Security

Reply
Occasional Contributor II

How can I do math actions in a value in an enforcement policy?

Is there documentation how can I do math actions in a value in an enforcement profile? 

I need to set Radius session time out which is a result of a formula: 

%{Endpoint:MAC-Auth Expiry}-%{Authorization:[Time Source]:Now}

 

This formula does not work. Perhaps becasue I need to convert to number, or maybe the minus sign sgould not be like that. 

 

The bigger picture is that I need to allow a device to remain connected until it is profiled, bit disconnect it after a given time (10 mins), becuase this is a scheduled SNMP scan time.

So I give an expiry time of 10 mins and check the time now vs the expiry time. 

The problem is that if the is re-auth before the session timout, it reset the session timout period. So I have to apply a new session time out for the remining time. 

Guru Elite

Re: How can I do math actions in a value in an enforcement policy?

You’d need to do it in a SQL auth source.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: How can I do math actions in a value in an enforcement policy?

problem is I need to calc from 2 different auth sources: time source for the time now, and an expiry time from the endpoint reporistory. 

I think it is not possible, isn't it?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: