On 9/19/20 4:16 AM, Chris Jones wrote: > Does it work any better if you use > > Cisco-AVPairs = “ip:inacl=MY_ACL” >
Unfortunately, no it does not. I have verified I have a matching acl name, it just doesn't seem to want to fly. The only sss message I see just says: "Subscriber service profile has invalid configuration" I use this exact technique on asr1000 and c7201 and it works there. I am just wondering if maybe there is some other missing config that enables per-user acls on the asr920 that is preventing this from flying. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
