User Authentication Using Ers5600, Ers5500, Ers4500, Or Ers2500 - Avaya ERS 8600 Technical Configuration Manual

Read-Write-Access
Read-Write-All-Access
In addition, on the ERS8600 only, via vendor identifier 1584 attribute type 194, if is set to a value of 0, you
can enter a list of CLI commands not allowed for a user. The CLI command is entered using the RADIUS
string value configured via RADIUS vendor identifier 1584 attribute type 195.
1.3 User Authentication using ERS5600, ERS5500,
ERS4500, or ERS2500
The ERS5600, ERS5500, ERS4500, and ERS2500 each support two different user access levels which
are read-only or read-write. RADIUS attribute type 6, Service-Type, is used to determine the access level.
The following displays the complete list of RADIUS attribute values for the RADIUS Service-Type attribute
where value 6 (Administrative) is used for read-write access and value 7 (NAS Prompt) is used for read-
only access
Sub-registry: Values for RADIUS Attribute 6, Service-Type
Reference: [RFC2865][RFC3575]
Registration Procedures: IETF Consensus
Registry:
Value Description
----- -------------------------------
1 Login
2 Framed
3 Callback Login
4 Callback Framed
5 Outbound
6 Administrative
7 NAS Prompt
8 Authenticate Only
9 Callback NAS Prompt
10 Call Check
11 Callback Administrative
12 Voice
13 Fax
14 Modem Relay
15 IAPP-Register
16 IAPP-AP-Check
17 Authorize Only
18 Framed-Management
Switch User Authentication using Identity Engines Ignition Server Technical Configuration Guide
[July 2010
5
6
Reference
---------
[Chiba]
[Chiba]
[Chiba]
[IEEE 802.11f][Kerry]
[IEEE 802.11f][Kerry]
[RFC3576]
[RFC5607]
avaya.com
7