Nokia 7750 - Page 172

RADIUS Attributes Reference
172
RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
3HE 10793 AAAB TQZZA 01 Issue: 01
87 NAS-Port-Id A text string which identifies the physical/logical port of the NAS which
is authenticating the user and/or reported for accounting. Attribute is
also used in CoA and Disconnect Message (part of the user
identification-key). The nas-port-id for physical ports usually contains
slot/mda/port/vlan|vpi.vlan|vci. The physical port can have an optional
prefix-string (max 8 chars) and suffix-string (max 64 chars) added for
Accounting (configure subscriber-mgmt radius-accounting-policy
name include-radius-attribute nas-port-id [prefix-string string]
[suffix circuit-id | remote-id]). For logical access circuits (LNS) the nas-
port-id is a fixed concatenation (delimiter #) of routing instance, tunnel-
server-endpoint, tunnel-client-endpoint, local-tunnel-id, remote-tunnel-
id, local-session-id, remote-session-id and call sequence number.
For WLAN-GW, the Nas-Port-Id is a text string with format defined by
the aggregation type (see WLAN-GW section for details):
GRE or L2TPv3: “tunnel-type rtr-virtual router id#lip-local ip
address#rip-remote ip address”
VLAN: “VLAN svc-svc-id[:vlan[.vlan]]”
90 Tunnel-Client-Auth-
ID
(L2TP LAC and LNS only) Used during the authentication phase of
tunnel establishment and copied by the LAC in L2TP SCCRQ AVP 7
Host Name. The value with tag 0 is used as default for the tunnels where
the value is not specified. Pre-configured values are used when the
attribute is omitted (configure router/service vprn service-id l2tp
local-name host-name). The system name (configure system name
system-name) is copied in AVP Host Name if this attribute is omitted
and no local-name is configured.
The attribute is included in Acct-Request messages if the tunnel-
server-attrs (LNS) or tunnel-client-attrs (LAC) option is configured in
the configure subscriber-mgmt radius-accounting-policy name
include-radius-attribute CLI context.
91 Tunnel-Server-Auth-
ID
(L2TP LAC and LNS only) Used during the authentication phase of
tunnel establishment. For authentication the value of this attribute is
compared with the value of AVP 7 Host Name from the received LNS
SCCRP. Authentication from LAC point of view passes if both attributes
are the same. This authentication check is not performed if the RADIUS
attribute is omitted.
The attribute is included in Acct-Request messages if the tunnel-
server-attrs (LNS) or tunnel-client-attrs (LAC) option is configured in
the configure subscriber-mgmt radius-accounting-policy name
include-radius-attribute CLI context.
Table 62 Enhanced Subscriber Management Accounting (Description) (Continued)
Attribute ID Attribute Name Description