
119346-A Rev. A
Release 5.1 Supplement for Remote Annexes
18
IP Static Route Configuration
When IP is running over the link, you can configure static routes for that
link with the Framed-Route (22) attribute. Note that the Remote Annex
will accept the nonstandard format for this attribute used by the Nautica
RADIUS server as well as the standard format.
Filtering Services
The Remote Annex supports filtering of IP, TCP, and UDP packets.
The Annex-IP-Filter (VSA Bay Networks 28) attribute allows the
RADIUS server to specify a packet filter in the Remote Annex packet
filter format, because RADIUS does not define a specific filter format.
You can then configure the RADIUS server to upload specific packet
filters based on the user’s profile.
The Remote Annex also supports the Filter-Id (11) attribute in
conjunction with the Annex-Filter (VSA Bay Networks 28) attribute.
Upon receiving a Filter-Id (11) attribute, the Remote Annex initiates
another Access-Request. The Remote Annex then waits for an Access-
Accept {2} with the list of the actual filters supplied in Annex-Filter
(VSA Bay Networks 28) attributes. This method requires a
corresponding “pseudo-user” in the RADIUS server. Nested Filter-Id
(11) attributes are not permitted.
The algorithm for applying filters is: the Access-Accept {2} packet is
parsed. If an Annex-Filter (VSA Bay Networks 28) attribute is present,
the filter is applied to the user’s session. If a Filter-Id (11) attribute is
present, then the Remote Annex makes a “pseudo-user” request as
described earlier. The response to the “pseudo-user” request MUST
contain only Annex-Filter (VSA Bay Networks 28) attributes; other
attributes are ignored by the Remote Annex. Note that the order of
processing the filter attributes is not important, because the order of the
Remote Annex filters is not important.
Содержание 5393
Страница 1: ...Part No 119346 A Rev A October 1997 Marketing Release 5 1 Release 5 1 Supplement for Remote Annexes ...
Страница 10: ...119346 A Rev A Contents viii ...
Страница 12: ...119346 A Rev A Tables x ...
Страница 18: ...119346 A Rev A About This Guide xvi ...
Страница 70: ...Index 119346 A Rev A Index 2 ...