed-Route = "123.123.134.111

Re: Cisco-avpair

2009-06-10 Thread Ivan Kalik
> Anybody knows how to configure freeradius to send access list > configuration back to a cisco router applied to Dialer 0. Cisco avpair is just another attribute for radius server - zou send it like anz other. Read Cisco documentation to find out how it should look like. Ivan Kalik

Cisco-avpair

2009-06-09 Thread Pallares, Jorge
Hi all, Anybody knows how to configure freeradius to send access list configuration back to a cisco router applied to Dialer 0. Thanks, Jorge Pallares Email disclaimer: The information contained in or attached to this communication may contain confidential

Re: Freeradius and Cisco (cisco-avpair = "shell:priv-lvl=15"doesn't work)

2008-07-11 Thread David Mitchell
Ivan Kalik wrote: > You need to have a look at switch radius documentation to see which > Service -Type are you suposed to return. Administrative-User? This is IOS, correct? You need to add 'aaa authorization exec default group radius none' to your config or else the switch will ignore your higher

Re: Freeradius and Cisco (cisco-avpair = "shell:priv-lvl=15"doesn't work)

2008-07-11 Thread Ivan Kalik
You need to have a look at switch radius documentation to see which Service -Type are you suposed to return. Administrative-User? Ivan Kalik Kalik Informatika ISP Dana 11/7/2008, "Simo" <[EMAIL PROTECTED]> piše: >On Fr, 2008-07-11 at 10:38 +0100, Ivan Kalik wrote: >> Cisco-NAS-Port = "tty2" > >

Re: Freeradius and Cisco (cisco-avpair = "shell:priv-lvl=15" doesn't work)

2008-07-11 Thread Simo
On Fr, 2008-07-11 at 10:38 +0100, Ivan Kalik wrote: > Cisco-NAS-Port = "tty2" Thnx for your reply. I have setting the NAS-Port to tty2 but i'm still having the same Problem. And here is the reply of switch (priv=1 was requested): 04:25:06: AAA: parse name=tty2 idb type=-1 tty=-1 04:25:06: AAA: n

Re: Freeradius and Cisco (cisco-avpair = "shell:priv-lvl=15" doesn't work)

2008-07-11 Thread Ivan Kalik
Something is not right here. Request is for: >Cisco-NAS-Port = "tty2" and there is no Service-Type attribute in the request. And then Cisco aaa debug is for a different port which should have a Service-Type in the request: >03:27:12: AAA/AUTHEN/START (2153705482): port='tty3' list='' >ac

Re: Freeradius and Cisco (cisco-avpair = "shell:priv-lvl=15" doesn't work)

2008-07-11 Thread Alan DeKok
> But i'm still having a problem with cisco-avpair attribute. I don't know > why shell:priv-lvl=15 doesn't work. I want, that the user will be > directly logged in to the priv-lvl without doing the enable > authentication. Read the switch documentation to see wha

Freeradius and Cisco (cisco-avpair = "shell:priv-lvl=15" doesn't work)

2008-07-11 Thread Simo
27;m still having a problem with cisco-avpair attribute. I don't know why shell:priv-lvl=15 doesn't work. I want, that the user will be directly logged in to the priv-lvl without doing the enable authentication. i'm using the Version 1.1.7 of Radius (Debian Package) and here ist my confi

Re: FreeRadius trims value of the Cisco-AVPair attribute

2008-05-29 Thread Alan DeKok
Evgeney Bakhtin wrote: > I don't need to use "cisco-vsa-hack", because I need to get not > H323-Attribute = "h323-attribute=value" > I need to have > ... > Cisco-AVPair := "h323-ivr-in=terminal-alias:zhekha,0921877" > ... > in radius-respons

Re: FreeRadius trims value of the Cisco-AVPair attribute

2008-05-27 Thread Evgeney Bakhtin
"PCPhoneGK" NAS-Port-Type = Virtual Service-Type = Login-User Framed-IP-Address = 10.160.1.150 Cisco-AVPair = "h323-ivr-out=terminal-alias:zhekha2;" server GNUGK { +- entering group authorize ++[preprocess] returns ok rlm_chap: Setting 'Auth-Type :=

Re: FreeRadius trims value of the Cisco-AVPair attribute

2008-05-27 Thread Pshem Kowalczyk
Hi, Attaching output from a debug run (with -X) might help. kind regards Pshem - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How can I get all values of Cisco AVpair from NAS if there are multiple values

