Example Configuration On Cisco Secure Acs For Ms Windows - ProCurve 2610 Manual

You must configure the RADIUS server to provide support for the HP VSAs.
There are multiple RADIUS server applications; the two examples below show
how a dictionary file can be created to define the VSAs for that RADIUS server
application.
Example Configuration on Cisco Secure ACS for MS
Windows
It is necessary to create a dictionary file that defines the VSAs so that the
RADIUS server application can determine which VSAs to add to its user
interface. The VSAs will appear below the standard attributes that can be
configured in the application.
The dictionary file must be placed in the proper directory on the RADIUS
server. Follow these steps.
1. Create a dictionary file (for example, hp.ini) containing the HP VSA
definitions, as shown in the example below.
;[User Defined Vendor]
;
; The Name and IETF vendor code and any VSAs MUST be unique.
;
; One or more VSAs named (max 255)
;
; Each named VSA requires a definition section...
;
; Types are STRING, INTEGER, IPADDR
;
; The profile specifies usage, IN for accounting, OUT for
authorization,
; MULTI if more than a single instance is allowed per
RADIUS message.
; Combinations are allowed, e.g. "IN", "MULTI OUT",
"MULT IN OUT"
;
; Enumerations are optional for INTEGER attribute types
[User Defined Vendor]
Name=HP
IETF Code=11
VSA 2=Hp-Command-String
VSA 3=Hp-Command-Exception
[Hp-Command-String]
RADIUS Authentication and Accounting
Configuring RADIUS Authorization
5-23