SSL VPN
Reply
Contributor
icmp
Posts: 14
Registered: ‎05-09-2010
0

Multiple sign-in and attribute userAttr.Framed-IP-Address

Hi,

 

I am interesting to use multiple sign-in but still doubt with value of attribute userAttr.Framed-IP-Address whether it will come from first authentication server or additional authentication server. I am using this attriubute for IP assignment on Network Connect profile and it looks like that it always uses attribute value from first server, getting value 255.255.255.255. If I want to use attribute value from secondary server then it is possible or not. Please advise.

 

Thanks.

Moderator
zanyterp
Posts: 2,276
Registered: ‎11-19-2007
0

Re: Multiple sign-in and attribute userAttr.Framed-IP-Address

It uses the primary server.

If the value is being returned from the server, you would list <userAttr{@}secondaryAuthServerName.Framed{-}IP{-}Address>

Contributor
icmp
Posts: 14
Registered: ‎05-09-2010
0

Re: Multiple sign-in and attribute userAttr.Framed-IP-Address

@zanyterp: Many thanks for advice, btw, I have just tried with <userAttr{@}MySecondaryAuthServerName.Framed{-}IP{-}​Address> but there is error when save the NC profile as "Failed to save policy. Reason:Invalid Resource!". It looks like that I cannot use { }.

Moderator
zanyterp
Posts: 2,276
Registered: ‎11-19-2007
0

Re: Multiple sign-in and attribute userAttr.Framed-IP-Address

@icmp: I apologize, i had not tried it before. it looks like it will not work. Is there any way you can copy that value to your primary server to get the attribute there?

Contributor
Lilja
Posts: 88
Registered: ‎12-02-2009
0

Re: Multiple sign-in and attribute userAttr.Framed-IP-Address

[ Edited ]

This is the syntax but it does not work with the attribute from the user profile in ActiveDirectory, you will not receive the IP correctly formatted if I remember this correctly from my attempts..

<userAttr@<authenticationserver-name>.Framed-IP-Address>

 

I used an extension attribute to put the IP adress in instead and then assign this to the user via the Network Connect > connection profile.

---------------------------------------------------
Please mark this post as 'accepted solution' if my input answers your question!
A kudo would be nice if you think I deserve it.
---------------------------------------------------
2 A/P clustered 6500, 7.4R9.1
2 A/P clustered 2500, 8.0R3.1 LAB
Contributor
icmp
Posts: 14
Registered: ‎05-09-2010
0

Re: Multiple sign-in and attribute userAttr.Framed-IP-Address

@zanyterp: I have just revised and use the attribute from first server instead  :smileyhappy:

@Lilja: Thanks   :smileyhappy:

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.