Forum Discussion
ken_wolff_10732
Nimbostratus
NimbostratusUDP Payload Rule
I would like to stop this account name (azbycx) from hitting my radius servers. Instead of using a pool, can I simply reject the request? See below. Thanks, Ken
when CLIENT_ACCEPTED {
if { [UDP::payload []] contains "azbycx" } {
pool Switch_6k
}}
Example tcpdump of radius user auth attempt:
12:30:39.006738 192.168.1.3.1024 > 192.168.1.4.radius: rad-access-req 65 [id 54] Attr[ User{azbycx} NAS_ipaddr{192.168.1.4} EAP_msg{.6} [|radius]
- Sure, if you want to reject the request all you'd need to do is change the pool statement to a reject statement.
when CLIENT_ACCEPTED { if { [UDP::payload] contains "azbycx" } { reject } }
Colin 
ken_wolff_10732Using that iRule I'm getting the following log message:
<131>Sep 20 11:08:01 tmm tmm[838]: 01220001:3: TCL error: Rule Reject - expected integer but got "" while executing "UDP::payload
Thanks, Ken
