Ipsec; Table 38: Ipsec (Description) - Alcatel-Lucent 7750 Reference Manual

Service router radius attributes
Table of Contents

Advertisement

IPSEC

IPSEC

Table 38: IPSEC (description)

Attribute ID
Attribute Name
1
User-Name
2
User-Password
8
Framed-IP- Address
9
Framed-IP-Netmask
30
Called-Station-Id
31
Calling-Station-Id
44
Acct-Session-Id
Page 120
For IKEv1 remote-access tunnel, this represents the xauth username.
For IKEv2 remote-access tunnel, this represents the identity of the peer; the
value of User-Name is the received IDi in IKEv2 message. This attribute is
included in Access-Request and Accounting-Request
For IKEv1 remote-access tunnel, this represents the xauth password.
For IKEv2 remote-access tunnel with pskradius authentication method, this
represents the pre-shared-key of the ipsec-gw or ipsec-tunnel:
configure service ies/vprn <svc-id> interface <interface-name> sap <sap-
id> ipsec-gw <gw-name> pre-shared-key
or
configure service vprn <svc-id> interface <interface-name> sap <sap-id>
ipsec-tunnel <tnl-name> dynamic-keying pre-shared-key
For IKEv2 remote-access tunnel with authentication method other than
pskradius, this represents the password configured in IPsec radius-
authentication-policy:
configure ipsec radius-authentication-policy <policy-name> password
The IPv4 address to be assigned to IKEv1/v2 remote-access tunnel client via
configuration payload: INTERNAL_IP4_ADDRESS. This attribute is also
reflected in RADIUS accounting request packet for IKEv2 tunnel.
The IPv4 netmask to be assigned to IKEv1/v2 remote-access tunnel client via
configuration payload: INTERNAL_IP4_NETMASK.
The local gateway address of IKEv2 remote-access tunnel. The attribute can
be included/excluded with configure ipsec radius-authentication-policy
<policy-name> include-radius-attribute called-station-id or configure
ipsec radius-accounting-policy <policy-name> include-radius-attribute
called-station-id.
The peer's address and port of IKEv2 remote-access tunnel. The format is
"address:port", for example, "10.1.1.1:1546". he attribute can be included/
excluded with configure ipsec radius-authentication-policy <policy-name>
include-radius-attribute calling-station-id or configure ipsec radius-
accounting-policy <policy-name> include-radius-attribute caling-station-
id.
A unique identifier representing an IKEv2 remote-access tunnel session that is
authenticated. Same Acct-Session-Id is included in both access-request and
accounting-request. The format is local_gw_ip-remote_ip:remote_port-
time_stamp.
7750 SR RADIUS Attributes Reference Guide
Description

Advertisement

Table of Contents
loading

Table of Contents