H3C S5120-HI Security Configuration Manual page 23

No.
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Extended RADIUS attributes
The RADIUS protocol features excellent extensibility. Attribute 26 (Vendor-Specific), an attribute defined
by RFC 2865, allows a vendor to define extended attributes to implement functions that the standard
RADIUS protocol does not provide.
A vendor can encapsulate multiple sub-attributes in the type-length-value (TLV) format in RADIUS packets
for extension of applications. As shown in
of the following parts:
• Vendor-ID—Indicates the ID of the vendor. Its most significant byte is 0, and the other three bytes
contains a code that is compliant to RFC 1700. The vendor ID of H3C is 25506. For more
information about the proprietary RADIUS sub-attributes of H3C, see
sub-attributes."
Vendor-Type—Indicates the type of the sub-attribute.
•
Vendor-Length—Indicates the length of the sub-attribute.
•
Vendor-Data—Indicates the contents of the sub-attribute.
•
Attribute
Session-Timeout
Idle-Timeout
Termination-Action
Called-Station-Id
Calling-Station-Id
NAS-Identifier
Proxy-State
Login-LAT-Service
Login-LAT-Node
Login-LAT-Group
Framed-AppleTalk-Link
Framed-AppleTalk-Network
Framed-AppleTalk-Zone
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-Id
No.
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
Figure 5, a sub-attribute encapsulated in Attribute 26 consists
6
Attribute
ARAP-Security-Data
Password-Retry
Prompt
Connect-Info
Configuration-Token
EAP-Message
Message-Authenticator
Tunnel-Private-Group-id
Tunnel-Assignment-id
Tunnel-Preference
ARAP-Challenge-Response
Acct-Interim-Interval
Acct-Tunnel-Packets-Lost
NAS-Port-Id
Framed-Pool
(unassigned)
Tunnel-Client-Auth-id
Tunnel-Server-Auth-id
"H3C proprietary RADIUS