Radius assigned ACLs and Windows 2003 IAS server

[Brian Colwell]

Does anyone have info on how to configure radius assigned ACLs using a W2K3 IAS Server on a procurve 8212zl or similar? The instructions in the Access Security Guide document how to configure a FreeRadius server, but nothing on how to configure a microsoft IAS server.

I almost have it, but receive an error on the 8212:
idm: ACE parsing error, FROM keyword

On the IAS server, I have created a vendor specific attribute:
vendor code=11
vendor assigned attribute code=61
string= permit in ip from any to any

TIA,
Brian

[eng.Zohair · Accepted solution]

Hello Brian,

I think these links will help you

http://www.cisco.com/application/pdf/paws/91392/airespace-vsa-msias-config.pdf

&

http://www.procurve.com/NR/rdonlyres/06538B80-6DB0-4AC6-893E-8E8E12A180C6/0/ConfiguringFreeRADIUSwithIDMbyExample_Dec_07_WW_Eng_Ltr.pdf


regards,
Points are welcomed
Jan

[Brian Colwell]

Thanks Jan,
Very interesting, the user guide,
ftp://ftp.hp.com/pub/networking/software/8200zl-Security-Sept2007-59918585.pdf
mentions nothing of using the keyword "cnt" at the end of permit or deny ACL statements.

the correct string to use is:
permit in ip from any to any cnt

In any case, I have it working now with W2K3 IAS.