R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

124
HP proprietary RADIUS sub-attributes
Table 44 HP proprietary RADIUS sub-attributes
No. Sub-attribute Descri
p
tion
1 Input-Peak-Rate Peak rate in the direction from the user to the NAS, in bps.
2 Input-Average-Rate Average rate in the direction from the user to the NAS, in bps.
3 Input-Basic-Rate Basic rate in the direction from the user to the NAS, in bps.
4 Output-Peak-Rate Peak rate in the direction from the NAS to the user, in bps.
5 Output-Average-Rate Average rate in the direction from the NAS to the user, in bps.
6 Output-Basic-Rate Basic rate in the direction from the NAS to the user, in bps.
15 Remanent_Volume
Remaining, available total traffic of the connection, in different units for
different server types.
20 Command
Operation for the session, used for session control. It can be:
• 1—Trigger-Request
• 2—Terminate-Request
• 3—SetPolicy
• 4—Result
• 5—PortalClear
24 Control_Identifier
Identification for retransmitted packets. For retransmitted packets of the same
session, this attribute must take the same value; for retransmitted packets of
different sessions, this attribute may take the same value. The client response
of a retransmitted packet must also carry this attribute and the value of the
attribute must be the same.
For Accounting-Request packets of the start, stop, and interim update types,
the Control-Identifier attribute, if present, makes no sense.
25 Result_Code
Result of the Trigger-Request or SetPolicy operation. A value of zero means
the operation succeeded; any other value means the operation failed.
26 Connect_ID Index of the user connection
28 Ftp_Directory
Working directory of the FTP user.
For an FTP user, when the RADIUS client acts as the FTP server, this attribute
is used to set the FTP directory on the RADIUS client.
29 Exec_Privilege Priority of the EXEC user
59
NAS_Startup_Timestam
p
Startup time of the NAS in seconds, which is represented by the time elapsed
after 00:00:00 on Jan. 1, 1970 (UTC).
60 Ip_Host_Addr
User IP address and MAC address carried in authentication and accounting
requests, in the format A.B.C.D hh:hh:hh:hh:hh:hh. A space is required
between the IP address and the MAC address.
61 User_Notify Information that needs to be sent from the server to the client transparently
62 User_HeartBeat
Hash value assigned after an 802.1X user passes authentication, which is a
32-byte string. This attribute is stored in the user list on the device and is used
for verifying the handshake messages from the 802.1X user. This attribute
exists in only Access-Accept and Accounting-Request packets.