Matching expression on the ASA with a RADIUS

Bernard Magny · ‎01-14-2009

Hello,

I get this Expression from my RADIUS server that I would like to match in the ASA Dynamic Access Policy.

DAP_TRACE: Username: hal, aaa.radius["25"]["1"] = Developers

I tried may combinations with no success. Like EVAL(aaa.radius.25, "EQ", "Developers")

it does not work.

This is in a custom DAP under the Advanced section.

can anyone help me match it?

Thanks

Bernard Magny · ‎01-14-2009

ok, found it!

this works:

EVAL(aaa.radius["25"], "NE", aaa.cisco.tunnelgroup)

A bit triky, in the Cisco documentation there is a dot "." after, aaa.radius.