Alcatel-Lucent 7750 Reference Manual page 121

Table 38: IPSEC (description) (Continued)
Attribute ID Attribute Name
46 Acct-Session-Time
79 EAP-Message
80 Message-Authenticator
87 Nas-Port-Id
97 Framed-IPv6-Prefix
26-311-16 MS-MPPE-Send-Key
26-311-17 MS-MPPE-Recv-Key
26-6527-9 Alc-Primary-Dns
26-6527-10 Alc-Secondary-Dns
26-6527-61 Alc-IPsec-Serv-Id
7750 SR RADIUS Attributes Reference Guide
This attribute represents the tunnel's lifetime in seconds. It is included in an
Accounting-Stop packet.
This attribute encapsulates the received IKEv2 EAP payload in access-
request. A RADIUS server can include this attribute in an access-challenge or
access-accept.
This attribute is used in EAP authentication and provides message integrity
verification.
The public SAP ID of IKEv2 remote-access tunnel. The attribute can be
included/excluded with configure ipsec radius-authentication-policy
<policy-name> include-radius-attribute nas-port-id or configure ipsec
radius-accounting-policy <policy-name> include-radius-attribute nas-
port-id.
The IPv6 address to be assigned to IKEv2 remote-access tunnel client via
IKEv2 configuration payload: INTERNAL_IP6_ADDRESS. The prefix and
prefix-length of Framed-IPv6-Prefix are conveyed in the corresponding part
of INTERNAL_IP6_ADDRESS. The attribute is included in RADIUS
accounting request packet.
This attribute along with [26-311-17] MS-MPPE-Recv-Key hold the Master
Session Key (MSK) of the EAP authentication. It is expected in access-accept
when EAP authentication succeed with certain EAP methods.
This attribute along with [26-311-16] MS-MPPE-Send-Key hold the Master
Session Key (MSK) of the EAP authentication. It is expected in access-accept
when EAP authentication succeed with certain EAP methods.
The IPv4 DNS server address to be assigned to an IKEv1/v2 remote-access
tunnel client via configuration payload: INTERNAL_IP4_DNS. In case of
IKEv2, up to four DNS server addresses can be returned to a client, including
Alc-Primary-Dns, Alc-Secondary-Dns, Alc-Ipv6-Primary-Dns and Alc-Ipv6-
Secondary-Dns.
The IPv4 DNS server address to be assigned to an IKEv2 remote-access
tunnel client via IKEv2 configuration payload: INTERNAL_IP4_DNS. Up to
four DNS server addresses can be returned to a client, including Alc-Primary-
Dns, Alc-Secondary-Dns, Alc-Ipv6-Primary-Dns and Alc-Ipv6-Secondary-
Dns.
IPSec private service id, used by IKEv1/v2 remote-access tunnel, referring to
the preconfigured VPRN where the IPSec tunnel terminates (configure
service vprn <service-id>). A default private service is used when this
attribute is omitted (configure service vprn interface sap ipsec-gw default-
secure-service). If the returned service id doesn't exist/out-of limits or exists
but not a VPRN service, the tunnel setup will fail.
RADIUS Attributes Reference
Description
Page 121