[cisco-nas] cisco-avpair vs Ascend-Data-Filter
Jon Lewis
jlewis at lewis.org
Wed Jul 14 15:19:49 EDT 2004
I've just realized that though my DSL agg routers (3640 and 7206) support
per-user ACLs via Ascend-Data-Filter radius attributes, my as5x00 (mostly
5300)'s don't. The 5300's appear to totally ignore Ascend-Data-Filters
but do accept cisco-avpair = "ip:inacl#1=permit ..." style filters.
The DSL agg routers have been running 12.2M, 12.1T, and 12.2S code, while
the 5300s are running 12.1M. Was support for Ascend-Data-Filter (Ascend
attribute 242) not added until sometime after 12.1M? I don't see mention
of it in go/fn or I'd have looked it up that way.
----------------------------------------------------------------------
Jon Lewis | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
More information about the cisco-nas
mailing list