Extreme Networks ExtremeWare XOS Guide Manual page 352

Network Login
Add the following line to the RADIUS server users file for netlogin-only disabled users:
Extreme:Extreme-Netlogin-Only = Disabled
Add the following line to the RADIUS server users file for netlogin-only enabled users:
Extreme:Extreme-Netlogin-Only = Enabled
Table 49 contains the Vendor Specific Attribute (VSA) definitions for web-based, MAC-based, and 802.1x
network login. The Extreme Network Vendor ID is 1916.
Table 49: VSA Definitions for Web-based, MAC-based, and 802.1x network login
VSA
Extreme: Netlogin-
Extended-VLAN
Extreme: Netlogin-
VLAN-Name
Extreme: Netlogin-
VLAN-ID
Extreme: Netlogin-URL
Extreme: Netlogin-
URL-Desc
Extreme: Netlogin-Only
Table 50 contains the standard RADIUS attributes used by network login.
Table 50: Standard RADIUS attributes used by network login
Attribute
IETF: Tunnel-Type
IETF: Tunnel-Medium-Type
IETF: Tunnel-Private-Group-ID
352
Vendor
Type Type Sent-in
211 String Access-Accept
203 String Access-Accept
209 Integer Access-Accept
204 String Access-Accept
205 String Access-Accept
206 Integer Access-Accept
Attribute
Value Type
64 Integer
65 Integer
81 String
Description
Name or ID of the destination VLAN after
successful authentication (must already exist on
switch).
NOTE: When using this attribute, specify
whether the port should be moved tagged or
untagged to the VLAN. Please see the guidelines
listed on page 353 for more information.
Name of destination VLAN after successful
authentication (must already exist on switch).
ID of destination VLAN after successful
authentication (must already exist on switch).
Destination web page after successful
authentication.
Text description of network login URL attribute.
Indication of whether the user can authenticate
using other means, such as telnet, console,
SSH, or Vista. A value of "1" (enabled)
indicates that the user can only authenticate via
network login. A value of zero (disabled)
indicates that the user can also authenticate via
other methods.
Sent-in Description
Access-Accept Specifies the tunneling protocol
that is used.
Access-Accept Specifies the transport medium
used when creating a tunnel for
protocols (for example, VLANs) that
can operate over multiple
transports.
Access-Accept Specifies the VLAN ID of the
destination VLAN after successful
authentication; used to derive the
VLAN name.
ExtremeWare XOS 11.3 Concepts Guide