filter
Filter action for filtering unwanted attributes in RADIUS pre-proxying and post-proxying handlers
filter
Filters unwanted attributes from a to be proxied RADIUS request or from a received RADIUS proxy response.
Copy and filter can only be used in backend RADIUS
@pre-proxyingand@post-proxyinghandlers.
Action result
The filter action filters proxied RADIUS attributes and preserves the previous action result.
Protected attributes and packet profiles
The action preserves allowed encrypted and salted dictionary attributes as
their logical values. Radiator decodes each retained value using the source
packet profile and shared secret. It then applies the protection required by
the destination packet profile and shared secret. This keeps attributes such
as User-Password and Tunnel-Password valid across RADIUS/1.0 and RADIUS/1.1
boundaries.
Comparison rules evaluate the decoded logical value, not RADIUS/1.0 ciphertext. Tags on protected attributes remain attached to the same logical value during conversion. If Radiator cannot decode or encode a retained protected attribute, the action returns an error instead of silently omitting it.