MSM7xx Controllers Configuration Guide v6.4.0

Vendor-specific (Colubris)
(string)
Colubris AV-Pair
The Colubris AV-Pair is a HP ProCurve a vendor-specific attribute defined by HP to support
configuration of user session settings. This attribute conforms to RADIUS RFC 2865. You
may need to define this attribute on your RADIUS server (if it is not already present) using
the following values:
• SMI network management private enterprise code = 8744
• Vendor-specific attribute type number = 0
• Attribute type: A string in the following format <keyword>=<value>
Multiple instances of the Colubris AV-Pair can be defined in a RADIUS account to configure
a variety of settings. For a complete list of all supported settings, see “Colubris AV-Pair -
Site attribute values” (page 458).
Colubris-Intercept
This attribute is used to enable/disable the interception and redirection of traffic for
individual users. The destination for intercepted traffic is defined separately for each VSC
using the Interception option under VSC egress mapping. See “VSC egress mapping” (page
123).
You may need to define the Colubris-Intercept attribute on your RADIUS server (if it is not
already present) using the following values:
• SMI network management private enterprise code = 8744
• Vendor-specific attribute type number = 1
• Attribute type = integer with one of the following values:
0: Do not intercept user traffic.◦
◦ 1: Intercept user traffic and redirect it to the destination defined by the Intercepted
option under VSC egress mapping in the VSC to which the user is connected.
Access reject
EAP-Message
(string)
Only supported when authentication is EAP-MD5. Note that the content will not be read as the
RADIUS Access Reject overrides whatever indication is contained inside this packet.
Vendor-specific (Microsoft)
HP ProCurve supports the following Microsoft vendor-specific attributes.
MSCHAP-Error
(string)
A MSCHAP specific error as defined by RFC 2433.
Reply-Message
(string)
This string (as defined in RFC 2865) is recorded and passed as is to the
GetRadiusReplyMessage() asp function. Multiple string are supported to a maximum length of
252 bytes.
Access challenge
EAP-Message
(string)
User attribute definitions 453