H3C Technologies H3C S12500-X Series Switches User Manual

Page 17

Advertising
background image

5

The Authenticator field (16 bytes long) is used to authenticate responses from the RADIUS server and

to encrypt user passwords. There are two types of authenticators: request authenticator and
response authenticator.

The Attributes field (variable in length) includes specific authentication, authorization, and
accounting information. This field can contain multiple attributes, each with three sub-fields:

{

Type—Type of the attribute.

{

Length—Length of the attribute in bytes, including the Type, Length, and Value sub-fields.

{

Value—Value of the attribute. Its format and content depend on the Type sub-field.

Commonly used RADIUS attributes are defined in RFC 2865, RFC 2866, RFC 2867, and RFC
2868. For more information, see "

679H

Commonly used standard RADIUS attributes

."

Table 2 Commonly used RADIUS attributes

No. Attribute

No.

Attribute

1 User-Name

45

Acct-Authentic

2 User-Password

46

Acct-Session-Time

3 CHAP-Password

47

Acct-Input-Packets

4 NAS-IP-Address

48

Acct-Output-Packets

5 NAS-Port

49

Acct-Terminate-Cause

6 Service-Type

50

Acct-Multi-Session-Id

7 Framed-Protocol

51

Acct-Link-Count

8 Framed-IP-Address

52

Acct-Input-Gigawords

9 Framed-IP-Netmask

53

Acct-Output-Gigawords

10 Framed-Routing

54 (unassigned)

11 Filter-ID

55 Event-Timestamp

12 Framed-MTU

56-59

(unassigned)

13 Framed-Compression

60 CHAP-Challenge

14 Login-IP-Host

61 NAS-Port-Type

15 Login-Service

62 Port-Limit

16 Login-TCP-Port

63 Login-LAT-Port

17 (unassigned)

64 Tunnel-Type

18 Reply-Message

65 Tunnel-Medium-Type

19 Callback-Number

66 Tunnel-Client-Endpoint

20 Callback-ID

67 Tunnel-Server-Endpoint

21 (unassigned)

68 Acct-Tunnel-Connection

22 Framed-Route

69 Tunnel-Password

23 Framed-IPX-Network

70 ARAP-Password

24 State

71 ARAP-Features

25 Class

72 ARAP-Zone-Access

26 Vendor-Specific

73 ARAP-Security

Advertising