RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
RADIUS Attributes Reference
Issue: 01 3HE 10793 AAAB TQZZA 01 37
26-6527-234 Alc-DNAT-
Override
A composite RADIUS attribute used to modify DNAT function for L2Aware
NAT subscribers:
• enable/disable DNAT functionality without affecting SNAPT
• modify destination IP address in DNAT
After the DNAT configuration is modified via CoA (by enabling or disabling
DNAT or changing the DNAT IP address), the existing flows will remain
active for five more seconds while the new flows are being created in
accordance with the new configuration. After a five-second timeout, the
stale flows will be cleared from the system.
If multiple Alc-DNAT-Override attributes with conflicting actions are
received in the same CoA or Access-Accept, the last one will take
precedence.
26-6527-242 Alc-Radius-Py A free format attribute reserved for use in combination with a RADIUS
Python script. SR OS ignores the attribute when received in an access
accept or CoA and will not generate the attribute.
The primary purpose for this attribute is to interact with RADIUS servers
that do not support RFC 6929 extended and long extended vendor
specific attribute types. This attribute can be used between the RADIUS
server and the Python script. The Python script should convert the
attribute value in an RFC 6929 compliant attribute format.
Note: support for RFC 6929 is added in SR OS 14.0R4. In this release, no
extended or long extended vendor-specific attributes are defined yet.
Conversion may be required in a future release when new extended or
long extended vendor specific attributes are defined.
26.-6527-244 Alc-Force-DHCP-
Relay
Indicates the IP stack of the data-triggered subscriber host that was
promoted to DHCP host using DHCP relay to the internal/external server.
Multiple attributes may be present.
Attribute can have 2 values: relay-IPV4 and relay-IPv6.
Table 2 Subscriber Host Identification (Description) (Continued)
Attribute ID Attribute Name Description
Table 3 Subscriber Host Identification (Limits)
Attribute
ID
Attribute
Name
Type Limits SR OS Format
1 User-Name string 253 chars Form depends on authentication method and
configuration.
Example: User-Name user1@domain1.com
2User-
Password
string 64 Bytes Encrypted password
Example: User-Password
4ec1b7bea6f2892fa466b461c6accc00
To Next Page
Loading...
