Users Guide

Authentication, Authorization, and Accounting 291
How Are RADIUS Attributes Processed on the Switch?
The following attributes are processed in the RADIUS Access-Accept
message received from a RADIUS server:
• REPLY-MESSAGE
Trigger to respond to the Access-Accept message with an EAP notification.
• STATE
RADIUS server state. Transmitted in Access-Request messages.
• SERVICE-TYPE
The Service-Type attribute may be validated in the Access-Accept packet
received from the RADIUS server. Only the Login-User(1),
Administrative-User(6), and Call-Check(10) values are considered valid
41 Acct-Delay-Time Acct. only No No
42 Acct-Input-Octets Yes No No
43 Acct-Output-Octets Yes No No
44 Acct-Session-Id Acct. only Yes No
46 Acct-Session-Time Yes Yes No
49 Acct-Terminate-Cause Yes No No
52 Acct-Input-Gigawords Yes No No
53 Acct-Output-Gigawords Yes No No
61 NAS-Port-Type Yes No Yes
64 Tunnel-Type Yes No No
65 Tunnel-Medium-Type Yes No No
79 EAP-Message Yes No No
80 Message-Authenticator Auth. only Yes No
81 Tunnel-Privategroup-Id Yes No No
168 Framed-IPv6-Address Acct. only No No
Table 10-6. Supported RADIUS Attributes (Continued)
Type RADIUS Attribute Name 802.1X User Manager Captive Portal