Matching expression on the ASA with a RADIUS

Unanswered Question
Jan 14th, 2009

Hello,

I get this Expression from my RADIUS server that I would like to match in the ASA Dynamic Access Policy.

DAP_TRACE: Username: hal, aaa.radius["25"]["1"] = Developers

I tried may combinations with no success. Like EVAL(aaa.radius.25, "EQ", "Developers")

it does not work.

This is in a custom DAP under the Advanced section.

can anyone help me match it?

Thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Bernard Magny Wed, 01/14/2009 - 07:24

ok, found it!

this works:

EVAL(aaa.radius["25"], "NE", aaa.cisco.tunnelgroup)

A bit triky, in the Cisco documentation there is a dot "." after, aaa.radius.

Actions

This Discussion