RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
RADIUS Attributes Reference
Issue: 01 3HE 10793 AAAB TQZZA 01 67
26-6527-53 Alc-Tunnel-Max-Retries-Not-
Estab
The number of retries allowed for unestablished tunnels before
their control connection goes down. An exponential backoff
mechanism is used for the retransmission interval: the first
retransmission occurs after 1 second, the next after 2 seconds,
then 4 seconds up to a maximum interval of 8 seconds
(1,2,4,8,8,8,8). The value with tag 0 is used as default for the
tunnels where the value is not specified. Preconfigured values
are used when attribute is omitted (configure router/service
vprn service-id l2tp max-retries-not-estab). Values outside
Limits are treated as a setup failure.
26-6527-54 Alc-Tunnel-AVP-Hiding Identifies the hiding of data in the Attribute Value field of an
L2TP AVP. The H bit in the header of each L2TP AVP provides
a mechanism to indicate to the receiving peer whether the
contents of the AVP are hidden or present in cleartext. This
feature can be used to hide sensitive control message data
such as user passwords or user IDs. All L2TP AVPs will be
passed in cleartext if attribute is omitted and corresponds with
the value 'nothing'. The value 'sensitive-only' specifies that the
H bit is only set for AVPs containing sensitive information. The
value 'all' specifies that the H bit is set for all AVPs where it is
allowed. The value with tag 0 is used as default for the tunnels
where the value is not specified. Preconfigured values are used
when attribute is omitted (configure router/service vprn
service-id l2tp avp-hiding). AVP hiding uses the shared LAC-
LNS secret defined in attribute [69] Tunnel-Password or in
configuration. If no password is specified, the tunnel setup will
fail for values 'sensitive-only' and 'all'. Values outside the Limits
are treated as a setup failure.
26-6527-97 Alc-Tunnel-Challenge Defines if tunnel authentication (challenge-response) is to be
used or not. L2TP tunnel-authentication is based on RFC1994
CHAP authentication and requires the shared-secret defined in
attribute [69] Tunnel-Password. The value with tag 0 is used as
default for the tunnels where the value is not specified. When
the attribute is omitted and no [69] Tunnel-Password attribute is
specified, a preconfigured value is used (configure router/
service vprn service-id l2tp challenge). When the attribute is
omitted and a [69] Tunnel-Password attribute is specified, then
the value 'always' is used. When the attribute has the value
'always', no [69] Tunnel-Password attribute is specified and no
preconfigured value exists for the password, then the tunnel
setup fails. Values outside the Limits are treated as a setup
failure.
Table 8 Wholesale-Retail: L2TP Tunneled Access Mode (Description) (Continued)
Attribute ID Attribute Name Description
To Next Page
Loading...
