AAA/RADIUS/HWTACACS Overview 753
n
The attribute types listed in Table 59 are defined by RFC 2865, RFC 2866, RFC
2867, and RFC 2568.
RADIUS extended attributes
The RADIUS protocol features excellent extensibility. Attribute 26 (Vender-Specific)
defined by RFC 2865 allows a vender to define extended attributes to implement
functions that the standard RADIUS protocol does not provide.
A vendor can encapsulate multiple type-length-value (TLV) sub-attributes in
RADIUS packets for extension in applications. As shown in Figure 231, a
sub-attribute that can be encapsulated in Attribute 26 consists of the following
four parts:
■ Vendor-ID (four bytes): Indicates the ID of the vendor. Its most significant byte is
0 and the other three bytes contain a code complying with RFC 1700. The
vendor ID of 3Com is 2011.
18 Reply_Message 65 Tunnel-Medium-Type
19 Callback-Number 66 Tunnel-Client-Endpoint
20 Callback-ID 67 Tunnel-Server-Endpoint
21 (unassigned) 68 Acct-Tunnel-Connection
22 Framed-Route 69 Tunnel-Password
23 Framed-IPX-Network 70 ARAP-Password
24 State 71 ARAP-Features
25 Class 72 ARAP-Zone-Access
26 Vendor-Specific 73 ARAP-Security
27 Session-Timeout 74 ARAP-Security-Data
28 Idle-Timeout 75 Password-Retry
29 Termination-Action 76 Prompt
30 Called-Station-Id 77 Connect-Info
31 Calling-Station-Id 78 Configuration-Token
32 NAS-Identifier 79 EAP-Message
33 Proxy-State 80 Message-Authenticator
34 Login-LAT-Service 81 Tunnel-Private-Group-id
35 Login-LAT-Node 82 Tunnel-Assignment-id
36 Login-LAT-Group 83 Tunnel-Preference
37 Framed-AppleTalk-Link 84 ARAP-Challenge-Response
38 Framed-AppleTalk-Network 85 Acct-Interim-Interval
39 Framed-AppleTalk-Zone 86 Acct-Tunnel-Packets-Lost
40 Acct-Status-Type 87 NAS-Port-Id
41 Acct-Delay-Time 88 Framed-Pool
42 Acct-Input-Octets 89 (unassigned)
43 Acct-Output-Octets 90 Tunnel-Client-Auth-id
44 Acct-Session-Id 91 Tunnel-Server-Auth-id
Table 59 RADIUS attributes
No. Attribute type No. Attribute type
To Next Page
Loading...
