HP 5120 SI Series Security Configuration Manual page 19

No.
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
NOTE:
The attribute types listed in
•
For more information about commonly used standard RADIUS attributes, see
•
standard RADIUS
Extended RADIUS Attributes
The RADIUS protocol features excellent extensibility. Attribute 26 (Vender-Specific) defined by RFC 2865
allows a vender to define extended attributes to implement functions that the standard RADIUS protocol
does not provide.
A vendor can encapsulate multiple type-length-value (TLV) sub-attributes in RADIUS packets for extension
in applications. As shown in
of the following parts:
• Vendor-ID—ID of the vendor (4 bytes long). Its most significant byte is 0; the other three bytes
contains a code that is compliant to RFC 1700. For more information about the proprietary RADIUS
sub-attributes of HP, see
Vendor-Type—Type of the sub-attribute.
•
Vendor-Length—Length of the sub-attribute.
•
Vendor-Data—Contents of the sub-attribute.
•
Attribute
Idle-Timeout
Termination-Action
Called-Station-Id
Calling-Station-Id
NAS-Identifier
Proxy-State
Login-LAT-Service
Login-LAT-Node
Login-LAT-Group
Framed-AppleTalk-Link
Framed-AppleTalk-Network
Framed-AppleTalk-Zone
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-Id
Table 2
attributes."
Figure 5, a sub-attribute that can be encapsulated in Attribute 26 consists
"Proprietary RADIUS sub-attributes of
No.
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
are defined by RFC 2865, RFC 2866, RFC 2867, and RFC 2868.
7
Attribute
Password-Retry
Prompt
Connect-Info
Configuration-Token
EAP-Message
Message-Authenticator
Tunnel-Private-Group-id
Tunnel-Assignment-id
Tunnel-Preference
ARAP-Challenge-Response
Acct-Interim-Interval
Acct-Tunnel-Packets-Lost
NAS-Port-Id
Framed-Pool
(unassigned)
Tunnel-Client-Auth-id
Tunnel-Server-Auth-id
"Commonly used
HP."