Alcatel-Lucent 7750 Reference Manual page 88

Service router radius attributes
Table of Contents

Advertisement

IP and IPv6 Filters
Table 18: IP and IPv6 Filters (limits) (Continued)
Attribute ID
Attribute Name
26-6527-134
Alc-Subscriber-
Filter
26-6527-158
Alc-Nas-Filter-
Rule-Shared
Page 88
Type
Limits
string
Max. 1 VSA.
string
Multiple attributes per
RADIUS message allowed.
7750 SR RADIUS Attributes Reference Guide
SR OS Format
Comma separated list of strings:
Ingr-v4:<number>, Ingr-
v6:<number>,Egr-v4:<number>,Egr-
v6:<number>
where <number> can be one of:
[1..65535] = ignore sla-profile filter;
apply this filter-id
0 = ignore sla-profile filter; do not
assign a new filter (only allowed if no
dynamic subscriber host specific rules
are present)
-1 = No change in filter configuration
-2 = Restore sla-profile filter
For example:Alc-Subscriber-Filter =
Ingr-v4:20,Egr-v4:101
The format is identical to [92] NAS-
Filter-Rule and is defined in RFC
3588 section-4.3. A single filter rule is
a string of format <action>
<direction> <protocol> from
<source> to <destination> <options>
Multiple rules should be separated by
a NUL (0x00). An Alc-Nas-Filter-
Rule-Shared attribute may contain a
partial rule, one rule, or more than one
rule. Filter rules may be continued
across attribute boundaries.
A RADIUS message with Alc-Nas-
Filter-Rule-Shared attribute value
equal to 0x00 or " " (a space) removes
the shared filter entries for that host.
See also
IP Filter Attribute Details on
page
90.
For example:Alc-Nas-Filter-Rule-
Shared = permit in ip from any to
10.1.1.1/32

Advertisement

Table of Contents
loading

Table of Contents