CLI User Authentication and Authorization
Page 132 7750 SR RADIUS Attributes Reference Guide
CLI User Authentication and Authorization
Table 44: CLI User Authentication and Authorization (description)
Attribute ID Attribute Name Description
1 User-Name The name of user requesting user-Authentication, Authorization, Accounting.
User-names longer the allowed maximum Limit are treated as an
authentication failure.
2 User-Password The password of user requesting user-Authentication, Authorization,
Accounting and always encrypted in a fixed length
4 NAS-IP-Address The identifying IP Address of the NAS requesting the Authentication or
Accounting. Included when the RADIUS server is reachable via IPv4.
The address is determined by the routing instance through which the RADIUS
server can be reached:
“Management”— The active ipv4 address in the Boot Options File (bof
address <ipv4-address>)
“Base” — The ipv4 address of the system interface (configure router
interface system address <address>). The address can be overwritten with
the configured source-address (configure system security source-address
application radius <ip-int-name|ip-address>)
18 Reply-Message The attribute received in the Access-Challenge message for challenge-
response interactive authentication. The content of the Reply-Message
attribute is displayed to the user. The user is prompted for a response.
24 State The attribute received in the Access-Challenge message for challenge-
response interactive authentication and sent unmodified in the new Access-
Request
27 Session-Timeout The attribute received in the Access-Challenge message for challenge-
response interactive authentication. The maximum number of seconds in
which the user should provide the response. After this time, the prompt is
terminated.
28 Idle-Timeout The attribute received in the Access-Challenge message for challenge-
response interactive authentication. The number of seconds after which the
prompt is terminated when no user activity is detected.
31 Calling-Station-Id The IP address (coded in hex) from the user that requests Authentication,
Authorization, Accounting or “CONSOLE” when requesting access from the
serial port (Console).
44 Acct-Session-Id A unique, without meaning, generated number per authenticated user and
reported in all accounting messages and used to correlate users CLI
commands (accounting data) from the same user.
To Next Page
Loading...
