Substituting IP addresses for RADIUS proxy

Hi,

 

 

I have been working with Gavin on this and have made a little progress, but not sure if i am doing this the right way. I am using findstr to pull the src and dst add from the udp payload: (we cannot get scan to work and documentation is hard to find)

 

 

when CLIENT_ACCEPTED {

 

set src_ip [ findstr [UDP::payload] "Source-IP-Address=" 18 ","]

 

set ret_ip [ findstr [UDP::payload] "Return-IP-Address=" 18 8]

 

log $[UDP::payload]

 

log $src_ip

 

log $ret_ip

 

use snat $ret_ip

 

}

 

 

In our test, the udp payload looks like:

 

 

$ÀÀbÃÃÂTf¯÷¤Â>èÂÂ!6Source-IP-Address=1.1.1.1, Return-IP-Address=2.2.2.2fred7·Ã&ÂaÂÂ

 

 

although i am logging the correct addresses in the src_ip and dst_ip variables, how do i get around the fact that the ip address fields may vary in size? Any ideas?

 

 

Secondly, when i do a trace on the egress vlan, i am not seeing the correct src ip being used - the bigip comes up with its own random ip. I suspect this has something to do with how i have saved the value to the variable...(ret_ip)

 

 

Any thoughts?