Cisco Servers User Manual page 526

Microsoft MPPE Dictionary of RADIUS VSAs
Table D-9 Microsoft MPPE RADIUS VSAs (continued)
Attribute
MS-CHAP-Domain
MS-CHAP-Challenge
MS-CHAP-MPPE-Keys
MS-MPPE-Send-Key
MS-MPPE-Recv-Key
MS-RAS-Version
MS-CHAP-NT-Enc-PW
MS-CHAP2-Response
MS-CHAP2-CPW
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
D-20
Number Type of Value
10 string
11 string
12 string
16 string
17 string
18 string
25 string
26 string
27 string
Appendix D
Description
—
—
The MS-CHAP-MPPE-Keys attribute
contains two session keys for use by the
MPPE. This attribute is only included in
Access-Accept packets.
The MS-CHAP-MPPE-Keys attribute
value is autogenerated by
Cisco Secure ACS; there is no value to set
in the HTML interface.
The MS-MPPE-Send-Key attribute
contains a session key for use by MPPE.
As the name implies, this key is intended
for encrypting packets sent from the AAA
client to the remote host. This attribute is
only included in Access-Accept packets.
The MS-MPPE-Recv-Key attribute
contains a session key for use by MPPE.
As the name implies, this key is intended
for encrypting packets received by the
AAA client from the remote host. This
attribute is only included in
Access-Accept packets
—
—
—
—
RADIUS Attributes
78-13751-01, Version 3.0