RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
RADIUS Attributes Reference
Issue: 01 3HE 10793 AAAB TQZZA 01 63
67 Tunnel-Server-Endpoint The dotted-decimal IP address of the server end of the tunnel
is also on the LAC the dest-ip for all L2TP packets for that
tunnel.
To support more than 31 tunnels in a single RADIUS Access-
Accept message, multiple Tunnel-Server-Endpoint attributes
with the same tag can be inserted. All tunnels specified by
Tunnel-Sever-Endpoint attributes with a given tag will use the
tunnel parameters specified by the other Tunnel attributes
having the same tag value.
69 Tunnel-Password A shared, salt encrypted, secret used for tunnel authentication
and AVP-hiding. The usage of tunnel-authentication is
indicated by attribute [26-6527-97] Alc-Tunnel-Challenge and
the usage of AVP-hiding is indicated by attribute [26-6527-54]
Alc-Tunnel-AVP-Hiding. The value with tag 0 is used as default
for the tunnels where the value is not specified. Preconfigured
values are used when attribute is omitted (configure router/
service vprn service-id l2tp password). There is no default
password. Received passwords longer than the maximum
chars limit are truncated at maximum chars limit.
81 Tunnel-Private-Group-ID The group ID for a particular tunneled session. This RADIUS
attribute is copied by a 7750 SR LAC in AVP 37 - Private Group
ID (ICCN) and is used by the LAC to indicate that this call is to
be associated with a particular customer group. The 7750 SR
LNS ignores AVP 37 when received from LAC. The value with
tag 0 is used as default for the tunnels where the value is not
specified. String lengths above the maximum value are treated
as setup failures.
82 Tunnel-Assignment-ID Indicates to the tunnel initiator the particular tunnel to which a
session is to be assigned. Some tunneling protocols, such as
PPTP and L2TP, allow for sessions between the same two
tunnel endpoints to be multiplexed over the same tunnel and
also for a given session to utilize its own dedicated tunnel. Tag-
0 Tunnel-Assignment-ID:0 string, has a special meaning and
the string becomes the Tunnel-group name that can hold up to
maximum 31 tunnels with the name Tunnel-Assignment-ID-[1
to 31] string. A Tunnel-group with the name
default_radius_group is created on the LAC when this attribute
with tag-0 is omitted. This attribute is not the same as attribute
26-4874-64 ERX-Tunnel-Group or 26-6527-46 Alc-Tunnel-
Group since these attributes both refer to a tunnel-group name
created in CLI context. When not specified, the default value for
Tunnel-Assignment-ID-[1 to 31] string is unnamed. String
lengths above the limits are treated as a setup failure.
Table 8 Wholesale-Retail: L2TP Tunneled Access Mode (Description) (Continued)
Attribute ID Attribute Name Description
To Next Page
Loading...
