Nortel 2300 Series Configuration Manual page 600

600 Appendix B: Supported RADIUS Attributes
Table 39: 801.1X Attributes
Attribute Type
User-Name 1
User-Password 2
CHAP- 3
Password
NAS-IP- 4
Address
Service-Type 5
Filter-Id 11
320657-A
Rcv in Sent in Sent in
Access Access Acct
Resp? Reqst? Reqst?
No Yes Yes
No Yes No
No Yes No
No Yes Yes
No Yes Yes
Yes No Optional
Description and Values
String. Name of the user to be
authenticated. Used only in Request
packets.
Password of the user to be authenticated,
unless a CHAP-Password is used.
Password of the user to be authenticated,
unless a User-Password is used.
IP address sent by the WSS switch.
Access type, which can be one of the
following:
• 2—Framed; for network user access
• 6—Administrative; for
administrative access to the WSS
switch, with authorization to access
the enabled (configuration) mode.
The user must enter the enable
command and the correct enable
password to access the enabled
mode.
• 7—NAS-Prompt; for administrative
access to the nonenabled mode only.
In this mode, the user can still enter
the enable command and the correct
enable password to access the
enabled mode.
For administrative sessions, the WSS
switch always sends 6 (Administrative).
The RADIUS server can reply with one
of the values listed above.
If the service-type is not set on the
RADIUS server, administrative users
receive NAS-Prompt access, and
network users receive Framed access.
Name of an access control list (ACL) to
filter outbound or inbound traffic. Use
the form ACL name.in and ACL
name.out. (For details, see
"Configuring and Managing Security
ACLs," on page 351.)
Chapter ,