HP 6600 Security Configuration Manual page 33

No. Sub-attribute
15 Remanent_Volume
20 Command
24 Control_Identifier
25 Result_Code
26 Connect_ID
28 Ftp_Directory
29 Exec_Privilege
59 NAS_Startup_Timestamp
60 Ip_Host_Addr
61 User_Notify
62 User_HeartBeat
140 User_Group
141 Security_Level
201 Input-Interval-Octets
202 Output-Interval-Octets
203 Input-Interval-Packets
204 Output-Interval-Packets
Description
Total remaining available traffic for the connection, in different units for
different server types.
Operation for the session, used for session control. Possible values
include:
•
1—Trigger-Request.
•
2—Terminate-Request.
•
3—SetPolicy.
•
4—Result.
•
5—PortalClear.
Identification for retransmitted packets. For retransmitted packets of the
same session, this attribute must take the same value. For retransmitted
packets of different sessions, this attribute may take the same value. The
client response of a retransmitted packet must also carry this attribute and
the value of this attribute must be the same.
For Accounting-Request packets of the start, stop, and interim update
types, the Control-Identifier attribute does not take effect.
Result of the Trigger-Request or SetPolicy operation, zero for success and
any other value for failure.
Index of the user connection.
FTP user working directory. When the RADIUS client acts as the FTP server,
this attribute is used to set the FTP directory for an FTP user on the RADIUS
client.
EXEC user priority.
Startup time of the NAS in seconds, which is represented by the time
elapsed after 00:00:00 on Jan. 1, 1970 (UTC).
User IP address and MAC address carried in authentication and
accounting requests, in the format A.B.C.D hh:hh:hh:hh:hh:hh. A space is
required between the IP address and the MAC address.
Information that must be sent from the server to the client transparently.
Hash value assigned after an 802.1X user passes authentication, which is
a 32-byte string. This attribute is stored in the user list on the NAS and is
used for verifying the handshake messages from the 802.1X user. This
attribute only exists in Access-Accept and Accounting-Request packets.
User groups assigned after the SSL VPN user passes authentication. A user
may belong to more than one user group. In this case, the user groups are
delimited by semi-colons. This attribute is used for cooperation with the SSL
VPN device.
Security level assigned after the SSL VPN user passes security
authentication.
Number of bytes input within a real-time accounting interval.
Number of bytes output within a real-time accounting interval.
Number of packets input within an accounting interval, in the unit set on
the NAS.
Number of packets output within an accounting interval, in the unit set on
the NAS.
19