HP VPN Firewall Appliances Access Control Configuration Guide

196
HP proprietary RADIUS sub-attributes
No. Sub-attribute Descri
p
tion
1 Input-Peak-Rate Peak rate in the direction from the user to the NAS, in bps.
2 Input-Average-Rate Average rate in the direction from the user to the NAS, in bps.
3 Input-Basic-Rate Basic rate in the direction from the user to the NAS, in bps.
4 Output-Peak-Rate Peak rate in the direction from the NAS to the user, in bps.
5 Output-Average-Rate Average rate in the direction from the NAS to the user, in bps.
6 Output-Basic-Rate Basic rate in the direction from the NAS to the user, in bps.
15 Remanent_Volume
Total remaining available traffic for the connection, in different units for
different server types.
20 Command
Operation for the session, used for session control. Possible values
include:
• 1—Trigger-Request.
• 2—Terminate-Request.
• 3—SetPolicy.
• 4—Result.
• 5—PortalClear.
24 Control_Identifier
Identification for retransmitted packets. For retransmitted packets of the
same session, this attribute must take the same value. For retransmitted
packets of different sessions, this attribute might take the same value. The
client response of a retransmitted packet must also carry this attribute and
the value of this attribute must be the same.
For Accounting-Request packets of the start, stop, and interim update
types, the Control-Identifier attribute, if present, makes no sense.
25 Result_Code
Result of the Trigger-Request or SetPolicy operation, zero for success and
any other value for failure.
26 Connect_ID Index of the user connection.
28 Ftp_Directory
FTP user working directory. When the RADIUS client acts as the FTP server,
this attribute is used to set the FTP directory for an FTP user on the RADIUS
client.
29 Exec_Privilege EXEC user priority.
59 NAS_Startup_Timestamp
Startup time of the NAS in seconds, which is represented by the time
elapsed after 00:00:00 on Jan. 1, 1970 (UTC).
60 Ip_Host_Addr
User IP address and MAC address carried in authentication and
accounting requests, in the format A.B.C.D hh:hh:hh:hh:hh:hh. A space is
required between the IP address and the MAC address.
61 User_Notify Information that must be sent from the server to the client transparently.
62 User_HeartBeat
Hash value assigned after an 802.1X user passes authentication, which is
a 32-byte string. This attribute is stored in the user list on the NAS and is
used for verifying the handshake messages from the 802.1X user. This
attribute only exists in Access-Accept and Accounting-Request packets.