Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

How to handle Cisco AVPair Attributes

Hello,

i have a little Problem, so I hope you can help me.

I have an external Radius Server and an ASA5520 which submits the IP-address and the address of the DNA-Server to the registering client (with cisco-avpair = ip:addr=x.y.z.w)

How can I submit the corresponding network mask also (ip:netmask= ?)?

Best Regards

Hartmut B.

1 REPLY
Silver

Re: How to handle Cisco AVPair Attributes

Hi

This depend on which Radius server you're using. If its ACS then.... ACS will send the cisco-av-pair automagically if

1) the aaa client is defined as Cisco IOS

2) you use the ip assignment setting at group/user level

Unfortunately it wont send a netmask as well. So in the group page just scroll down until you see the "RADIUS Cisco IOS" section then locate the cisco-av-pair and just enter

"ip:netmask=foobar"

right in the text entry box.

Then submit + restart and it should all work.

Darran

240
Views
0
Helpful
1
Replies
CreatePlease to create content