2007-05-15 Thread Александр Никулин
Hello How can I get all values of Cisco AVpair from NAS if there are multiple values, for example May 14 16:04:38.193: RADIUS: Cisco AVpair [1] 54 "faxrelay-start-time=16:03:58.021 NSK Mon May 14 2007" May 14 16:04:38.193: RADIUS: Vendor, Cisco [26] 59 May 14 16

Re: Cisco-AVPair = "client-mac-address=000f.ea20.e1ad" to Calling-Station-Id = "000f.ea20.e1ad" rule

2007-02-08 Thread Bjørn Mork
Victor <[EMAIL PROTECTED]> writes: > I have accouning packet with attributes like: > > Acct-Session-Id = "0/0/1/3_0100000000CC" > Cisco-AVPair = "client-mac-address=000f.ea20.e1ad" > Framed-Protocol = PPP > Framed-IP-A

Cisco-AVPair = "client-mac-address=000f.ea20.e1ad" to Calling-Station-Id = "000f.ea20.e1ad" rule

2007-02-08 Thread Victor
Hello, I have accouning packet with attributes like: Acct-Session-Id = "0/0/1/3_010000CC" Cisco-AVPair = "client-mac-address=000f.ea20.e1ad" Framed-Protocol = PPP Framed-IP-Address = 192.168.0.235 User-Name = "global" Cisco-AVPair

freeradius + Cisco-AVpair rate-limit attributes + mysql

2007-01-22 Thread satish patel
|0 | | 7 | 128KB | Cisco-Avpair| = | lcp:interface-config#1=rate-limit output 128000 1 1 conform-action continue exceed-action dr

freeradius + mysql + Cisco-AVpair

2007-01-22 Thread satish patel
Dear all I have freeradius setup with cisco vpdn with mysql. i am useing cisco-avpair attributes for rate-limit to my user traffic it is working fine with /etc/raddb/user file but when i put this attribites in mysql databases it is not working so now i need help to implement

Re: Cisco-AVpair rate-limit attributes

2007-01-20 Thread satish patel
Thx dear ... Satish Patel Alexander Serkin <[EMAIL PROTECTED]> wrote: satish patel wrote: > Thanks dear > > now my cisco-AVPair working with users file but > tell me is it work with mysql tables ? but i have notice when i set why

Re: Cisco-AVpair rate-limit attributes

2007-01-19 Thread Alexander Serkin
satish patel wrote: Thanks dear now my cisco-AVPair working with users file but tell me is it work with mysql tables ? but i have notice when i set why not? 64000 then my bandwidth meter give me 500 kbps u r passing is it any issue regarding rate-limit ??? I&#

Re: Cisco-AVpair rate-limit attributes

2007-01-19 Thread satish patel
Thanks dear now my cisco-AVPair working with users file but tell me is it work with mysql tables ? but i have notice when i set 64000 then my bandwidth meter give me 500 kbps u r passing is it any issue regarding rate-limit ??? Satish Patel Alexander Serkin

Re: Cisco-AVpair rate-limit attributes

2007-01-19 Thread Alexander Serkin
and 128 kbps for user2 so is it possible through the Cisco-Avpair attributes. i have find lots of document regarding cisco-AVpair attributes then i test it on my network but i dont know it will working or not You have to identify the Virtual-Access interface of this user when he is online and

Cisco-AVpair rate-limit attributes

2007-01-18 Thread satish patel
user2 so is it possible through the Cisco-Avpair attributes. i have find lots of document regarding cisco-AVpair attributes then i test it on my network but i dont know it will working or not my test exmple #cat /etc/raddb/users DEFAULT Service-Type := Framed-User Framed

Re: Parse errors with Cisco-Avpair

2007-01-09 Thread Alan DeKok
und several guides for cisco > logins, but they did not cover ACLs. Any help would be appreciated. The problem isn't the ACL's, but the format of the entry you provided. > *users file:* > > steve Auth-Type := Local, User-Password == "testing" > Ci

Parse errors with Cisco-Avpair

2007-01-08 Thread William Gemmill
dule: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acct

Re: multiline line values for Cisco-AVPair (in ldap.attrmap)

