Radius Filters - Bay Networks 5399 Release Note

Remote Access Software Version 5.3 Release Notes

RADIUS Filters

300115-B Rev. A
34
• radius_user_prompt - The RAC's RADIUS login prompt
string. The default string is Annex%susername%c.
• radius_pass_prompt - The RAC's RADIUS password
prompt string. The default string is Annex%spassword%c.
RADIUS filters now reside on the unit, rather than on the RADIUS server.
The unit reads these filters when it boots, and stores the filters in memory,
applying them only to Framed PPP or SLIP users. This is achieved
through the use of a %filters section in the unit's configuration file. An
example %filters section follows:
%filters
begin_filter blockhost
output include ip dst_addr 132.245.33.8 discard
end
The %filters section begins with the keyword %filters and ends with the
beginning of the next keyword section or with the end of the file. One or
more %include statements can be used in the section to include filter
definitions from other configuration files on the boot server or the local
system.
The keyword begin_filter, followed by the filter's name, introduces each
individual filter definition. The filter's name is case-sensitive and can be
up to 23 characters long. The keyword end terminates each filter
definition.
Each line of the filter definition is the same as a RADIUS VSA Annex-
Filter string. (This is the same as the filter subcommand add in the CLI,
but without the add command or the interface specification.)