HP 3600 v2 Series Security Configuration Manual page 17

No.
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Extended RADIUS attributes
The RADIUS protocol features excellent extensibility. Attribute 26 (Vender-Specific), an attribute defined
by RFC 2865, allows a vender to define extended attributes to implement functions that the standard
RADIUS protocol does not provide.
A vendor can encapsulate multiple sub-attributes in the type-length-value (TLV) format in RADIUS packets
for extension of applications. As shown in
of the following parts:
• Vendor-ID—Indicates the ID of the vendor. Its most significant byte is 0; the other three bytes
contains a code that is compliant to RFC 1700. For more information about the proprietary RADIUS
sub-attributes of HP, see
Vendor-Type—Indicates the type of the sub-attribute.
•
Vendor-Length—Indicates the length of the sub-attribute.
•
Vendor-Data—Indicates the contents of the sub-attribute.
•
Attribute
Session-Timeout
Idle-Timeout
Termination-Action
Called-Station-Id
Calling-Station-Id
NAS-Identifier
Proxy-State
Login-LAT-Service
Login-LAT-Node
Login-LAT-Group
Framed-AppleTalk-Link
Framed-AppleTalk-Network
Framed-AppleTalk-Zone
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-Id
"HP proprietary RADIUS
No.
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
Figure 5, a sub-attribute encapsulated in Attribute 26 consists
sub-attributes."
6
Attribute
ARAP-Security-Data
Password-Retry
Prompt
Connect-Info
Configuration-Token
EAP-Message
Message-Authenticator
Tunnel-Private-Group-id
Tunnel-Assignment-id
Tunnel-Preference
ARAP-Challenge-Response
Acct-Interim-Interval
Acct-Tunnel-Packets-Lost
NAS-Port-Id
Framed-Pool
(unassigned)
Tunnel-Client-Auth-id
Tunnel-Server-Auth-id