RADIUS Attributes Reference
260
RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
3HE 10793 AAAB TQZZA 01 Issue: 01
95 NAS-IPv6-Address The identifying IP Address of the NAS requesting the Authentication or
Accounting. Included when the RADIUS server is reachable via IPv6.
The address is determined by the routing instance through which the
RADIUS server can be reached:
“Management” — The active IPv6 address in the Boot Options File (bof
address ipv6-address)
“Base” — The IPv6 address of the system interface (configure router
interface system ipv6 address ipv6-address). The address can be
overwritten with the configured ipv6-source-address (configure
system security source-address application6 radius ipv6-address)
26-6527-6 Timetra-Cmd A command-string, subtree command-string or a list of command-
strings as scope for the match condition for user authorization. Multiple
command-strings in the same attribute are delimited with the; character.
Additional command-strings are encoded in multiple attributes. If the
maximum number of command strings is violated, or if a string is too
long, processing the input is stopped but authorization continues, so if
the radius server is configured to have 5 command strings of which the
3rd is too long, only the first 2 entries will be used and the rest will be
ignored. Each [26-6527-6] Timetra-Cmd attribute is followed in
sequence by a [26-6527-7] Timetra-Action. (A missing Timetra-Action
results in a deny).
Note: For each authenticated RADIUS user a temporary profile with
name [1]User-Name is always created (show system security profile)
and executed as last profile. This temporary profile is build from the
mandatory attribute [26-6527-5]Timetra-Default-Action and optional
attributes [26-6527-6] Timetra-Cmd, [26-6527-7] Timetra-Action.
Table 81 CLI User Access Accounting (Description) (Continued)
Attribute ID Attribute Name Description
Table 82 CLI User Access Accounting (Limits)
Attribute ID Attribute Name Type Limits SR OS Format
1 User-Name string 16 chars Example:
User-Name = “admin”
4 NAS-IP-Address ipaddr 4 Bytes Example:
NAS-IP-Address= “192.0.2.1”
31 Calling-Station-Id string 64 Bytes # users ip address
Example:
Calling-Station-Id= “192.0.2.2” or
Calling-Station-Id= “2001:db8 to 2”
To Next Page
Loading...
