Cisco 3.3 User Manual

Page 691

Advertising
background image

C-19

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Appendix C RADIUS Attributes

IETF Dictionary of RADIUS AV Pairs

24

State

Allows State information to be
maintained between the AAA client
and the RADIUS server. This
attribute is applicable only to CHAP
challenges.

String
(maximum
length 253
characters)

Outbound

No

25

Class

Arbitrary value that the AAA client
includes in all accounting packets
for this user if supplied by the
RADIUS server.

String

Both

Yes

26

Vendor-
Specific

Carries subattributes known as
vendor-specific attributes (VSAs), a
feature of RADIUS that allows
vendors to support their own
extended attributes. Subattributes
are identified by IANA-assigned
vendor numbers in combination
with the vendor-assigned
subattribute number. For example,
the vendor number for Cisco
IOS/PIX RADIUS is 9. The
cisco-av-pair VSA is attribute 1 in
the set of VSAs related to vendor
number 9.

String

Outbound

Yes

27

Session-
Timeout

Maximum number of seconds of
service to be provided to the user
before the session terminates. This
AV becomes the per-user absolute
timeout. This attribute is not valid
for PPP sessions.

Integer
(maximum
length 10
characters)

Outbound

No

Table C-6

RADIUS (IETF) Attributes (continued)

Number

Name

Description

Type of
Value

Inbound/Out
bound

Multiple

Advertising