List Of Standard Radius Attributes; Authentication Attributes - Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual

Table 64 Rewrite Module Configuration Settings (Continued)
Value
module.attr_rewrite.name.searchfor = not set
module.attr_rewrite.name.replacewith = not set
module.attr_rewrite.name.ignore_case = no
module.attr_rewrite.name.new_attribute = no
module.attr_rewrite.name.max_matches = 10
module.attr_rewrite.name.append = no

List of Standard Radius Attributes

Authentication Attributes

These are the attributes the NAS uses in authentication packets and expects to get back in authentication
replies. These can be used in matching rules.
User-Name: This attribute indicates the name of the user to be authenticated or accounted. It is used in

Access-Request and Accounting packets.
Password: This attribute indicates the password of the user to be authenticated, or the user's input

following an Access-Challenge. It is only used in Access-Request packets.
CHAP-Password: This attribute indicates the response value provided by a PPP Challenge-Handshake

Authentication Protocol (CHAP) user in response to the challenge. It is only used in Access-Request
packets.
NAS-IP-Address: This attribute indicates the IP address of the NAS which is requesting authentication

of the user. It is only used in Access-Request packets.
NAS-Port-Id: This attribute indicates the physical port number of the NAS which is authenticating the

user. It is only used in Access-Request packets. Note that this is using "port" in its sense of a physical
connection on the NAS, not in the sense of a TCP or UDP port number.
ClearPass Guest 3.9 | Deployment Guide
Description
A regular expression to use when determining if the attribute
should be matched. See "Regular Expressions"
chapter for information about the supported syntax for regular
expressions.
The replacement value which will be used for the attribute
value, if the attribute matches the "searchfor" regular
expression.
Backreferences to the matching components of the
"searchfor" regular expression are supported: %{0} will
contain the string for the entire regular expression match, and
%{1} through %{8} contain the contents of the 1
th
8 matching parenthesized groups.
If the "new_attribute" item is set to yes, then this value is used
as the contents of a new attribute.
If set to yes, matches the "searchfor" regular expression in a
case-insensitive way.
The default behavior is to match case-sensitively.
If set to yes, a new attribute will be created, containing the
value of the "replacewith" item. The new attribute will be
added to the "searchin" item (packet, reply, proxy, proxy_reply
or config). In this case, the "searchfor", "ignore_case" and
"max_matches" items are ignored.
The maximum number of regular expression matches to be
processed for the attribute.
If set to yes, then the "replacewith" string will be appended to
the original attribute value.
The default of "no" causes the entire attribute value to be
replaced.
in this
st
through the
Reference | 499