Cisco 3.3 - Manual (Page 753)

D-37
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Appendix D CSUtil Database Utility
User-Defined RADIUS Vendors and VSA Sets
Table D-9 Attribute Definition Keys
Keys Required
Value
Required
Description
Type Yes See
Description The data type of the attribute. It must be one of the
following:
• STRING
• INTEGER
• IPADDR
If the attribute is an integer, the Enums key is valid.
Profile Yes See
Description The attribute profile defines if the attribute is used for
authorization or accounting (or both). At least one of the
following two values must be present in the Profile key
definition:
• IN—The attribute is used for accounting. After you
add the attribute to Cisco Secure ACS, you can
configure your RADIUS accounting log to record the
new attribute. For more information about RADIUS
accounting logs, see
Accounting Logs, page 11-6 .
• OUT—The attribute is used for authorization.
In addition, you can use the value “MULTI” to allow
several instances of the attribute per RADIUS message.
Combinations are valid. For example:
Profile=MULTI OUT
or
Profile=IN OUT
Enums No (only
valid when
the TYPE
value is
INTEGER) Enumera-
tions
section
name The name of the enumeration section.
Note Several attributes can reference the same
enumeration section. For more information, see
Enumeration Definition, page D-38 .