Appendix D Cisco Secure ACS Command-Line Database Utility
User-Defined RADIUS Vendors and VSA Sets
D-36
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Table D-9 Attribute Definition Keys
Keys Required Value Required Description
Type Yes See Description The data type of the attribute. It must be one of the
following:
• STRING
• INTEGER
• IPADDR
If the attribute is an integer, the Enums key is valid.
Profile Yes See Description The attribute profile defines if the attribute is used for
authorization or accounting (or both). At least one of
the following two values must be present in the Profile
key definition:
• IN—The attribute is used for accounting. After
you add the attribute to Cisco Secure ACS, you
can configure your RADIUS accounting log to
record the new attribute. For more information
about RADIUS accounting logs, see Accounting
Logs, page 9-5.
• OUT—The attribute is used for authorization.
In addition, you can use the value “MULTI” to allow
several instances of the attribute per RADIUS
message.
Combinations are valid. For example:
Profile=MULTI OUT
or
Profile=IN OUT
Enums No (only valid
when the
TYPE value is
INTEGER)
Enumerations
section name
The name of the enumeration section.
Note Several attributes can reference the same
enumeration section. For more information,
see Enumeration Definition, page D-37.