Alcatel-Lucent 8950 AAA User Manual page 157

Using the 8950 AAA Policy Assistant in Server
Management Tool
............................................................................................................................................................................................................................................................
Figure 9-9 Sample List of Verification Attributes
Attribute Name
Time-Of-Day
The 8950 AAA server supports session provisioning by returning reply attributes to the
NAS upon a successful authentication. Reply attributes, stored in a attribute set, or
possibly a user profile, provide additional parameters the NAS needs to complete an
access request. By including appropriate reply attributes in a policy, a variety of
connection configurations can be applied. For example, a user can be assigned a specific
IP addresses, IP header compression can be turned on or off, or a time limit can be
assigned to the connection.
commonly used as reply attributes.
Table 9-2 List of Attributes allowed in an Access–Accept available as Reply
Attribute Name
User-Name
Service-Type
Framed-Protocol
Framed-IP-Address
Framed-IP-Netmask
Filter-Id
............................................................................................................................................................................................................................................................
365-360-001R6.0
Issue 1, December 2008
Description of Use of this
Attribute as a Verification
Attribute
Define allowed access times by
day-of-week and/or hour-of-day.
Table 9-2
Attributes
Description
Sets the User-Name for the
session. Use if the NAS should
send accounting for a name other
than the name used for
authentication
The type of protocol. Typically set
to "Framed-Protocol" for IP
networks.
The framing protocol to be used,
typically PPP.
Assigns an IP Address for the
session
Assigns a Netmask for the session
Sets an IP filter to use for the
session. The filter must have been
defined or be available to the
NAS.
Understanding and Creating Attribute Sets
Example
Time-Of-Day = Wk0800-
1700
lists attributes allowed in an Access-Accept that are
Required Max
No 1
No 1
No 1
No 1
No 1
No No limit
9 - 1 7