RADIUS Authentication Attributes
Page 14 7750 SR RADIUS Attributes Reference Guide
RADIUS Authentication Attributes
Subscriber Host Identification
Attributes related to subscriber-host configuration included in RADIUS authentication request and
response.
Table 2: Subscriber Host Identification (description)
Attribute ID Attribute Name Description
1 User-Name Refers to the user to be authenticated in the Access-Request. The format for
IPoE/PPPoE hosts depends on configuration parameters pppoe-access-method,
ppp-user-name or user-name-format in the CLI context configure subscriber-
mgmt authentication-policy <name>. The format for ARP-hosts is not
configurable and always the host IPv4-address.The RADIUS User-Name
specified in an Access-Accept or CoA is reflected in the corresponding
accounting messages. The attribute is omitted in authentication/accounting via
configure subscriber-mgmt authentication-policy/radius-accounting-policy
<name> include-radius-attribute no user-name.
2 User-Password The password of the user to be authenticated, or the user's input following an
Access-Challenge. For PPPoE users it indirectly maps to the password provided
by a PPPoE PAP user in response to the PAP Authenticate-Request. For IPoE/
ARP hosts it indirectly maps to a pre-configured password (configure
subscriber-mgmt authentication-policy <name> password <password> or
configure aaa isa-radius-policy <name> password <password>).
3 CHAP-Password Provided by a PPPoE CHAP user in response to the CHAP challenge. The
CHAP challenge sent by the NAS to a PPPoE CHAP user is part of the CHAP
authentication sequence RFC 1994, PPP Challenge Handshake Authentication
Protocol (CHAP), (Challenge, Response, Success, Failure). The user generated
CHAP password length is equal to the defined Limits and contains a one byte
CHAP-Identifier from the user's CHAP Response followed by the CHAP
Response from the user.
To Next Page
Loading...
