Commonly used standard radius attributes – H3C Technologies H3C SecBlade LB Cards User Manual
Page 58
47
Commonly used standard RADIUS attributes
No. Attribute
Description
1
User-Name
Name of the user to be authenticated.
2 User-Password
User password for PAP authentication, only present in Access-Request
packets when PAP authentication is used.
3 CHAP-Password
Digest of the user password for CHAP authentication, only present in
Access-Request packets when CHAP authentication is used.
4 NAS-IP-Address
IP address for the server to use to identify a client. Usually, a client is
identified by the IP address of its access interface. This attribute is only
present in Access-Request packets.
5
NAS-Port
Physical port of the NAS that the user accesses.
6
Service-Type
Type of service that the user has requested or type of service to be provided.
7
Framed-Protocol
Encapsulation protocol for framed access.
8
Framed-IP-Address
IP address assigned to the user.
11
Filter-ID
Name of the filter list.
12
Framed-MTU
MTU for the data link between the user and NAS.
14
Login-IP-Host
IP address of the NAS interface that the user accesses.
15
Login-Service
Type of the service that the user uses for login.
18 Reply-Message
Text to be displayed to the user, which can be used by the server to indicate,
for example, the reason of the authentication failure.
26 Vendor-Specific
Vendor specific attribute. A packet can contain one or more such proprietary
attributes, each of which can contain one or more sub-attributes.
27
Session-Timeout
Maximum service duration for the user before termination of the session.
28
Idle-Timeout
Maximum idle time permitted for the user before termination of the session.
31 Calling-Station-Id
User
identification that the NAS sends to the server.
32
NAS-Identifier
Identification that the NAS uses to identify itself to the RADIUS server.
40 Acct-Status-Type
Type of the Accounting-Request packet. Possible values include:
•
1—Start.
•
2—Stop.
•
3—Interim-Update.
•
4—Reset-Charge.
•
7—Accounting-On. (Defined in the 3rd Generation Partnership Project.)
•
8—Accounting-Off. (Defined in the 3rd Generation Partnership Project.)
•
9 to 14—Reserved for tunnel accounting.
•
15—Reserved for failed.
45 Acct-Authentic
Authentication method used by the user. Possible values include:
•
1—RADIUS.
•
2—Local.
•
3—Remote.
60 CHAP-Challenge
CHAP challenge generated by the NAS for MD5 calculation during CHAP
authentication.