IBM RackSwitch G8000, Инструкция по применению

Страница: 78 / 362

76
RackSwitch G8000: Application Guide
Supported RADIUS Attributes
The 802.1X Authenticator relies on external RADIUS servers for authentication with
EAP. Table 7 lists the RADIUS attributes that are supported as part of RADIUS-EAP
authentication based on the guidelines specified in Annex D of the 802.1X standard
and RFC 3580.
Table 7. Support for RADIUS Attributes
# Attribute Attribute Value A-R A-A A-C A-R
1 User-Name The value of the Type-Data field
from the supplicant’s
EAP-Response/ Identity message. If
the Identity is unknown (for
example, Type-Data field is zero
bytes in length), this attribute will
have the same value as the
Calling-Station-Id.
1 0-1 0 0
4 NAS-IP-Address IPv4 address of the authenticator
used for Radius communication.
1 0 0 0
5 NAS-Port Port number of the authenticator
port to which the supplicant is
attached.
1 0 0 0
24 State Server-specific value. This is sent
unmodified back to the server in an
Access-Request that is in response
to an Access-Challenge.
0-1 0-1 0-1 0
30 Called-Station-ID The MAC address of the
authenticator encoded as an ASCII
string in canonical format, such as
000D5622E3 9F.
1 0 0 0
31 Calling-Station-ID The MAC address of the supplicant
encoded as an ASCII string in
canonical format, such as
00034B436206.
1 0 0 0
64 Tunnel-Type Only VLAN (type 13) is currently
supported (for 802.1X RADIUS
VLAN assignment). The attribute
must be untagged (the Tag field
must be 0).
0 0-1 0 0
65 Tunnel-Medium-
Type
Only 802 (type 6) is currently
supported (for 802.1X RADIUS
VLAN assignment). The attribute
must be untagged (the Tag field
must be 0).
0 0-1 0 0