- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
06-06-2011 07:57 AM
06-06-2011 04:07 PM
I am not aware of a PAN specific dictionary for FreeRadius. However, there are not that many VSAs that we support at this time (5 total). Below is output for ACS which lists all the VSAs. You should be able add to existing FreeRadius dictionary using below info.
[User Defined Vendor]
Name=PaloAlto
IETF Code=25461
VSA 1=PaloAlto-Admin-Role
VSA 2=PaloAlto-Admin-Access-Domain
VSA 3=PaloAlto-Panorama-Admin-Role
VSA 4=PaloAlto-Panorama-Admin-Access-Domain
VSA 5=PaloAlto-User-Group
[PaloAlto-Admin-Role]
Type=STRING
Profile=OUT
[PaloAlto-Admin-Access-Domain]
Type=STRING
Profile=OUT
[PaloAlto-Panorama-Admin-Role]
Type=STRING
Profile=OUT
[PaloAlto-Panorama-Admin-Access-Domain]
Type=STRING
Profile=OUT
[PaloAlto-User-Group]
Type=STRING
Profile=OUT
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!