Colubris Networks CN3000 Administrator's Manual page 151

Chapter 7 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Customizing CN3000 and customer settings - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 7
• CHAP-Challenge (string): Randomly generated by the product. As defined in RFC
• MSCHAP-Challenge (string): As defined in RFC 2433. Only present when the
• MSCHAP-Response (string): As defined in RFC 2433. Only present when the
• MSCHAPv2-Response (string): As defined in RFC 2759. Only present when the
• EAP-Message (string): As defined in RFC 2869. Only present when the
Access accept
• Session-Timeout (32-bit unsigned integer): Maximum time a session can be active.
• Class (string): As defined in RFC 2865. Multiple instances are supported.
• EAP-Message (string): Only supported when authentication is EAP-MD5. Note that
• Colubris-AVPair: See the description in the section that follows.
Access reject
None.
Access challenge
None.
Accounting request
Accounting information is generated by default. To disable accounting support, open the
Security > Authentication -> Advanced Settings page.
• Acct-Session-Id (32-bit unsigned integer): Random value generated by the CN3000.
• NAS-Identifier (string): The NAS ID set on the Security > RADIUS page for the profile
• NAS-Ip-Address (32-bit unsigned integer): The IP address of the port the CN3000 is
• NAS-Port (32-bit unsigned integer): Always 0.
• NAS-Port-Type (32-bit unsigned integer): Always set to 19, which represents
• Calling-Station-Id (string): The MAC address of the CN3000's LAN port in IEEE
• Called-Station-Id (string): The MAC address of the CN3000's LAN port in IEEE
• User-Name (string): The RADIUS username assigned to the CN3000 on the Security
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 151 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2865. Only present when the authentication method for the RADIUS profile is set to
CHAP. Length = 19 bytes.
authentication method for the RADIUS profile is set to MSCHAPv1 or MSCHAPv2.
Length = 8 bytes.
authentication method for the RADIUS profile is set to MSCHAPv1. Length = 49
bytes.
authentication method for the RADIUS profile is set to MSCHAPv2. Length = 49
bytes.
authentication method for the RADIUS profile is set to EAP-MD5.
The CN3000 re-authenticates itself when this timer expires. Omitting this attribute or
specifying 0 will disable the feature. (Note that the authentication interval is also
configurable on the Security > Authentication page.
the content will not be read as the RADIUS Access Accept is overriding whatever
indication contained inside this packet.
being used.
using to communicate with the RADIUS server.
WIRELESS_802_11.
format. For example: 00-02-03-5E-32-1A.
format. For example: 00-02-03-5E-32-1A.
> Authentication page.