discard

discard

This action stops the pipeline execution and silently drops the request without sending any response to the client on protocols that allows it like RADIUS and TACACS+ protocols.

Syntax

discard;

Or with an optional reason message:

discard "reason message";

Parameters

• message (optional): A string expression that describes why the request was discarded. This message is logged but not sent to the client.

Example

aaa "policy" {
    handler "authentication" {
        if all {
          aaa.identity == "blocked-user";
        } then {
            discard "User is blocked";
        }
    }
}

See Also

• reject - Reject a request with an Access-Reject response