[cisco-nas] cisco-avpair vs Ascend-Data-Filter

[James Parr]

 From what I can recall the ascend data filter attribute is technically a 
vendor specific attribute.  Due to that it may not be supported on all 
platforms.  Unfortunately I don't know all of the specifics, but I know 
freeRADIUS has an attribute x-ascend-data-filter.  From what I can recall 
in freeRADIUS you can use that attribute to pass ascend data filters to the 
AS.  Like I said I don't recall all of the detail right now, but maybe that 
will give you a place to start ...


At 02:19 PM 7/14/2004, Jon Lewis wrote:
>I've just realized that though my DSL agg routers (3640 and 7206) support
>per-user ACLs via Ascend-Data-Filter radius attributes, my as5x00 (mostly
>5300)'s don't.  The 5300's appear to totally ignore Ascend-Data-Filters
>but do accept cisco-avpair = "ip:inacl#1=permit ..." style filters.
>
>The DSL agg routers have been running 12.2M, 12.1T, and 12.2S code, while
>the 5300s are running 12.1M.  Was support for Ascend-Data-Filter (Ascend
>attribute 242) not added until sometime after 12.1M?  I don't see mention
>of it in go/fn or I'd have looked it up that way.
>
>----------------------------------------------------------------------
>  Jon Lewis                   |  I route
>  Senior Network Engineer     |  therefore you are
>  Atlantic Net                |
>_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
>_______________________________________________
>cisco-nas mailing list
>cisco-nas at puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nas