×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Configuring custom AV Attribute pairs in CSACS

Unanswered Question
Sep 3rd, 2003
User Badges:

Hello

I'm running CSACS to authenticate users to a Colubris CN3500 Access Controller and Colubris provides a 'custom av pair' to specify traffic quotas for users. How would I create these pairs within csacs? Thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jasonhumes Tue, 09/09/2003 - 11:52
User Badges:

Hello

First off, thanks for the document, it did help out very much. I've created my custom avpair.ini file which looks like this:


###################################

[User Defined Vendor]

Name=Colubris

IETF Code=8744

VSA 1=colubris-max-input-packets

VSA 2=colubris-max-output-packets

VSA 3=colubris-max-input-octets

VSA 4=colubris-max-output-octets


[colubris-max-input-packets]

Type=INTEGER

Profile=MULTI IN OUT

Enums=MaxPacket


[colubris-max-output-packets]

Type=INTEGER

Profile=MULTI IN OUT

Enums=MaxPacket


[colubris-max-input-octets]

Type=INTEGER

Profile=MULTI IN OUT

Enums=MaxOctet


[colubris-max-output-octets]

Type=INTEGER

Profile=MULTI IN OUT

Enums=MaxOctet


[MaxPacket]

0=10

1=100

2=1000

3=5000

4=10000


[MaxOctet]

0=100000

1=1000000

2=10000000

3=100000000

4=200000000

5=500000000

#####################################


And I've imported it using CSUtil and got no errors. But I cant seem to get it to show up in the ACS Admin pages....I've looked under user/group, interface and I cant find it anywhere...please help. Thanks


Jason Humes

gfullage Tue, 09/09/2003 - 17:41
User Badges:
  • Cisco Employee,

You have to add a NAS and say that it's a type "Colubris". Then it'll appear under Interface Config, and you'll be able to enable parameters for the User and/or Group.

jasonhumes Wed, 09/17/2003 - 07:16
User Badges:

Hello

OK Great, I've gotten the 4 Individual items to appear within CSACS under the group config, yet the possible values I've configured dont seem to show up, just a box with a 0 in it next to each item. Any ideas. Thanks again.

gfullage Wed, 09/17/2003 - 20:39
User Badges:
  • Cisco Employee,

This is because you have "MULTI" defined in the VSA. This says that you can send back more than one value for this attribute, so the box in the GUI becomes a box that allows you to add more than one value. If you remove MULTI and just have it as "IN OUT" then the boxes will be displayed as a drop-down allowing you to select one of the values you specified.

Actions

This Discussion