Specifications

AAA-POLICY 8 - 7
8.1.2 attribute
 aaa-policy
Configures RADIUS Framed MTU attribute used in access and accounting requests. The Framed MTU attribute reduces the
Extensible Authentication Protocol (EAP) packet size of the RADIUS server. This command is useful in networks where
routers and firewalls do not perform fragmentation.
To ensure network security, some firewall software drop UDP fragments from RADIUS server EAP packets. Consequently
the packets are large in size. Using Framed MTU reduces the packet size. EAP authentication uses Framed MTU to notify
the RADIUS server about the Maximum Transmission Unit (MTU) negotiation with the client. The RADIUS server
communications with the client do not include EAP messages that cannot be delivered over the network.
Supported in the following platforms:
• Access Points — AP300, AP621, AP622, AP650, AP6511, AP6521, AP6532, AP71XX
• Wireless Controllers – RFS4000, RFS6000, RFS7000, NX9000, NX9500
Syntax
attribute framed-mtu <100-1500>
Parameters
• attribute framed-mtu <100-1500>
Examples
rfs7000-37FABE(config-aaa-policy-test)#attribute framed-mtu 110
rfs7000-37FABE(config-aaa-policy-test)#show context
aaa-policy test
accounting server 2 host 172.16.10.10 secret 0 motorola port 1
accounting server 2 timeout 2 attempts 2
accounting interim interval 65
accounting server preference auth-server-number
attribute framed-mtu 110
rfs7000-37FABE(config-aaa-policy-test)#
Related Commands
framed-mtu <100-1500> Configures Framed-MTU attribute used in access requests
• <100-1500> – Specifies framed MTU attribute from 100 - 1500
no Resets values or disables commands