Extended radius attributes – H3C Technologies H3C WX6000 Series Access Controllers User Manual

Page 441

Advertising
background image

38-6

No.

Attribute

No.

Attribute

31 Calling-Station-Id

78 Configuration-Token

32 NAS-Identifier

79 EAP-Message

33 Proxy-State

80 Message-Authenticator

34 Login-LAT-Service

81 Tunnel-Private-Group-id

35 Login-LAT-Node

82 Tunnel-Assignment-id

36 Login-LAT-Group

83 Tunnel-Preference

37 Framed-AppleTalk-Link

84 ARAP-Challenge-Response

38 Framed-AppleTalk-Network

85 Acct-Interim-Interval

39 Framed-AppleTalk-Zone

86 Acct-Tunnel-Packets-Lost

40 Acct-Status-Type

87 NAS-Port-Id

41 Acct-Delay-Time

88 Framed-Pool

42 Acct-Input-Octets 89

(unassigned)

43 Acct-Output-Octets

90 Tunnel-Client-Auth-id

44 Acct-Session-Id

91 Tunnel-Server-Auth-id

The attribute types listed in

Table 38-2

are defined by RFC 2865, RFC 2866, RFC 2867, and RFC 2568.

Extended RADIUS Attributes

The RADIUS protocol features excellent extensibility. Attribute 26 (Vender-Specific) defined by RFC

2865 allows a vender to define extended attributes to implement functions that the standard RADIUS

protocol does not provide.

A vendor can encapsulate multiple type-length-value (TLV) sub-attributes in RADIUS packets for

extension in applications. As shown in

Figure 38-4

, a sub-attribute that can be encapsulated in Attribute

26 consists of the following four parts:

Vendor-ID (four bytes): Indicates the ID of the vendor. Its most significant byte is 0 and the other

three bytes contain a code complying with RFC 1700. The vendor ID of H3C is 2011.

Vendor-Type: Indicates the type of the sub-attribute.

Vendor-Length: Indicates the length of the sub-attribute.

Vendor-Data: Indicates the contents of the sub-attribute.

Advertising