HPE FlexFabric 5940 SERIES, Руководство по настройке безопасности

Страница: 30 / 571

17
No. Subattribute Description
25 Result_Code
Result of the Trigger-Request or SetPolicy operation, zero for success
and any other value for failure.
26 Connect_ID Index of the user connection.
27 PortalURL PADM redirect URL assigned to PPPoE users.
28 Ftp_Directory
FTP, SFTP, or SCP user working directory.
When the RADIUS client acts as the FTP, SFTP, or SCP server, this
attribute is used to set the working directory for an FTP, SFTP, or SCP
user on the RADIUS client.
29 Exec_Privilege EXEC user priority.
32 NAT-IP-Address
Public IP address assigned to the user when the source IP address
and port are translated.
33 NAT-Start-Port
Start port number of the port range assigned to the user when the
source IP address and port are translated.
34 NAT-End-Port
End port number of the port range assigned to the user when the
source IP address and port are translated.
59 NAS_Startup_Timestamp
Startup time of the NAS in seconds, which is represented by the time
elapsed after 00:00:00 on Jan. 1, 1970 (UTC).
60 Ip_Host_Addr
User IP address and MAC address included in authentication and
accounting requests, in the format A.B.C.D hh:hh:hh:hh:hh:hh. A
space is required between the IP address and the MAC address.
61 User_Notify
Information that must be sent from the server to the client
transparently.
62 User_HeartBeat
Hash value assigned after an 802.1X user passes authentication,
which is a 32-byte string. This attribute is stored in the user list on the
NAS and verifies the handshake packets from the 802.1X user. This
attribute only exists in Access-Accept and Accounting-Request
packets.
98 Multicast_Receive_Group
IP address of the multicast group that the user's host joins as a
receiver. This subattribute can appear multiple times in a multicast
packet to indicate that the user belongs to multiple multicast groups.
100
IP6_Multicast_Receive_G
roup
IPv6 address of the multicast group that the user's host joins as a
receiver. This subattribute can appear multiple times in a multicast
packet to indicate that the user belongs to multiple multicast groups.
101 MLD-Access-Limit
Maximum number of MLD multicast groups that the user can join
concurrently.
102 local-name L2TP local tunnel name.
103 IGMP-Access-Limit
Maximum number of IGMP multicast groups that the user can join
concurrently.
104 VPN-Instance MPLS L3VPN instance to which a user belongs.
105 ANCP-Profile ANCP profile name.
135 Client-Primary-DNS IP address of the primary DNS server.
136 Client-Secondary-DNS IP address of the secondary DNS server.
140 User_Group
User groups assigned after the SSL VPN user passes authentication.
A user can belong to multiple user groups that are separated by
semicolons. This attribute is used to work with the SSL VPN device.
144 Acct_IPv6_Input_Octets
Bytes of IPv6 packets in the inbound direction. The measurement unit
depends on the configuration on the device.