RADIUS Attributes Reference
7750 SR RADIUS Attributes Reference Guide Page 207
68 Acct-Tunnel-
Connection
Indicates the identifier assigned to the tunnel session. For Tunnel start/stop it 
is a concatenation, without delimiter, of LAC-tunnel-id (4bytes) and LNS-
tunnel-id (4 bytes)” were the LAC-tunnel-id maps to the hex value of L2TP 
AVP 9 AssignedTunnelId from SCCRQ and LNS-tunnel-id maps to the hex 
value L2TP AVP 9 AssignedTunnelId in SCCRP. Unknown tunnel-id's 
(Tunnel Reject and Tunnel Link Reject) are reported as 0000 or ffff. For 
Tunnel Link Start/Stop it maps to the integer Call Serial Number from ICRQ 
L2TP AVP 15 Call Serial Number.
82 Tunnel-Assignment-ID Indicates to the tunnel initiator the particular tunnel to which a session is to be 
assigned. Some tunnelling protocols, such as PPTP and L2TP, allow for 
sessions between the same two tunnel endpoints to be multiplexed over the 
same tunnel and also for a given session to utilize its own dedicated tunnel.
86 Acct-Tunnel-Packets-
Lost
Indicates the number of packets dropped  and uses the ESM accounting 
statistics for this. For Tunnel Link Stop it reports an aggregate of the dropped 
input and output packets for this user over the course of this service being 
provided. For Tunnel Stop this attribute represent an aggregate of input and 
output dropped packets of all sessions that belong/belonged to this tunnel over 
the course of this service being provided. 
87 NAS-Port-Id LAC : a text string identifying the physical access circuit (slot/mda/port/outer-
vlan.inner-vlan) of the user that requested the Authentication and/or 
Accounting. The physical port on LAC can have an optional prefix-string 
(max 8 chars) and suffix-string (max 64 chars) added (configure aaa l2tp-
accounting-policy <policy-name> include-radius-attribute nas-port-id 
prefix-string <string> suffix(circuit-id|remote-id )). LNS: a text string 
identifying the logical access circuit of the user that requested the 
Authentication and/or Accounting. This logical access circuit is a fixed 
concatenation (delimiter #) of routing instance, tunnel-server-endpoint, 
tunnel-client-endpoint, local-tunnel-id, remote-tunnel-id, local-session-id, 
remote-session-id and call sequence number.
90 Tunnel-Client-Auth-ID Used during the authentication phase of tunnel establishment and copied by 
the LAC in L2TP SCCRQ AVP 7 Host Name. Reported in L2TP Tunnel/Link 
accounting when length is different from zero. The value with tag 0 is used as 
default for the tunnels where the value is not specified. Pre-configured values 
are used when the attribute is omitted (configure router/service vprn 
<service-id> l2tp local-name). The Node system-name is copied in AVP 
Host Name if this attribute is omitted and no local-name is configured.
91 Tunnel-Server-Auth-ID Used during the authentication phase of tunnel establishment and reported in 
L2TP Tunnel/Link accounting when length is different from zero. For 
authentication the value of this attribute is compared with the value of AVP 7 
Host Name from the received LNS SCCRP. Authentication from LAC point 
of view passes if both attributes are the same. This authentication check is not 
performed if the RADIUS attribute is omitted.
Table 62: L2TP Tunnel Accounting (description)  (Continued)
Attribute ID Attribute Name Description