Managing Authentication Servers RADIUS Servers
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 31-10
The Alcatel-Lucent-Auth-Group attribute is used for Ethernet II only. If a different protocol, or more than
one protocol is required, use the Alcatel-Lucent-Auth-Group-Protocol attribute instead. For example:
Alcatel-Lucent-Auth-Group-Protocol 23: IP_E2 IP_SNAP
Alcatel-Lucent-Auth-Group-Protocol 24: IPX_E2
In this example, authenticated users on VLAN 23 can use Ethernet II or SNAP encapsulation.
Authenticated users on VLAN 24 can use IPX with Ethernet II.
RADIUS Accounting Server Attributes
The following table lists the standard attributes supported for RADIUS accounting servers. The attributes
in the radius.ini file can be modified if necessary.
Num. Standard Attribute Description
1 User-Name Used in access-request and account-request packets.
4 NAS-IP-Address Sent with every access-request. Specifies which switches a
user can have access to. More than one of these attributes is
allowed per user.
95 NAS-IPv6-Address Sent with authentication request packets and access-request
packets.
5 NAS-Port Virtual port number sent with access-request and account-
request packets. Slot/port information is supplied in attribute
26 (vendor-specific).
25 Class Used to pass information from the server to the client and
passed unchanged to the accounting server as part of the
accounting-request packet.
40 Acct-Status-Type Four values must be included in the dictionary file: 1 (acct-
start), 2 (acct-stop), 6 (failure), and 7 (acct-on). Start and stop
correspond to login/logout. The accounting-on message is sent
when the RADIUS client is started. This attribute also includes
an accounting-off value, which is not supported.
42 Acct-Input-Octets (Authenticated VLANs only) Tracked per port.
43 Acct-Output-Octets (Authenticated VLANs only) Tracked per port.
44 Acct-Session Unique accounting ID. (For authenticated VLAN users,
Alcatel-Lucent Enterprise uses the MAC address of the client.)
45 Acct-Authentic Indicates how the client is authenticated; standard values (1–3)
are not used. Vendor specific values must be used instead:
AUTH-AVCLIENT (4)
AUTH-TELNET (5)
AUTH-HTTP (6)
AUTH-NONE (0)
46 Acct-Session The start and stop time for a user session can be determined
from the accounting log.
47 Acct-Input-Packets (Authenticated VLANs only) Tracked per port.
48 Acct-Output-Packets (Authenticated VLANs only) Tracked per port.
To Next Page
Loading...
