HP FlexFabric 5700 Series Security Configuration Manual page 18

No.
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Extended RADIUS attributes
The RADIUS protocol features excellent extensibility. The Vendor-Specific attribute (attribute 26) allows a
vendor to define extended attributes. The extended attributes implement functions that the standard
RADIUS protocol does not provide.
A vendor can encapsulate multiple sub-attributes in the TLV format in attribute 26 to provide extended
functions. As shown in
parts:
Vendor-ID—ID of the vendor. The most significant byte is 0. The other three bytes contains a code
•
compliant to RFC 1700.
• Vendor-Type—Type of the sub-attribute.
Vendor-Length—Length of the sub-attribute.
•
Vendor-Data—Contents of the sub-attribute.
•
For more information about the proprietary RADIUS sub-attributes of HP, see
sub-attributes."
Attribute
State
Class
Vendor-Specific
Session-Timeout
Idle-Timeout
Termination-Action
Called-Station-Id
Calling-Station-Id
NAS-Identifier
Proxy-State
Login-LAT-Service
Login-LAT-Node
Login-LAT-Group
Framed-AppleTalk-Link
Framed-AppleTalk-Network
Framed-AppleTalk-Zone
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-Id
Figure 5, a sub-attribute encapsulated in attribute 26 consists of the following
No. Attribute
71 ARAP-Features
72 ARAP-Zone-Access
73 ARAP-Security
74 ARAP-Security-Data
75 Password-Retry
76 Prompt
77 Connect-Info
78 Configuration-Token
79 EAP-Message
80 Message-Authenticator
81 Tunnel-Private-Group-id
82 Tunnel-Assignment-id
83 Tunnel-Preference
84 ARAP-Challenge-Response
85 Acct-Interim-Interval
86 Acct-Tunnel-Packets-Lost
87 NAS-Port-Id
88 Framed-Pool
89 (unassigned)
90 Tunnel-Client-Auth-id
91 Tunnel-Server-Auth-id
6
"HP proprietary RADIUS