Alcatel-Lucent 8950 AAA User Manual page 269

Message Logging
............................................................................................................................................................................................................................................................
•
6. When done, click
Result:
Figure 16-29 Log Rule Configuration Wizard–Matching Rule
7. In this step you may define a matching rule to test the value of 8950 AAA PolicyFlow
variables.
•
•
– Enter an expression - Expressions are matched against PolicyFlow variables, such
– Enter the value that the expression must match
Important!
expression: ${request.User-Name}-${request.NAS-IP-Address} might be matched
against the value "rdp-10.0.1.2" This expression would only match requests where the
User-Name was "rdp" and the request originated from a client with an address of
10.0.1.2.
............................................................................................................................................................................................................................................................
365-360-001R6.0
Issue 1, December 2008
Current Server Log Area - A specific area of the running 8950 AAA server. These
areas include one area for each plug-in in the PolicyFlow program, one for each
engine listener, etc. You may click
Areas. This option is available only when the 8950 AAA server is running.
Next.
The Matching Rule panel appears as shown in
Match All Radius Requests - All RADIUS requests will be considered for logging
Match Data in Radius with Expression - Only those RADIUS requests that match
the limited wildcard expression will be considered for logging. Further, logging
will only occur at those times when the expression is valid. For example, if a 8950
AAA variable matched in an expression changes value during the processing so
that it no longer matches the expression, the logging will stop.
as,
${request.User-Name}
A possible value for the expression noted above might be
*@alcatel-lucent.com
It is possible to match against more than one value. For example, the
to see a list of the currently available Log
Figure 16-29.
Log Rules
16 - 3 7