Re: SDO: Setting 'merit' on a CRP Policy
- From: Tony <yellowjacketlite@xxxxxxxxx>
- Date: Wed, 14 May 2008 10:39:55 -0700 (PDT)
On May 13, 4:30 pm, "James McIllece [MS]"
<james...@xxxxxxxxxxxxxxxxxxxx> wrote:
Thanks very much for posting this information; the writer of the topic in
question has been notified and will be updating the topic.
My final solution was...
Goal: Create a canned CRP at a particular place in the processing
order
Solution:
1) If the CRP Profile I need exists, delete it.
2) If the CRP Policy I need exists, delete it and shift all "higher"
merit values down by one.
3) Create new CRP Profile and apply (save) changes
4) If needed, shift the merit value of all CRP policies that will be
"higher" than my new policy up by one.
5) Create new CRP Policy including **correct** merit value
6) Apply (save) changes to CRP Policy
7) Reset (so IAS re-reads the config changes)
I suspect 99% of the time this will the only CRP, so the shifting will
never occur. I added support for specifying a particular position in
case our customers use the same IAS for some other purpose than our
application (not likely).
.
- References:
- SDO: Setting 'merit' on a CRP Policy
- From: yellowjacketlite
- Re: SDO: Setting 'merit' on a CRP Policy
- From: Tony
- Re: SDO: Setting 'merit' on a CRP Policy
- From: Tony
- Re: SDO: Setting 'merit' on a CRP Policy
- From: James McIllece [MS]
- SDO: Setting 'merit' on a CRP Policy
- Prev by Date: Re: SDO: Setting 'merit' on a CRP Policy
- Next by Date: 802.1x PEAP/MS-CHAPv2 to IAS - Computer + User Authentication?
- Previous by thread: Re: SDO: Setting 'merit' on a CRP Policy
- Next by thread: 802.1x PEAP/MS-CHAPv2 to IAS - Computer + User Authentication?
- Index(es):