cancel
Showing results for 
Search instead for 
Did you mean: 

Modifying values of RADIUS attributes passed to back-end authentication server

Terebok_
Contributor

Modifying values of RADIUS attributes passed to back-end authentication server

Hello community,

I would apreciate if smb would be able to answer the following question: is there any way of modifying the values of RADIUS

attributes received from the network equipment when passing them to the back-end authentication server?

The purpose for that is letting the back-end server think of SRC-PE cluster as a single entity, so no matter which controller sends the authorization or the accounting requests, NAS-IP-ADDRESS must be the same.

Configuration examples are much appreciated Robot Happy

Kind regards,

Evgeny

4 REPLIES 4
apaul_
Regular Contributor

Re: Modifying values of RADIUS attributes passed to back-end authentication server

Hi,

I think filters in SBR should help.

A filter is a collection of rules for adding, modifying, or removing attributes or attribute values in RADIUS requests and responses.

Terebok_
Contributor

Re: Modifying values of RADIUS attributes passed to back-end authentication server

Thank you!

I think there's another solution here. I may use a single .acc file for both SRCs and specify a value for the appropriate DB column in static manner ('1.1.1.1').

/ET

apaul_
Regular Contributor

Re: Modifying values of RADIUS attributes passed to back-end authentication server

Did you got a chance to test the INSERT statement using static values.

As far as my understanding goes, Values section of accounting files only support RADIUS accounting attribute and pre-defined SBR items.

Terebok_
Contributor

Re: Modifying values of RADIUS attributes passed to back-end authentication server

Yep, I tried using static values instead of %variable or @attribute-name.

Seems like working. Cat Happy

Evgeny