RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
RADIUS Attributes Reference
Issue: 01 3HE 10793 AAAB TQZZA 01 145
26-6527-67 Alc-IPsec-SA-Auth-
Algorithm
IPSec phase2 SA Authentication Algorithm, used by IKEv1/v2 remote-
access tunnel. The esp-auth-algorithm in ipsec-transform is used when
this attribute is omitted (configure ipsec ipsec-transform esp-auth-
algorithm algo). Values different than the Limits are treated as a tunnel
setup failure. This attribute must be used along with Alc-IPsec-SA-Encr-
Algorithm, otherwise tunnel setup will fail.
26-6527-68 Alc-IPsec-SA-
Replay-Window
IPSec anti-replay window size, used by IKEv1/v2 remote-access tunnel.
The replay-window size in tunnel-template is used when this attribute is
omitted (configure ipsec tunnel-template replay-window size).
Values different than the Limits are treated as a tunnel setup failure
26-6527-105 Alc-Ipv6- Primary-
Dns
The IPv6 DNS server address to be assigned to an IKEv2 remote-
access tunnel client via IKEv2 configuration payload:
INTERNAL_IP6_DNS. Up to four DNS server addresses can be
returned to a client, which could be any combination of Alc-Primary-
Dns, Alc-Secondary-Dns, Alc-Ipv6-Primary-Dns and Alc-Ipv6-
Secondary-Dns.
26-6527-106 Alc-Ipv6- Secondary-
Dns
The IPv6 DNS server address to be assigned to an IKEv2 remote-
access tunnel client via IKEv2 configuration payload:
INTERNAL_IP6_DNS. Up to four DNS server addresses can be
returned to a client, which could be any combination of Alc-Primary-
Dns, Alc-Secondary-Dns, Alc-Ipv6-Primary-Dns and Alc-Ipv6-
Secondary-Dns.
26-6527-229 Alc-IPsec-Ts-
Override
The name of the ts-list to be used during IKEv2 tunnel setup. It overrides
the CLI configured value via the CLI command ts-negotiation.
26-6527-237 Alc-Subject-Key-
Identifier
The binary value of Subject Key Id in peer's certificate.
Table 48 IPSec (Description) (Continued)
Attribute ID Attribute Name Description
Table 49 IPSec (Limits)
Attribute ID Attribute Name Type Limits SR OS Format
1 User-Name string 253 bytes # Format depends on IDi format.
Example: User-Name =
“user1@domain1.com”
2 User-Password string 64 bytes —
8 Framed-IP-Address ipaddr 4 bytes Example: Framed-IP-Address =
192.168.10.100
9 Framed-IP-Netmask ipaddr 4 bytes Example: Framed-IP-Netmask =
255.255.255.0
To Next Page
Loading...
