Radius attributes – H3C Technologies H3C S12500-X Series Switches User Manual
Page 26
14
161B
RADIUS attributes
349B
Commonly used standard RADIUS attributes
No. Attribute
Description
1
User-Name
Name of the user to be authenticated.
2 User-Password
User password for PAP authentication, only present in Access-Request
packets when PAP authentication is used.
3 CHAP-Password
Digest of the user password for CHAP authentication, only present in
Access-Request packets when CHAP authentication is used.
4 NAS-IP-Address
IP address for the server to use to identify the client. Typically, a client is
identified by the IP address of its access interface. This attribute is only
present in Access-Request packets.
5
NAS-Port
Physical port of the NAS that the user accesses.
6 Service-Type
Type of service that the user has requested or type of service to be
provided.
7
Framed-Protocol
Encapsulation protocol for framed access.
8
Framed-IP-Address
IP address assigned to the user.
11
Filter-ID
Name of the filter list.
12 Framed-MTU
MTU for the data link between the user and NAS. For example, this
attribute can be used to define the maximum size of EAP packets allowed to
be processed in 802.1X EAP authentication.
14
Login-IP-Host
IP address of the NAS interface that the user accesses.
15
Login-Service
Type of the service that the user uses for login.
18 Reply-Message
Text to be displayed to the user, which can be used by the server to
communicate information, for example, the reason of the authentication
failure.
26 Vendor-Specific
Vendor specific, proprietary attribute. A packet can contain one or more
proprietary attributes, each of which can contain one or more
sub-attributes.
27
Session-Timeout
Maximum service duration for the user before termination of the session.
28
Idle-Timeout
Maximum idle time permitted for the user before termination of the session.
31 Calling-Station-Id
User identification that the NAS sends to the server. For the LAN access
service provided by an H3C device, this attribute includes the MAC
address of the user in the format HHHH-HHHH-HHHH.
32
NAS-Identifier
Identification that the NAS uses to identify itself to the RADIUS server.