[cisco-nas] cisco-avpair vs Ascend-Data-Filter

Jon Lewis jlewis at lewis.org
Wed Jul 14 15:19:49 EDT 2004


I've just realized that though my DSL agg routers (3640 and 7206) support
per-user ACLs via Ascend-Data-Filter radius attributes, my as5x00 (mostly
5300)'s don't.  The 5300's appear to totally ignore Ascend-Data-Filters
but do accept cisco-avpair = "ip:inacl#1=permit ..." style filters.

The DSL agg routers have been running 12.2M, 12.1T, and 12.2S code, while
the 5300s are running 12.1M.  Was support for Ascend-Data-Filter (Ascend
attribute 242) not added until sometime after 12.1M?  I don't see mention
of it in go/fn or I'd have looked it up that way.

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


More information about the cisco-nas mailing list