Page MenuHomeVyOS Platform

Add completion and validation for the accel-ppp RADIUS vendor option
Closed, ResolvedPublic

Description

Right now if one wants to use the authentication radius rate-limit vendor option in L2TP and other accel-ppp services, they need to look up dictionary files in /usr/share/accel-ppp/radius and correctly guess which ones contain attributes useful for rate limiting.

Instead, we could provide completion for its built-in dictionaries (alcatel, cisco, microsoft, mikrotik) and add a validator to ensure that specified file exists, so that people can still use custom dictionaries if they want to.

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

dmbaturin changed Issue type from Improvement (missing useful functionality) to Bug (incorrect behavior).
Viacheslav changed the task status from Open to Needs testing.Aug 30 2023, 2:00 PM

There is a bug when we use lowercase "cisco"

set service pppoe-server authentication radius rate-limit vendor 'cisco'

It doesn't work as vendor is Cisco not cisco

vyos@vyos-lns# sudo cat  /usr/share/accel-ppp/radius/dictionary.cisco | grep -i vendor
VENDOR		Cisco

On the FreeRADIUS site dictionary also have vendor=Cisco

/ # cat /usr/share/freeradius/dictionary.cisco | grep -i vendor
VENDOR		Cisco				9

It's cause that attribute doesn't work at all.
We should remove validators.