Protocols And Standards; Radius Attributes - HP VSR1000 Security Configuration Manual

Protocols and standards

The following protocols and standards are related to AAA, RADIUS, HWTACACS, and LDAP:
• RFC 2865, Remote Authentication Dial In User Service (RADIUS)
RFC 2866, RADIUS Accounting
•
RFC 2867, RADIUS Accounting Modifications for Tunnel Protocol Support
•
RFC 2868, RADIUS Attributes for Tunnel Protocol Support
•
RFC 2869, RADIUS Extensions
•
• RFC 5176, Dynamic Authorization Extensions to Remote Authentication Dial In User Service
(RADIUS)
RFC 1492, An Access Control Protocol, Sometimes Called TACACS
•
RFC 1777, Lightweight Directory Access Protocol
•
• RFC 2251, Lightweight Directory Access Protocol (v3)

RADIUS attributes

Commonly used standard RADIUS attributes
No. Attribute
1 User-Name
2 User-Password
3 CHAP-Password
4 NAS-IP-Address
5 NAS-Port
6 Service-Type
7 Framed-Protocol
8 Framed-IP-Address
11 Filter-ID
12 Framed-MTU
14 Login-IP-Host
15 Login-Service
18 Reply-Message
26 Vendor-Specific
Description
Name of the user to be authenticated.
User password for PAP authentication, only present in Access-Request
packets when PAP authentication is used.
Digest of the user password for CHAP authentication, only present in
Access-Request packets when CHAP authentication is used.
IP address for the server to use to identify the client. Typically, a client is
identified by the IP address of its access interface. This attribute is only
present in Access-Request packets.
Physical port of the NAS that the user accesses.
Type of service that the user has requested or type of service to be
provided.
Encapsulation protocol for framed access.
IP address assigned to the user.
Name of the filter list.
MTU for the data link between the user and NAS.
IP address of the NAS interface that the user accesses.
Type of the service that the user uses for login.
Text to be displayed to the user, which can be used by the server to
communicate information, for example, the reason of the authentication
failure.
Vendor-specific proprietary attribute. A packet can contain one or more
proprietary attributes, each of which can contain one or more
sub-attributes.
14