Thanks. On my local Freeradius server, those realms are just configured for proxy to remote server. I tried to find out, how my server can strip off those attributes. As I tried to look at diff files, attr and other files but could not find any clue that why its doing that. One thing interesting, it does work with one of my client. We receive those A/v from them and pass on to upstream. But from 3 clients, I do see them coming into my server but just one a/v makes to upstream. which is
X-Ascend-Data-Filter = "ip input forward 0" , hence cant implement filters on end-user. Any help , why its doing so. Could be because of Ascend-Data-Filter's format at remote end. The remote one which is working , Ascend-Data-filter is configured as Radius Standard as far as vendor goes, not as Ascend. Rest remote servers are configured as Ascend as I cant find option in them to change it to Radius Standard. Thanks for your kind help. Shohab ----- Original Message ----- From: "Alan DeKok" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, January 28, 2003 4:41 AM Subject: Re: filters being dropped while proxied > "Shohab Baig" <[EMAIL PROTECTED]> wrote: > > yeah thats corrects. FreeRADIUS *does* receive all 4 attributes, and sends > > out only 1. Sorry if I did not describe the problem exactly. > > I have a hard time seeing that happen. When the server uses the > reply from the home server as the basis for it's own reply, it is > *completely* independent of any operators '=' or '+='. > > I'll bet that your local FreeRADIUS configuration tries to add it's > own Ascend filter attributes, and that causes the ones from the home > server to be lost. > > In any case, I don't think it's a good idea to pass through > attributes such as those to your NAS's. The home server can use those > filters to pass/deny traffic from the customer inside of your local > network. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
