Editing
FreeRADIUS Proxy - Filter Radius Attributes
(section)
Jump to navigation
Jump to search
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
== Reason == * To allow an offsite vendor control of radius, but limit their ability to supply bad radius attribuites. * MAIN issue: '''Protect your network''' from disallowing the vendor to supply a misconfigured '''FRAMED-IP-ADDRESS''' and/or '''FRAMED-ROUTE''' that could be injected into OSPF or whatever routing protocol you might use. This is accomplished with the '''rlm_attr_filter''' FreeRADIUS Module http://freeradius.org/radiusd/man/rlm_attr_filter.html <source class=text enclose="div">The rlm_attr_filter module exists for filtering certain attributes and values in received ( or transmitted ) radius packets. It gives the server a flexible framework to filter the attributes we send to or receive from home servers or NASes. This makes sense, for example, in an out-sourced dialup situation to various policy decisions, such as restricting a client to certain ranges of Idle-Timeout or Session-Timeout. </source>
Summary:
Please note that all contributions to RARForge may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
RARForge:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Log in
Namespaces
Page
Discussion
English
Views
Read
Edit
View history
More
Search
Navigation
Home
All Pages
All Files
View Categories
Recent changes
Random page
Edit this menu
Tools
What links here
Related changes
Special pages
Page information