discard

discard

This action stops the pipeline execution and silently drops the request without sending any response to the client on protocols that allows it like RADIUS and TACACS+ protocols.

Syntax

discard;

Or with an optional reason message:

discard "reason message";

Parameters

• message (optional): A string expression that describes why the request was discarded. This message is logged but not sent to the client.

Example

aaa "policy" {
    handler "authentication" {
      @execute {
          if all {
            aaa.identity == "blocked-user";
          } then {
              discard "User is blocked";
          } else {
              accept;
          }
      }
   }
}

See Also

• reject - Reject a request with an Access-Reject response