OpenForum RSS: ACL c Radius

ACL c Radius (enb83)

Thu, 09 Jul 2009 10:51:00 GMT

>�� , �� (AS5300)
>� �� ping �ģ�? ��, � �� ?

��, �� ģ� �� 81.x.x.xx3.
�� Cisco, ACL "ip access-group 101 in" �� :

interface Virtual-Template1
ip unnumbered Loopback0
ip nat inside
ip access-group 101 in
ip virtual-reassembly
peer default ip address pool PPPoE1
ppp authentication pap chap Test-AUTH

� �� Cisco �� ACL:

ip access-list extended 101
!
permit icmp any host 81.x.xxx.xx1 echo
permit icmp any host 81.x.xx.xx1 echo-reply
deny icmp any any
!

�� VPN �� 81.x.xxx.xx1, �� .

1 �� ACL
�� Cisco, � � �� radreply:
�isco-avpair+="ip:inacl=101"
�isco-avpair+="ip:outacl=101"

2 �� ݣ �� . �� debug:
Jul 9 17:47:06.761: RADIUS: Cisco AVpair [1] 35 "ip:traffic-class=out default drop"
Jul 9 17:47:06.761: R

ACL c Radius (shutdown now)

Thu, 09 Jul 2009 09:58:59 GMT

>[�� ]
>Jul 9 09:22:06.707: RADIUS(00000165): Received from id 1645/196
>Jul 9 09:22:06.711: %LINK-3-UPDOWN: Interface Virtual-Access5, changed state to up
>Jul 9 09:22:06.711: RADIUS/ENCODE(00000165):Orig. component type = VPDN
>
>x - ��
>
>Ping c vpn-�� 10.141.1.xxx �� 81.x.xxx.xxx
>
>�� pppoe �� ? Cisco-avpair="ip:inacl#1=deny
>tcp any any eq 25"

�� , �� (AS5300)
� �� ping �ģ�? ��, � �� ?

ACL c Radius (enb83)

Thu, 09 Jul 2009 02:34:08 GMT

>�� , �� ACL ��, �� `#' -
>�� ACL
>
>Cisco-avpair="ip:inacl#1=deny tcp any any eq 25"
>Cisco-avpair+="ip:inacl#2=permit ip any any"

�� Send Access-Request

debug ��:
Jul 9 09:22:06.707: RADIUS: Received from id 1645/196 10.141.1.1:1812, Access-Accept, len 203
Jul 9 09:22:06.707: RADIUS: authenticator 9F 0C E7 71 FE 3A AE 8D - D3 83 11 DB D3 49 A4 01
Jul 9 09:22:06.707: RADIUS: Framed-Protocol [7] 6 PPP [1]
Jul 9 09:22:06.707: RADIUS: Framed-Compression [13] 6 VJ TCP/IP Header Compressi[1]
Jul 9 09:22:06.707: RADIUS: Service-Type [6] 6 Outbound [5]
Jul 9 09:22:06.707: RADIUS: Session-Timeout [27] 6 360000
Jul 9 09:22:06.707: RADIUS: Vendor, Cisco [26] 58
Jul 9 09:22:06.707: RADIUS: Cisco AVpair [1] 52 "ip:inacl#1= permit icmp any host 81.x.xxx.xxx echo"
Jul 9 09:22:06.707: RADIUS: Vendor, Cisco [26] 64
Jul 9 09:2

ACL c Radius (enb83)

Thu, 09 Jul 2009 02:20:26 GMT

>�� , �� ACL ��, �� `#' -
>�� ACL
>
>Cisco-avpair="ip:inacl#1=deny tcp any any eq 25"
>Cisco-avpair+="ip:inacl#2=permit ip any any"

�� Cisco �� , �� L c ��?

ACL c Radius (shutdown now)

Wed, 08 Jul 2009 20:35:14 GMT

>[�� ]
>�� , �� Radius �� ACL ��
>�� Cisco.
>� ��, �� ӣ ��!
>
>�� ACL �� .
>�� Radius � �� radreply:
>
>Cisco-AVPair+=ip:inacl#101= permit icmp any host 81.x.xxx.xxx echo
>Cisco-AVPair+=ip:inacl#101= permit icmp any host 81.x.xxx.xxx echo-reply
>Cisco-AVPair+=ip:inacl#101= deny icmp any any

�� , �� ACL ��, �� `#' - �� ACL

Cisco-avpair="ip:inacl#1=deny tcp any any eq 25"
Cisco-avpair+="ip:inacl#2=permit ip any any"