20
No. Sub-attribute Description
62 User_HeartBeat
Hash value assigned after an 802.1X user passes authentication, which
is a 32-byte string. This attribute is stored in the user list on the NAS and
is used for verifying the handshake messages from the 802.1X user.
This attribute only exists in Access-Accept and Accounting-Request
packets.
140 User_Group
User groups assigned after the SSL VPN user passes authentication. A
user might belong to more than one user group. In this case, the user
groups are delimited by semi-colons. This attribute is used for
cooperation with the SSL VPN device.
141 Security_Level
Security level assigned after the SSL VPN user passes security
authentication.
201 Input-Interval-Octets Number of bytes input within a real-time accounting interval.
202 Output-Interval-Octets Number of bytes output within a real-time accounting interval.
203 Input-Interval-Packets
Number of packets input within an accounting interval, in the unit set on
the NAS.
204 Output-Interval-Packets
Number of packets output within an accounting interval, in the unit set
on the NAS.
205 Input-Interval-Gigawords Amount of bytes input within an accounting interval, in units of 4G bytes.
206
Output-Interval-Gigaword
s
Amount of bytes output within an accounting interval, in units of 4G
bytes.
207 Backup-NAS-IP Backup source IP address for sending RADIUS packets.
255 Product_ID Product name.
FIPS compliance
Table 4 shows the support of MSR routers for the FIPS mode that complies with NIST FIPS 140-2
requirements. Support for features, commands, and parameters might differ in FIPS mode and
non-FIPS mode. For more information about FIPS mode, see "Configuring FIPS."
Table 4 Hardware and FIPS mode compatibility matrix
Hardware FIPS mode compatibility
MSR900 No
MSR93X No
MSR20-1X No
MSR20 Yes
MSR30 Yes (except the MSR30-16)
MSR50 Yes
MSR1000 Yes
AAA configuration considerations and task list
To configure AAA on the NAS:
1. Configure the required AAA schemes.