H3C S7500E Series Operation Manual page 848

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
No.
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Note:
The attribute types listed in
and RFC 2568.
V. RADIUS extended attributes
The RADIUS protocol features excellent extensibility. Attribute 26 (Vender-Specific)
defined by RFC 2865 allows a vender to define extended attributes to implement
functions that the standard RADIUS protocol does not provide.
A vendor can encapsulate multiple type-length-value (TLV) sub-attributes in RADIUS
packets for extension in applications. As shown in
be encapsulated in Attribute 26 consists of the following four parts:
Vendor-ID (four bytes): Indicates the ID of the vendor. Its most significant byte is 0
and the other three bytes contain a code complying with RFC 1700. The vendor ID
of H3C is 2011.
Vendor-Type: Indicates the type of the sub-attribute.
Vendor-Length: Indicates the length of the sub-attribute.
Vendor-Data: Indicates the contents of the sub-attribute.
Attribute type
Called-Station-Id
Calling-Station-Id
NAS-Identifier
Proxy-State
Login-LAT-Service
Login-LAT-Node
Login-LAT-Group
Framed-AppleTalk-Link
Framed-AppleTalk-Network
Framed-AppleTalk-Zone
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-Id
Table 1-2
Chapter 1 AAA/RADIUS/HWTACACS
No.
77 Connect-Info
78 Configuration-Token
79 EAP-Message
80 Message-Authenticator
81 Tunnel-Private-Group-id
82 Tunnel-Assignment-id
83 Tunnel-Preference
84 ARAP-Challenge-Response
85 Acct-Interim-Interval
86 Acct-Tunnel-Packets-Lost
87 NAS-Port-Id
88 Framed-Pool
89 (unassigned)
90 Tunnel-Client-Auth-id
91 Tunnel-Server-Auth-id
are defined by RFC 2865, RFC 2866, RFC 2867,
Figure
1-8
Configuration
Attribute type
1-5, a sub-attribute that can