2006-11-07 Thread Alan DeKok
"Peter Param" <[EMAIL PROTECTED]> wrote: > I've got Cisco-AVPair for an ldap.attrmap entry and it works ...but > unfortunately only for the first occurence of that attribute from the > LDAP schema (it will pick the first in the schema). How do I map and > retu

multiline line values for Cisco-AVPair (in ldap.attrmap)

2006-11-07 Thread Peter Param
hey, I've got Cisco-AVPair for an ldap.attrmap entry and it works ...but unfortunately only for the first occurence of that attribute from the LDAP schema (it will pick the first in the schema). How do I map and return four Cisco-AVPair entries? Is there a particular multiline separator t

Re: Cisco avpair

2006-05-30 Thread Joe Maimon
Pierre LEONARD wrote: Joe Maimon a écrit : Good luck! Joe thanks Joe but I'm a french student and i havent any acces to the cisco site (with cco login) remove the "customer/" and it should work as normal. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.htm

Re: Cisco avpair

2006-05-30 Thread Pierre LEONARD
Joe Maimon a écrit : Pierre LEONARD wrote: Hi everybody i search an exhaustiv list of cisco avpair parameters that the radius server could return to a cisco router... i hope somebody will be able to help me with an URL or a list. thanks in advance This isnt the right place to ask

Re: Cisco avpair

2006-05-30 Thread Joe Maimon
Pierre LEONARD wrote: Hi everybody i search an exhaustiv list of cisco avpair parameters that the radius server could return to a cisco router... i hope somebody will be able to help me with an URL or a list. thanks in advance This isnt the right place to ask. Try cisco-nsp or open a

Cisco avpair

2006-05-30 Thread Pierre LEONARD
Hi everybody i search an exhaustiv list of cisco avpair parameters that the radius server could return to a cisco router... i hope somebody will be able to help me with an URL or a list. thanks in advance begin:vcard fn:Pierre LEONARD n:LEONARD;Pierre org:Debian Etch - Testing ;Linux user

Re: external ldap with cisco-avpair

2006-04-28 Thread Alan DeKok
Nuno Reis <[EMAIL PROTECTED]> wrote: > Now I want to make a integration with an external ldap, for example, active > directory, however I dont have a clue how to preserve the cisco-avpairs. > Should be the ldap to send it to the freeradius on every authentication > request? yes. Alan DeKok. -

external ldap with cisco-avpair

2006-04-28 Thread Nuno Reis
Hi, I use freeradius for wireless authentication, for several ssids. I have the following config on the users.config: USER User-Password == "**" Service-Type = Shell-User, cisco-avpair = "shell:priv-lvl=15", cisco-avpair+= "ssid=wifi1",

Re: Cisco-AVPair Route Map

2006-04-18 Thread Joe Maimon
Alan Lumb wrote: Hi Everyone. I'm struggling to find concise documentation on Cisco-AVPairs (and what pairs cisco support) - can anyone help me with this? Mainly I am trying to setup a walled garden system based on radius reply, using a route map with set next hop e.g. route-map walled-gar

Cisco-AVPair Route Map

2006-04-18 Thread Alan Lumb
Hi Everyone. I'm struggling to find concise documentation on Cisco-AVPairs (and what pairs cisco support) - can anyone help me with this? Mainly I am trying to setup a walled garden system based on radius reply, using a route map with set next hop e.g. route-map walled-garden permit 10 set ip n

Re: Problem with Cisco-AVPair

2006-04-18 Thread Phil Mayers
Antonio Matera wrote: It is possibile that my problem is this? rlm_eap_peap: Had sent TLV failure. User was rejcted rejected earlier in this session. Yes. So read (or send to the list for others to help you with) the FULL debug output, not just the last packet. - List info/subscribe/uns

Re: Problem with Cisco-AVPair

2006-04-18 Thread Antonio Matera
Hi, I don't know how can i resolve my problem ... With this user: vlan3 Cisco-AVPair == "ssid=VLAN3", User-Password := "test" Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 3, Tunnel-Type = VLAN I have always the same

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with Cisco-AVPair

2006-04-16 Thread Dag Bodin
Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på [EMAIL PROTECTED] eller +46-612-717780 I’m out of office until April 24, contact office: [EMAIL PROTECTED] or +46-612-717780 - List info/subscribe/unsubscribe? See http://www.freeradi

  1   2   3   >