cisco AV-Pairs

permalink · #1 (**permalink**) 03-23-2005

This is a multi-part message in MIME format.

------=_NextPart_000_0030_01C52FC0.CE512D60
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello

I have a question about cisco AV-Pairs and I see many mails about this but
now solutions:

When I receive radius packet from the cisco gw I have some Cisco-AVPair
attribute.

h323-call-origin = "h323-call-origin=answer"

h323-call-type = "h323-call-type=VoIP"

Cisco-AVPair = "h323-incoming-conf-id=366BAF1A 2FB711CC 8499E176 08E27F7C"

I see in the radiusd.conf an option for this: with_cisco_vsa_hack = yes

# Cisco (and Quintum in Cisco mode) sends it's VSA attributes

# with the attribute name *again* in the string, like:

#

# H323-Attribute = "h323-attribute=value".

#

# If this configuration item is set to 'yes', then

# the redundant data in the the attribute text is stripped

# out. The result is:

#

# H323-Attribute = "value"

#

# If you're not running a Cisco or Quintum NAS, you don't

# need this hack.

with_cisco_vsa_hack = yes

/*

* Cisco-AVPair's get packed as:

*

* Cisco-AVPair = "h323-foo-bar = baz"

* Cisco-AVPair = "h323-foo-bar=baz"

*

* which makes sense only if you're a lunatic.

* This code looks for the attribute named inside

* of the string, and if it exists, adds it as a new

* attribute.

*/

But it is not working, I have also checked the cisco dictionary and the
attribute h323-incoming-conf-id is defined

ATTRIBUTE h323-incoming-conf-id 35 string
Cisco

------=_NextPart_000_0030_01C52FC0.CE512D60
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>

</style>

</head>

<body lang=3DFR link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<o:p> </o:p>

Hello<o:p></o:p>

<o:p> </o:p>

I have a question about cisco AV-Pairs and I =
see many
mails about this but now solutions:<o:p></o:p>

<o:p> </o:p>

When I receive radius packet from the cisco =
gw I have
some Cisco-AVPair attribute. <o:p></o:p>

<o:p> </o:p>

  h323-call-origin =3D
"h323-call-origin=3Danswer"<o:p></o:p>

  h323-call-type =3D =
"h323-call-type=3DVoIP"<o:p></o:p>

  Cisco-AVPair =3D =
"h323-incoming-conf-id=3D366BAF1A
2FB711CC 8499E176 08E27F7C"<o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

I see in the radiusd.conf an option for  =
this: =
with_cisco_vsa_hack =3D yes<o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

# =
Cisco (and
Quintum in Cisco mode) sends it's VSA =
attributes<o:p></o:p>

      & nbsp;&nbs=
p;        # with the attribute name =
*again* in
the string, like:<o:p></o:p>

      & nbsp;&nbs=
p;        =
#<o:p></o:p>

      & nbsp;&nbs=
p;        #   =
H323-Attribute =3D
"h323-attribute=3Dvalue".<o:p></o:p>

      & nbsp;&nbs=
p;        =
#<o:p></o:p>

      & nbsp;&nbs=
p;        # If this configuration =
item is set to
'yes', then<o:p></o:p>

      & nbsp;&nbs=
p;        # the redundant data in the =
the
attribute text is stripped<o:p></o:p>

      & nbsp;&nbs=
p;        # out.  The result =
is:<o:p></o:p>

      & nbsp;&nbs=
p;        =
#<o:p></o:p>

      & nbsp;&nbs=
p;        #  H323-Attribute =3D =
"value"<o:p></o:p>

      & nbsp;&nbs=
p;        =
#<o:p></o:p>

      & nbsp;&nbs=
p;        # If you're not running a =
Cisco or
Quintum NAS, you don't<o:p></o:p>

      & nbsp;&nbs=
p;        # need this =
hack.<o:p></o:p>

      & nbsp;&nbs=
p;        with_cisco_vsa_hack =3D =
yes<o:p></o:p>

      & nbsp;&nbs=
p;        =
<o:p></o:p>

      & nbsp;&nbs=
p;        =
/*<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      Cisco-AVPair's get packed =
as:<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      Cisco-AVPair =3D
"h323-foo-bar =3D baz"<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      Cisco-AVPair =3D
"h323-foo-bar=3Dbaz"<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      which makes sense only if
you're a lunatic.<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      This code looks for the
attribute named inside<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      of the string, and if it
exists, adds it as a new<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*      attribute.<o:p></o:p>

      & nbsp;&nbs=
p;       &nbsp ; =
*/<o:p></o:p>

<o:p> </o:p>

But it is not working, I have also checked =
the cisco
dictionary and the attribute h323-incoming-conf-id is =
defined<o:p></o:p>

<o:p> </o:p>

ATTRIBUTE    &nbs p;  =
h323-incoming-conf-id         &nbs=
p; 
35      =
string       &n bsp;  =
Cisco<o:p></o:p>

<o:p> </o:p>

</div>

</body>

</html>

------=_NextPart_000_0030_01C52FC0.CE512D60--

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode