<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16587" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I have the following configuration : </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2><ServerTACACSPLUS></FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2></ServerTACACSPLUS></FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2><Client 192.168.1.1></FONT></DIV>
<DIV><FONT face=Arial size=2> TACACSPLUSkey test</FONT></DIV>
<DIV><FONT face=Arial size=2> Identifier
Location1</FONT></DIV>
<DIV><FONT face=Arial size=2></Client></FONT></DIV>
<DIV>
<DIV><FONT face=Arial size=2><Client 192.168.10.1></FONT></DIV>
<DIV><FONT face=Arial size=2> TACACSPLUSkey test2</FONT></DIV>
<DIV><FONT face=Arial size=2> Identifier
Location1</FONT></DIV>
<DIV><FONT face=Arial size=2></Client></FONT></DIV>
<DIV><FONT face=Arial size=2>...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><Handler
Client-Identifier=Location1></FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2> AuthBy Server1</FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2></Handler></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV>
<DIV><FONT face=Arial size=2><Handler></FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2> AuthBy GlobalServer</FONT></DIV>
<DIV><FONT face=Arial size=2>.</FONT></DIV>
<DIV><FONT face=Arial size=2></Handler></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>but I see on the debug that always the Handler with
GlobalServer is selected not the one with Client-identifier. Can I use the
Identifier only with Radius not with TACACS+ ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Sun Feb 3 14:16:28 2008: DEBUG: TACACSPLUS
derived Radius request packet dump:<BR>Code:
Access-Request<BR>Identifier: UNDEF<BR>Authentic:
<229><11>kl<238><235><230>^<217>?<228>3l<253><243><128><BR>Attributes:<BR>
NAS-IP-Address = 192.168.1.1<BR>
NAS-Port-Id = "tty18"<BR>
Calling-Station-Id =
"192.168.20.1"<BR> Service-Type =
Login-User<BR> Request-Protocol =
TACACS+<BR> User-Name =
"fred"<BR> User-Password =
test</FONT></DIV>
<DIV><FONT face=Arial size=2><BR>Sun Feb 3 14:16:28 2008: DEBUG: Handling
request with Handler ''</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Is there a way to debug more ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thank you</FONT></DIV>
<DIV><FONT face=Arial size=2>Markus</FONT></DIV></DIV></DIV></BODY></HTML>