topic Re: RADIUS ACL attributes in Wireless Questions and Best Practices

RADIUS ACL attributes

ruslanturebekov — Tue, 13 Nov 2018 10:33:49 GMT

Can`t find how to assign ACL with Access-Accept RADIUS response and what attributes to use.
Want to know how to assign ACL via sending id and via sending ACL rules in Access-Accept RADIUS response

Re: RADIUS ACL attributes

michael_brado — Thu, 15 Nov 2018 00:21:34 GMT

I don't think ACL is a valid attribute-value pair for RADIUS with Ruckus dictionary file.
https://support.ruckuswireless.com/articles/000005220

Re: RADIUS ACL attributes

hyosang_choi — Thu, 15 Nov 2018 03:52:15 GMT

Try to apply a filter-id as Radius-attribute.

Or try to apply RBAC using Ruckus-User-Groups as Radius-arrtibute.

I do remeber a filter-id was working on ZD(10.0 above) and Ruckus-User-Groups is working on SZ100(3.5 above) and ZD.

Try those.

Re: RADIUS ACL attributes

ruslanturebekov — Thu, 15 Nov 2018 09:37:04 GMT

Thanks! I see that via FILTER-ID I can deliver id, but I need also to deliver ACL rules.

Re: RADIUS ACL attributes

hyosang_choi — Thu, 15 Nov 2018 09:41:01 GMT

Yes. Ruckus don't have a attribute like cisco downloadable acl.

You have to use predefined acl or role.

Re: RADIUS ACL attributes

ruslanturebekov — Mon, 19 Nov 2018 14:49:49 GMT

I`ve found info that Filter-Id can deliver also acl rules syntax:
http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-securityguide/GUID-9AC740BB-FF39-4D20...

Re: RADIUS ACL attributes

ruslanturebekov — Mon, 19 Nov 2018 14:50:24 GMT

But only this statement. No proofs..

Re: RADIUS ACL attributes

hyosang_choi — Tue, 20 Nov 2018 00:55:46 GMT

Do you want to apply that to any product? Wireless Product like SZ/ZD or Wired Product like ICX switch?

Re: RADIUS ACL attributes

ruslanturebekov — Tue, 20 Nov 2018 11:04:12 GMT

Yes, I need a flexible solution

Re: RADIUS ACL attributes

amelia_smith_dp — Thu, 10 Jan 2019 22:31:19 GMT

I had the same issue thanks for the help !

Re: RADIUS ACL attributes

hyosang_choi — Fri, 11 Jan 2019 06:09:03 GMT

I have tested this.

I did successful dynamic acl using icx and filter-id on freeradius.

In this URL, I shared configuration and result using excel sheet below.
https://drive.google.com/open?id=1AohCD86AygWw-re8bvTDOsO2663pvrGg

But I failed this using named acl.

It works good using only number acl on ver 0.8.0.70(exaclty SPR08070b).

Please someone confirm this point.

Good luck.

Re: RADIUS ACL attributes

amelia_smith_dp — Sun, 13 Jan 2019 22:37:11 GMT

Re: RADIUS ACL attributes

amelia_smith_dp — Sun, 13 Jan 2019 22:40:26 GMT

https://tgw.onl/digitalocean/https://tgw.onl/siteground/https://tgw.onl/ipage/