400
DWS-1008 User’s Manual
D-Link Systems, Inc.
Appendix B - Supported RADIUS Attribites
Supported RADIUS Attributes
D-Link’s Mobility System Software (MSS) supports the standard and extended RADIUS
authentication and accounting attributes listed at the bottom.
An attribute is sent to RADIUS accounting only if the table listing it shows
Yes
or
Optional
in
the column marked
Sent in Accounting-Request
for the attribute
and
the attribute is applied
to the client’s session configuration. Attribute values have the following characteristics unless
otherwise stated:
• Strings can contain a maximum of 253 characters.
• Integers are 4 bytes.
• IP addresses are 4 bytes.
The RADIUS attributes MSS supports are based on these IETF RFCs and drafts:
• RFC 2865,
Remote Authentication Dial-in User Service (RADIUS)
• RFC 2866,
RADIUS Accounting
• RFC 2868,
RADIUS Attributes for Tunnel Protocol Support
• RFC 2869,
RADIUS Extensions
•
draft-congdon-radius-8021x-29.txt
(
IEEE 802.1X RADIUS Usage Guidelines
)
Supported Standard and Extended Attributes
The RADIUS attributes shown in the table below are sent by switches to RADIUS servers
during authentication and accounting.
801.1X Attributes
Attribute
Rcv in Sent
in
Sent in
Acct
Description and Values
User-Name 1
No
Yes
Yes
String. Name of the user to be
authenticated. Used only in Request
packets.
User-
Password
2
No
Yes
No
Password of the user to be
authenticated, unless a CHAP-Password
is used.
CHAP-
Password
3
No
Yes
No
Password of the user to be
authenticated, unless a User-Password
is used.
NAS-IP-
Address
4
No
Yes
Yes
IP address sent by the DWS-1008
switch.
Summary of Contents for DWS-1008
Page 1: ......