I'm attempting to do a global dial-up solution and they're requiring me to use the ascend-data-filter to open up outbound port 25. Simple enough.

I've configured my users file to include the attributes they provided and it seems to be accepting the data. However when I query the radius with radtest it returns odd results. In my users file I have four ADF lines, but only three are returned after the query. Also, some of the lines that are returned contain a trailing 0. I'm new to this "abinary" type so I'm not sure if this is expected behaviour or not.

------------------ users ------------------

bakers  User-Password = "passwd"
        Fall-Through = Yes

DEFAULT
        X-Ascend-Data-Filter += "ip in forward tcp est",
        X-Ascend-Data-Filter += "ip in forward dstip 65.182.224.0/26",
        X-Ascend-Data-Filter += "ip in drop tcp dstport=25",
        X-Ascend-Data-Filter += "ip in forward",
        Simultaneous-Use = 1,
        Session-Timeout = 28800,
        Idle-Timeout = 3600,
        Framed-Compression = Van-Jacobson-TCP-IP,
        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Propel-Accelerate = 0,
        Framed-MTU = 576

------------------ radtest output ------------------
[EMAIL PROTECTED] ~]# !radte
radtest bakers scottb localhost 10 localhost
Sending Access-Request of id 128 to 127.0.0.1:1812
User-Name = "bakers"
User-Password = "scottb"
NAS-IP-Address = snikt
NAS-Port = 10
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=128, length=170
X-Ascend-Data-Filter = "ip in forward tcp est"
X-Ascend-Data-Filter = "ip in forward dstip 65.182.224.0/26 0"
X-Ascend-Data-Filter = "ip in forward 0"
Session-Timeout = 28800
Idle-Timeout = 3600
Framed-Compression = Van-Jacobson-TCP-IP
Service-Type = Framed-User
Framed-Protocol = PPP
Propel-Accelerate = 0
Framed-MTU = 576


--
Scott Baker
Canby Telephone - Network Administrator - RHCE
Ph: 503.266.8253

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to