3Com Switch 8800 Advanced Software V5 Configuration Guide

884 CHAPTER 70: AAA, RADIUS AND HWTACACS CONFIGURATION
2 The Identifier field (1-byte long) is for matching request packets and response
packets. It varies with the Attribute field and the received valid response packets,
but keeps unchanged during retransmission.
3 The Length field (2-byte long) indicates the length of the entire packet, including
the Code, Identifier, Length, Authenticator, and Attribute fields. Bytes beyond the
length are considered the padding and are neglected at receipt. If the length of a
packet is less than that indicated by the Length field, the packet is dropped.
4 The Authenticator field (16-byte long) is used to authenticate the reply from the
RADIUS server, and is also used in the password hiding algorithm. There are two
kinds of authenticators: Request and Response.
5 The Attribute field carries information about the configuration details of a request
or response. This field is represented in triplets of Type, Length, and Value.
■ Type: One byte, in the range 1 to 255. It is for indicating the type of the
attribute. Commonly used attributes for RADIUS authentication and
authorization are listed in
Table 37.
■ Length: One byte for indicating the length of the attribute in bytes, including
the Type, Length, and Value fields.
■ Value: Value of the attribute, up to 253 bytes. Its format and content depend
on the Type and Length fields.
5 Accounting-Response From the server to the client. The server sends
to the client a packet of this type to notify that
it has received the Accounting-Request and has
correctly recorded the accounting information.
Table 36 Main values of the Code field
Code Packet type Description
Tabl e 37 RADIUS attributes
Type Attribute type Type Attribute type
1 User-Name 23 Framed-IPX-Network
2 User-Password 24 State
3 CHAP-Password 25 Class
4 NAS-IP-Address 26 Vendor-Specific
5 NAS-Port 27 Session-Timeout
6 Service-Type 28 Idle-Timeout
7 Framed-Protocol 29 Termination-Action
8 Framed-IP-Address 30 Called-Station-Id
9 Framed-IP-Netmask 31 Calling-Station-Id
10 Framed-Routing 32 NAS-Identifier
11 Filter-ID 33 Proxy-State
12 Framed-MTU 34 Login-LAT-Service
13 Framed-Compression 35 Login-LAT-Node
14 Login-IP-Host 36 Login-LAT-Group
15 Login-Service 37 Framed-AppleTalk-Link
16 Login-TCP-Port 38 Framed-AppleTalk-Netw
ork
17 (unassigned) 39 Framed-AppleTalk-Zone