Re: Issue: Attribute concatenation/splitting

["Alan DeKok" <aland@nitros9.org>]

Pasi.Eronen@nokia.com wrote:
> It is, by including a long list of ports: E.g. "permit in tcp from=20
> any to assigned 12345,22222,24224,27272,33333,..."

  In many of those cases, the list can be split on the *semantic*
level, rather than the RADIUS attribute level.  e.g. assuming there's
a trailing "deny all" filter, your example is entirely equivalent to

  permit in tcp from any to assigned 12345
  permit in tcp from any to assigned 22222
  permit in tcp from any to assigned 24224
  permit in tcp from any to assigned ...

  It's not optimal, but it will work, and it will avoid long RADIUS
attributes.

  Alan DeKok.

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>