RADIUS Attributes Reference
142
RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
3HE 10793 AAAB TQZZA 01 Issue: 01
2 User-Password For IKEv1 remote-access tunnel, this represents the xauth password.
For IKEv2 remote-access tunnel with pskradius authentication method,
this represents the pre-shared-key of the ipsec-gw or ipsec-tunnel:
configure service ies/vprn service-id interface interface-name sap
sap-id ipsec-gw gw-name pre-shared-key
or
configure service vprn service-id interface interface-name sap sap-
id ipsec-tunnel tnl-name dynamic-keying pre-shared-key
For IKEv2 remote-access tunnel with authentication method other than
pskradius, this represents the password configured in IPsec radius-
authentication-policy:
configure ipsec radius-authentication-policy policy-name
password
8 Framed-IP- Address The IPv4 address to be assigned to IKEv1/v2 remote-access tunnel
client via configuration payload: INTERNAL_IP4_ADDRESS. This
attribute is also reflected in RADIUS accounting request packet for
IKEv2 tunnel.
9 Framed-IP-Netmask The IPv4 netmask to be assigned to IKEv1/v2 remote-access tunnel
client via configuration payload: INTERNAL_IP4_NETMASK.
30 Called-Station-Id The local gateway address of IKEv2 remote-access tunnel. The
attribute can be included/excluded with configure ipsec radius-
authentication-policy policy-name include-radius-attribute called-
station-id or configure ipsec radius-accounting-policy policy-name
include-radius-attribute called-station-id.
31 Calling-Station-Id The peer’s address and port of IKEv2 remote-access tunnel. The format
is “address:port”, example, “10.1.1.1:1546”. The attribute can be
included/excluded with configure ipsec radius-authentication-policy
policy-name include-radius-attribute calling-station-id or configure
ipsec radius-accounting-policy policy-name include-radius-
attribute calling-station-id.
44 Acct-Session-Id A unique identifier representing an IKEv2 remote-access tunnel session
that is authenticated. Same Acct-Session-Id is included in both access-
request and accounting-request. The format is local_gw_ip-
remote_ip:remote_port-time_stamp.
46 Acct-Session-Time This attribute represents the tunnel’s lifetime in seconds. It is included
in an Accounting-Stop packet.
79 EAP-Message This attribute encapsulates the received IKEv2 EAP payload in access-
request. A RADIUS server can include this attribute in an access-
challenge or access-accept.
Table 48 IPSec (Description) (Continued)
Attribute ID Attribute Name Description
To Next Page
Loading...
