Forum Discussion

Hurricane_1983_'s avatar
Hurricane_1983_
Icon for Cirrus rankCirrus
Sep 05, 2017

Assign a resource based on Radius Group Info on APM

Hi, I am trying to assign resource to radius users based on its group information attribute but i could not find any session variable in apm logs like an AD attribute is " 'session.ad.last.attr.memberOf ".I only see that 'session.radius.last.acct.acct_authentic', last.acct.acct_status_type,last.acct.nas_identifier',.radius.last.errmsg' etc.. Has anyone tried to this before?

 

Thanks,

 

application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)
  • Jad_Tabbara__J1's avatar
    Jad_Tabbara__J1
    Icon for Cirrostratus rankCirrostratus
    Sep 05, 2017

    Hello Hurricane,

    Check the following answer, it will give you ideas about how to handle Radius attributes.

    https://devcentral.f5.com/questions/match-radiusclass-attributes

    You will need to retrieve Radius attributes within a variable called 

    session.radius.last.attr.class

    Then you will need to process this string to split it and check its content. If it is hexadecimal (starting with 0x) you will need to convert it as described by Kevin.

    I think the first thing to do is to retrieve this variable and try to log it to view if it is correctly set. Add a "Logging" block to your VPE, add this variable and check the /var/log/apm