3Com 4210 PWR Configuration Manual page 244

242 C 20: AAA O
HAPTER VERVIEW
3 The Length field (two bytes) specifies the total length of the message (including
the Code, Identifier, Length, Authenticator and Attributes fields). The bytes
beyond the length are regarded as padding and are ignored upon reception. If a
received message is shorter than what the Length field indicates, it is discarded.
4 The Authenticator field (16 bytes) is used to authenticate the response from the
RADIUS server; and is used in the password hiding algorithm. There are two kinds
of authenticators: Request Authenticator and Response Authenticator.
5 The Attributes field contains specific authentication/authorization/accounting
information to provide the configuration details of a request or response message.
This field contains a list of field triplet (Type, Length and Value):
The Type field (one byte) specifies the type of an attribute. Its value ranges from
■
1 to 255. Table 179 lists the attributes that are commonly used in RADIUS
authentication/authorization.
The Length field (one byte) specifies the total length of the attribute in bytes
■
(including the Type, Length and Value fields).
The Value field (up to 253 bytes) contains the information of the attribute. Its
■
format is determined by the Type and Length fields.
Table 179 RADIUS attributes
Type field
value Attribute type
1 User-Name
2 User-Password
3 CHAP-Password
4 NAS-IP-Address
5 NAS-Port
6 Service-Type
7 Framed-Protocol
8 Framed-IP-Address
9 Framed-IP-Netmask
10 Framed-Routing
11 Filter-ID
12 Framed-MTU
13 Framed-Compression
14 Login-IP-Host
15 Login-Service
16 Login-TCP-Port
17 (unassigned)
18 Reply-Message
19 Callback-Number
20 Callback-ID
21 (unassigned)
22 Framed-Route
The RADIUS protocol has good scalability. Attribute 26 (Vender-Specific) defined in
this protocol allows a device vendor to extend RADIUS to implement functions
that are not defined in standard RADIUS.
Type field value Attribute type
23 Framed-IPX-Network
24 State
25 Class
26 Vendor-Specific
27 Session-Timeout
28 Idle-Timeout
29 Termination-Action
30 Called-Station-Id
31 Calling-Station-Id
32 NAS-Identifier
33 Proxy-State
34 Login-LAT-Service
35 Login-LAT-Node
36 Login-LAT-Group
37 Framed-AppleTalk-Link
38 Framed-AppleTalk-Network
39 Framed-AppleTalk-Zone
40-59 (reserved for accounting)
60 CHAP-Challenge
61 NAS-Port-Type
62 Port-Limit
63 Login-LAT-Port