GeoDesy GD-Geo20 - Manual (Page 57)

57
9.2 RADIUS Attributes
The following RADIUS attributes and messages are supported by the GD-GEO20.
9.2.1 General Attributes
Attribute Description
User-name (1) Full username as entered by the user.
User-Password (2) Used for UAM as alternative to CHAP-Password and CHAP-Challenge.
CHAP-Password (3) Used for UAM CHAP Authentication
CHAP-Challenge (60) Used for UAM CHAP Authentication
EAP-Message (79) Used for WPA Authentication
NAS-IP-Address (4) IP address of Chilli (set by the nasip or radiuslisten option, and
otherwise "0.0.0.0")
Service-Type (6) Set to Login (1) for normal authentication requests. The Access-Accept
message from the
Radius server for configuration management messages must also
be set to Administrative-User.
Framed-IP-Address (8) IP address of the user, which is configurable during MAC
authentication in the Access-Accept.
Filter-ID (11) Filter ID pass on to scripts possibly.
Reply-Message (18) Reason of reject if present.
State (24) Sent to chilli in Access-Accept or Access-Challenge. Used
transparently in subsequent Access-Request.
Class (25) Copied transparently by chilli from Access-Accept to Accounting-
Request.
Session-Timeout (27) Logout once session timeout is reached (seconds)
Idle-Timeout (28) Logout once idle timeout is reached (seconds)
alled-Station-ID (30) Set to the nasmac option or the MAC address of chilli.
Calling-Station-ID (31) MAC address of client
NAS-Identifier (32) Set to radiusnasid option if present.
Acct-Status-Type (40) 1=Start, 2=Stop, 3=Interim-Update
Acct-Input-Octets (42) Number of octets received from client.
Acct-Output-Octets (43) Number of octets transmitted to client.
Acct-Session-ID (44) Unique ID to link Access-Request and Accounting-Request messages.
Acct-Session-Time (46) Session duration in seconds.
Acct-Input-Packets (47) Number of packets received from client.
Acct-Output-Packets (48) Number of packets transmitted to client.
Acct-Terminate-Cause (49) 1=User-Request, 2=Lost-Carrier, 4=Idle-Timeout, 5=Session-Timeout,
11=NAS-Reboot
Acct-Input-Gigawords (52) Number of times the Acct-Input-Octets counter has wrapped around.
Acct-Output-Gigawords (53) Number of times the Acct-Output-Octets counter has wrapped around.
NAS-Port-Type (61) 19=W ireless-IEEE-802.11
Message-Authenticator (80) Is always included in Access-Request. If present in Access-Accept,
Access-Challenge or
Access-reject chilli will validate that the Message-Authenticator is
correct.