752 CHAPTER 53: AAA/RADIUS/HWTACACS CONFIGURATION
2 The Identifier field (1-byte long) is for matching request packets and response
packets and detecting retransmitted request packets. The request and response
packets of the same type have the same identifier.
3 The Length field (2-byte long) indicates the length of the entire packet, including
the Code, Identifier, Length, Authenticator, and Attribute fields. The value of the
field is in the range 20 to 4096. Bytes beyond the length are considered the
padding and are neglected after being received. If the length of a received packet
is less than that indicated by the Length field, the packet is dropped.
4 The Authenticator field (16-byte long) is used to authenticate the reply from the
RADIUS server, and is also used in the password hiding algorithm. There are two
kinds of authenticators: Request authenticator and Response authenticator.
5 The Attribute field carries information about the configuration details of a request
or response. This field is represented in triplets of Type, Length, and Value.
6 Type: One byte, in the range 1 to 255. It indicates the type of the attribute.
Commonly used attributes for RADIUS authentication and authorization are listed
in Table 59.
7 Length: One byte for indicating the length of the attribute in bytes, including the
Type, Length, and Value fields.
8 Value: Value of the attribute, up to 253 bytes. Its format and content depend on
the Type and Length fields.
5 Accounting-Response From the server to the client. The server sends to the client a
packet of this type to notify that it has received the
Accounting-Request and has correctly recorded the
accounting information.
Table 58 Main values of the Code field
Code Packet type Description
Table 59 RADIUS attributes
No. Attribute type No. Attribute type
1 User-Name 45 Acct-Authentic
2 User-Password 46 Acct-Session-Time
3 CHAP-Password 47 Acct-Input-Packets
4 NAS-IP-Address 48 Acct-Output-Packets
5 NAS-Port 49 Acct-Terminate-Cause
6 Service-Type 50 Acct-Multi-Session-Id
7 Framed-Protocol 51 Acct-Link-Count
8 Framed-IP-Address 52 Acct-Input-Gigawords
9 Framed-IP-Netmask 53 Acct-Output-Gigawords
10 Framed-Routing 54 (unassigned)
11 Filter-ID 55 Event-Timestamp
12 Framed-MTU 56-59 (unassigned)
13 Framed-Compression 60 CHAP-Challenge
14 Login-IP-Host 61 NAS-Port-Type
15 Login-Service 62 Port-Limit
16 Login-TCP-Port 63 Login-LAT-Port
17 (unassigned) 64 Tunnel-Type
To Next Page
Loading...
