RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
RADIUS Attributes Reference
Issue: 01 3HE 10793 AAAB TQZZA 01 15
31 Calling-Station-Id Allows the NAS to send unique information identifying the user who
requested the service. This format is driven by configuration (configure
subscriber-mgmt authentication-policy/radius-accounting-policy
name include-radius-attribute calling-station-id <llid | mac | remote-
id | sap-id | sap-string>). The LLID (logical link identifier) is the mapping
from a physical to logical identification of a subscriber line and supplied by
a RADIUS llid-server. The sap-string maps to configure service ies |
vprn service-id subscriber-interface ip-int-name group-interface ip-int-
name sap sap-id calling-station-id sap-string. A [31] Calling-Station-Id
attribute value longer than the allowed maximum is treated as a setup
failure. The attribute is omitted in authentication/accounting via configure
subscriber-mgmt authentication-policy/radius-accounting-policy
name include-radius-attribute no calling-station-id.
32 NAS-Identifier A string (configure system name system-name) identifying the NAS
originating the Authentication or Accounting requests and sent when nas-
identifier is included for the corresponding application: include-radius-
attribute nas-identifier in configure subscriber-mgmt authentication-
policy (ESM authentication), configure subscriber-mgmt radius-
accounting-policy (ESM accounting), configure aaa isa-radius-policy
(LSN accounting, WLAN-GW) and configure aaa l2tp-accounting-
policy (L2TP accounting).
44 Acct-Session-Id A unique identifier that represents the subscriber host or session that is
authenticated. This attribute can be used as CoA or Disconnect Message
key to target the host or session and is reflected in the accounting
messages for this host or session.The attribute is included/excluded
based on configure subscriber-mgmt authentication-policy name
include-radius-attribute acct-session-id [host | session]. For PPPoE,
either the host acct-session-id (default) or the session acct-session-id is
included.
60 CHAP-Challenge The CHAP challenge sent by the NAS to a PPPoE CHAP user as part of
the chap authentication sequence RFC 1994 (Challenge, Response,
Success, Failure). The generated challenge length for each new pppoe
session is by default a random value from 32 to 64 bytes unless
configured different under configure subscriber-mgmt ppp-policy ppp-
policy-name ppp-chap-challenge-length [8 to 64] or configure service
vprn service-id | router l2tp group
tunnel-group-name ppp chap-
challenge-length [8 to 64] for LNS (the command can also be specified
at the tunnel level). The CHAP challenge value is copied into the request-
authenticator field of the RADIUS Access-Request message if the
minimum and maximum value is configured at exact 16 (RFC 2865,
Remote Authentication Dial In User Service (RADIUS), section 2.2,
Interoperation with PAP and CHAP). Attribute CHAP-Password is
provided by a PPPoE CHAP user in response to the [60] CHAP-challenge.
Table 2 Subscriber Host Identification (Description) (Continued)
Attribute ID Attribute Name Description
To Next Page
Loading...
