- Pulse Secure Community
- :
- About Terebok_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Terebok_
Contributor
24
Posts
0
Kudos
2
Solutions
09-10-2013
05:50:AM
One more thing: you woulld need additional license to use this module in your environment. And noe more thing: consider using SRC in your network. It has Dynamic Service Activator (DSA) embedded component which allows you achieve same goals (activate/deactivate specific sessions on demand). It also supports pre-paid scenarios using Volume Tracking Applicatino component. Hope this helps /Evgeny
... View more
09-10-2013
05:37:AM
These two are totally different products. As mentioned above they could coexist (but it's not necessary as SRC could work with not-Juniper RADIUS servers, same applies to SBR itself: it could handle requests coming from non-juniper equipment). Hope this helps
... View more
04-17-2012
01:37:AM
Hello Apaul, Thanks for the reply.I managed to do a work around. I created attribute Filters using 'replace' action. They're using a static logic, for instance, Acct-Status-Type is replaced by a string AVP which has value "Start". I also added the following piece of configuration to directed realm: [Acct] FilterOut = KZTBNG11-attributes_replacement Evgeny
... View more
04-13-2012
04:59:AM
As Far as I understand, Attribute Filter scripts might be used in this case. Does SBR require a license in this case? Can I use attribute filter scripts for modifying the values of RADIUS attributes in order to pass values to SQL INSERT in desired format? /ET
... View more
04-13-2012
01:38:AM
Seems I found the answer myself http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB19901&actp=search&viewlocale=en_US&searchid=1252754854424&smlogin=true
... View more
04-12-2012
04:44:AM
Hello community, Need some help upon configuring SQL accounting on JSBR. The goal is to pass string attribute values to Oracle database using dictionary file rather than numeric values. For instance, we should pass ïEthernetÍ for NAS-Port-Type RADIUS attribute instead of passing numeric value ï15Í. VALUE NAS-Port-Type Ethernet 15 Any ideas? Regards, Evgeny
... View more
04-11-2012
05:33:AM
Seems like I can pick only one reply as solution. Sorry about that. Anyway, you got your kudo :-) /Evgeny
... View more
04-11-2012
05:31:AM
Yep, I tried using static values instead of %variable or @attribute-name. Seems like working. Evgeny
... View more
04-10-2012
06:34:AM
Hello community, Anybody has experience with configuring SQL Back-end accounting on the SBR? What if some attributes defined within SQL INSERT are missing? Will SBR trigger a transaction or not? Thank you, Evgeny
... View more
04-10-2012
06:31:AM
Thanks for your help guys, I managed to do this. In our particular scenario we're adding realm to user-name when authorizing services on the SRC. So I created two separate realms, one for MX and one for SRC. First is handling undecorated requests and second is handling realm requests. I also defined a separate authentication method for each realm. Evgeny
... View more
04-10-2012
06:24:AM
Thank you! I think there's another solution here. I may use a single .acc file for both SRCs and specify a value for the appropriate DB column in static manner ('1.1.1.1'). /ET
... View more
04-05-2012
12:29:AM
Hello community, I would apreciate if smb would be able to answer the following question: is there any way of modifying the values of RADIUS attributes received from the network equipment when passing them to the back-end authentication server? The purpose for that is letting the back-end server think of SRC-PE cluster as a single entity, so no matter which controller sends the authorization or the accounting requests, NAS-IP-ADDRESS must be the same. Configuration examples are much appreciated Kind regards, Evgeny
... View more
04-05-2012
12:20:AM
Hello sir, I appreciate your help! > Why not create two separate SQL auth files and call them via directed realm based on NAS-IP-ADDRESS? Good point. I think this may work for us. > Unless they've updated the code in SBR Carrier to do things differently from SBR Enterprise SQL, the answer is that you cannot have multiple selects in one auth file. I assume that we should accomplish some sort of Request Routing to map the requests to appropriate auth files, based on NAS-IP-ADDRESS, for instance. Any chance you've got a configuration example for using a directed realm? not necessarily for calling auth files based on NAS-IP-ADDRESS, of course :-) Regards, Evgeny
