I have Cisco Access Registrar working as Proxy Radius while authentication/authorization is being done by third party radius. CAR doesn't have profile for that user.
My requirement is that whenever 3rd party radius sends Access-Accept packet, CAR should add one more attribute in that access-accept packet before sending it to client.
Please suggest that way to get this done.
You should be able to do this via a TCL script mapped to an appropriate extension point in CAR (either outbound to the client or inbound from the remote radius server). Please go through information at the following URL as I believe it should provide you with enough data to implement this yourself. If you still need help please provide specifics of problem you are facing:
There are also some sample scripts available with the CAR installation that you can go through in order to get an idea as to how to implement this. Your requirement does not seem too complicated as all you need to do is verify if the response is an Access-Accept and based on it add an attribute to the response.
Introduction: The "external-out enable" command is available for
configuration under the "router ospf process" in case of the IOS-XR
operating system. This command basically enables advertisement of
intra-area routes on the device as external routes in th...
Introduction Basic configuration for netflow Scale parameters for
netflow Netflow support Architecture Packet flow for netflow Inside the
LC CPU Netflow Cache size, maintenance and memory Sample usage Cache
Size Aging Permanent cache Characteristics Which...