H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration
1-8
No. Attribute type No. Attribute type
30 Called-Station-Id 77 Connect-Info
31 Calling-Station-Id 78 Configuration-Token
32 NAS-Identifier 79 EAP-Message
33 Proxy-State 80 Message-Authenticator
34 Login-LAT-Service 81 Tunnel-Private-Group-id
35 Login-LAT-Node 82 Tunnel-Assignment-id
36 Login-LAT-Group 83 Tunnel-Preference
37 Framed-AppleTalk-Link 84 ARAP-Challenge-Response
38 Framed-AppleTalk-Network 85 Acct-Interim-Interval
39 Framed-AppleTalk-Zone 86 Acct-Tunnel-Packets-Lost
40 Acct-Status-Type 87 NAS-Port-Id
41 Acct-Delay-Time 88 Framed-Pool
42 Acct-Input-Octets 89 (unassigned)
43 Acct-Output-Octets 90 Tunnel-Client-Auth-id
44 Acct-Session-Id 91 Tunnel-Server-Auth-id
Note:
The attribute types listed in Table 1-2 are defined by RFC 2865, RFC 2866, RFC 2867,
and RFC 2568.
V. RADIUS extended attributes
The RADIUS protocol features excellent extensibility. Attribute 26 (Vender-Specific)
defined by RFC 2865 allows a vender to define extended attributes to implement
functions that the standard RADIUS protocol does not provide.
A vendor can encapsulate multiple type-length-value (TLV) sub-attributes in RADIUS
packets for extension in applications. As shown in
Figure 1-5, a sub-attribute that can
be encapsulated in Attribute 26 consists of the following four parts:
z Vendor-ID (four bytes): Indicates the ID of the vendor. Its most significant byte is 0
and the other three bytes contain a code complying with RFC 1700. The vendor ID
of H3C is 2011.
z Vendor-Type: Indicates the type of the sub-attribute.
z Vendor-Length: Indicates the length of the sub-attribute.
z Vendor-Data: Indicates the contents of the sub-attribute.