Appendix D Cisco Secure ACS Command-Line Database Utility
User-Defined RADIUS Vendors and VSA Sets
D-36
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Table D-9
Attribute Definition Keys
Keys
Required
Value Required
Description
Type
Yes
See Description
The data type of the attribute. It must be one of the
following:
•
STRING
•
INTEGER
•
IPADDR
If the attribute is an integer, the Enums key is valid.
Profile Yes
See Description
The attribute profile defines if the attribute is used for
authorization or accounting (or both). At least one of
the following two values must be present in the Profile
key definition:
•
IN—The attribute is used for accounting. After
you add the attribute to Cisco Secure ACS, you
can configure your RADIUS accounting log to
record the new attribute. For more information
about RADIUS accounting logs, see
Accounting
Logs, page 9-5
.
•
OUT—The attribute is used for authorization.
In addition, you can use the value “MULTI” to allow
several instances of the attribute per RADIUS
message.
Combinations are valid. For example:
Profile=MULTI OUT
or
Profile=IN OUT
Enums No (only valid
when the
TYPE value is
INTEGER)
Enumerations
section name
The name of the enumeration section.
Note
Several attributes can reference the same
enumeration section. For more information,
see
Enumeration Definition, page D-37
.
