[radius/ios] Cisco-AVpair string

Carlos A. Silva — Sun, 10 Mar 2019 14:40:49 GMT

hi,

when an ios box comunicates with a radius server it send several fields of information. some of them when you see the actual information look like this:

Mon Feb 23 18:01:11 CST 2004

NAS-IP-Address = 10.230.1.2

NAS-Port = 2

<unknown attribute> 26 (VSA) - Vendor Id/Code (9, 2) = <unknown value> Virtual-Access2

NAS-Port-Type = Virtual

User-Name = lmanzanero@cliente1.com

Called-Station-Id = xxxxxxxxxxx

Calling-Station-Id = yyyyyyyyyyy

Acct-Status-Type = Stop

Class = vpdn

Acct-Authentic = RADIUS

Service-Type = Framed

Acct-Session-Id = 0000002B

Framed-Protocol = PPP

Tunnel-Server-Endpoint = 10.230.1.2\x00

Tunnel-Client-Endpoint = 10.230.1.3\x00

Tunnel-Type = L2TP

<unknown attribute> 90 = <unknown value> l2tp_monterrey\x00

<unknown attribute> 91 = <unknown value> l2tp_monterrey\x00

Acct-Tunnel-Connection = 3507700047\x00

Framed-IP-Address = 10.10.100.10

Acct-Termination-Cause = 1

Acct-Input-Octets = 7209

Acct-Output-Octets = 2076

Acct-Input-Packets = 92

Acct-Output-Packets = 42

Acct-Session-Time = 126

Cisco-AVpair = tunnel-id=l2tp_tunnel

Cisco-AVpair = gw-name=l2tp_tunnel

Cisco-AVpair = disc-cause-ext=1045

Cisco-AVpair = pre-bytes-in=69

Cisco-AVpair = pre-bytes-out=77

Cisco-AVpair = pre-paks-in=2

Cisco-AVpair = pre-paks-out=3

Cisco-AVpair = pre-session-time=1835438

Cisco-AVpair = connect-progress=60

Cisco-AVpair = nas-rx-speed=0

Cisco-AVpair = nas-tx-speed=0

Acct-Delay-Time = 0

Pseudo-Request-Source = 10.230.1.2

Pseudo-Request-Type = Accounting-Request

is there anyway to tell the router/as not to send the 'Cisco-AVpair =' part of the string seen in the sample above and leave the remaining 'tunnel-id=whatever' part. the idea is for a costumer of mine not having to rework they're accounting strategy because of the presentation of the information.

regards,

Re: [radius/ios] Cisco-AVpair string

umedryk — Mon, 01 Mar 2004 20:02:15 GMT

If the separator is ' = ', then it is mandatory field, inevitable. If it is '*', it is optional. Attribute" and "value" are an appropriate AVpair defined in the Cisco TACACS+ specification.

topic [radius/ios] Cisco-AVpair string in Network Access Control

[radius/ios] Cisco-AVpair string

Re: [radius/ios] Cisco-AVpair string