Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Using Attribute Filter Scripts

 

Attribute filter scripts are executed any time a server core component or plug-in module invokes an attribute filter that is configured for scripting.

Steel-Belted Radius Carrier supports both static and scripted attribute filters.

Each is declared by name using the Filters List page in Web GUI.

  • Static attribute filters—Specify fixed rules using keywords such as ALLOW, ADD, and EXCLUDE. The filter rules and the action of the filter are the same each time Steel-Belted Radius Carrier executes the filter.

  • Scripted attribute filters—Declare the name of a JavaScript initialization (.jsi) file containing the script code for the filter. When the Script setting is present, Steel-Belted Radius Carrier ignores any other filter rules for that filter.

Because a scripted filter is defined with JavaScript, its behavior can change dynamically from one execution to the next. Scripted filters can perform any of these actions:

  • Get, add, delete, or replace attributes in the RADIUS request or response, depending on the filter context.

  • Manipulate attribute values under program control.

  • Execute static attribute filters by name.

  • Invoke SQL queries and LDAP searches, and process the results.

Static and scripted attribute filters are referred to by name throughout the rest of the Steel-Belted Radius Carrier configuration. Externally, the two types of filters are equivalent and interchangeable, making it easy to switch between the two. Initially, you can configure Steel-Belted Radius Carrier with static filters and then change to scripted filters after you test the basic configuration.