Real Time Ascend Maling List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) still trying to hammer out this filter crap



The only thing that is a little weird is the message:

>RADIF: Empty Filter-id in profile

This seems to indicate an error in that attribute.

If you are using a MAX (which seems to be the case from your trace),
then you need to put the filter number, not its name. For example,
if the filter you defined is 90-501, then you should set the
attribute like this:
   Filter-Id = 1

If you were using a TNT, then the filter-id is the name of the
filter.

Cheers,
-J


>From: "Troy Settle" <troy@picus.com>
>To: <ascend-users@max.bungi.com>
>Subject: (ASCEND) still trying to hammer out this filter crap
>Date: Fri, 4 Feb 2000 17:57:38 -0500
>
>
>I'm at wits end, and I can't find any decent help in the manuals, or on
>http://aos.ascend.com or on any of lucent's crappy sites.
>
>Radius is sending the appropriate attribute, the ascend recieved the
>attribute, but my connection is *STILL* not being filtered.  Given the
>filter configured below, I should be able to log in, but not pass *ANY*
>traffic at all.  Yet I'm able to go anywhere I please.
>
>Can *ANYONE* at all give me any clues on this?  I've gone through
>everything I can think of, but still can't get anything to work.
>
>Here's the output of RADIF on the max:
>
>RADIF: Authentication Ack
>RADIF: attribute 6, len 6, 00 00 00 02
>RADIF: attribute 7, len 6, 00 00 00 01
>RADIF: attribute 11, len 8, 66 6f 6f 62
>RADIF: Empty Filter-id in profile
>RADIF: attribute 235, len 6, 00 00 00 01
>RADIF:_freeInfoClassSess
>RADIF: radius type Acct ID = 51
>RADIF: _radiusAcctRequest: type 0 id 51, user name <11:filtertest>
>
>
>Here's the applicable configruations....
>
>
>filtertest      Password = "xxxxxxx"
>         Service-Type = Framed-User ,
>         Framed-Protocol = PPP ,
>         Ascend-Maximum-Channels = 1 ,
>         Filter-Id = "foobar"
>
>
>In the max:
>
>90-501 foobar  (in filter 01)
>  Ip...
>  >Forward=No
>   Src Mask=0.0.0.0
>   Src Adrs=0.0.0.0
>   Dst Mask=0.0.0.0
>   Dst Adrs=0.0.0.0
>   Protocol=0
>   Src Port Cmp=None
>   Src Port #=N/A
>   Dst Port Cmp=None
>   Dst Port #=N/A
>   TCP Estab=N/A
>
>90-501 foobar  (out filter 01)
>  Ip...
>  >Forward=No
>   Src Mask=0.0.0.0
>   Src Adrs=0.0.0.0
>   Dst Mask=0.0.0.0
>   Dst Adrs=0.0.0.0
>   Protocol=0
>   Src Port Cmp=None
>   Src Port #=N/A
>   Dst Port Cmp=None
>   Dst Port #=N/A
>   TCP Estab=N/A
>
>--
>   Troy Settle
>   Picus Communications
>
>++ Ascend Users Mailing List ++
>To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
>To get FAQ'd:	<http://www.nealis.net/ascend/faq>

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>