... View more
04-03-2012
06:40:AM
I also observed that this functionality is supported for SQL accounting: ´ Different request types can be mapped to different SQL statements that may operate against distinct tables within the database. Though, t his option is not specified for the SQL authentication. Evgeny
... View more
04-03-2012
05:59:AM
Hello community, I would apreciate if smb would be able to answer the following question: Is there any chance that we may use multiple SQL selects with Juniper SBR carrier? The purpose for that is to differintiate authentication reqeusts coming from BRAS and authorization requests coming from the policy server? In other words, SQL select #1 would be used when BRAS is trying to establish a user session and SQL select #2 would be used for authorization of individual services available within service bundle. Regards, Evgeny
... View more
09-22-2011
06:20:AM
This is what I'm typing in the condition section: var test1=<CheckDate>; return test1;_ when I'm getting the SERVICESTART this could be seen in logs: 17:17:27.859 MSD 22.09.2011 [Thread-163 (group:HornetQ-client-global-threads-21704826)] [ScriptParser] [10] Script execution result: CheckBalance_condition(null)=null_ And my script is: var test1= new Boolean(true); return test1;_ In 'return atrribute' I typed in "test1" Thanks.
... View more
09-22-2011
05:33:AM
Hello everybody! I've got an Event Handler for a specific event which is SERVICESTART(MY_SERVICE). Is there a chance I can use a java script in condition itself or invoke a script from the condition? The goal is to perform action only in case if script returns TRUE. Thanks in advance .
... View more
09-12-2011
04:01:AM
Hello everybody! I've got a last question. We also pass accounting info to the Oracle DB using SBR. So when DB goes offline accounting info is not stored anywhere. Can it be stored locally on SBR in case of DB unavailability?
... View more
09-12-2011
02:38:AM
Guys, FYI this scenario actually works. After connectivity between SBR and Oracle was lost new subscribers were authenticated using FAILURE section. When Oracle goes back online, SBR is authenticating new subscribers using regular Oracle authentication procedure.
... View more
09-09-2011
05:48:AM
Gentlemen, does anybody know whether a Native User named "unknown user" should be created in my case inside SBR itself?
... View more
09-09-2011
03:42:AM
Hello everybody! Now I've got a working testbed and I'm trying to test SBR's behaviour in case of Oracle Database unavailability_. It happens that a new subscriber cann't be activated in this scenario as MX receives Access-Rejects from the SBR. Here's the contents of FAILURE section of the "radsql.aut" file: [Failure] Accept=1 Profile=iDNetMotor FullName=unknown user_ I should mention one thing: same profile (iDNetMotor) is used for suscribers in a regular scenario when Oracle DB is available. It defines a service bundle and Virtual Router Name. Log is attached. Thanks in advance, Evgeny
... View more
05-30-2011
11:48:PM
_ Hello gentlemen! Thanks a lot for your replies. Now then I can define separate failure scenarios for these two Oracle methods, right? And each profile may use different attributes, correct? Actually I'm not familiar with SBR. We haven't reached a staging phase so I'm just trying to figure out which failure scenarios we may handle with SBR.
... View more
05-30-2011
04:55:AM
Hello everybody! Is there any possibility to handle a scenario when Oracle DB which is used for authentication and authorization becomes unavailable? I've checked the reference guide and found the following: // The [Failure] section of the SQL authentication header file can be used to determine theresult of the authentication process (accept or reject) when connectivity to all of theconfigured SQL databases has failed. For example:[Failure]Accept = 1Profile = XYZFullName = Unauthenticated!_ // So, the question is: what if I should use different Profiles in my environment? Let's imagine we're using a BNG and SRC-PE. We can't use same profile for BNG and SRC-PE as these devices are expecting different attributes in Access-Accept messages. The other option is to include all the attributes that are required for both BNG and SRC-PE into the profile which is used in case of failure. Will it work?? Thanks in advance.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
