Lenovo Flex System Fabric CN4093, Инструкция по применению

Страница: 118 / 634

118
CN4093 Application Guide for N/OS 8.4
Supported RADIUS Attributes
The 802.1X Authenticator relies on external RADIUS servers for authentication
with EAP. Table 11 lists the RADIUS attributes that are supported as part of
RADIUS ‐ EAP authentication based on the guidelines specified in Annex D of the
802.1X standard and RFC 3580.
Table 11.
Support for RADIUS Attributes
# Attribute Attribute Value A-R A-A A-C A-R
1 User ‐ Name The value of the Type ‐ Data field
from the supplicant’s
EAP ‐ Response/Identity
message. If the Identity is
unknown (i.e. Type ‐ Data field is
zero bytes in length), this
attribute will have the same
value as the Calling ‐ Station ‐ Id.
1 0 ‐ 1 0 0
4 NAS ‐ IP ‐ Address IPv4 address of the
authenticator used for Radius
communication.
1 0 0 0
5 NAS ‐ Port Port number of the
authenticator port to which the
supplicant is attached.
1 0 0 0
24 State Server ‐ specific value. This is
sent unmodified back to the
server in an Access ‐ Request
that is in response to an
Access ‐ Challenge.
0 ‐ 1 0 ‐ 1 0 ‐ 1 0
30 Called ‐ Station ‐ ID The MAC address of the
authenticator encoded as an
ASCII string in canonical
format, such as 000D5622E3 9F.
1 0 0 0
31 Calling ‐ Station ‐ I
D
The MAC address of the
supplicant encoded as an ASCII
string in canonical format, such
as 00034B436206.
1 0 0 0
64 Tunnel ‐ Type Only VLAN (type 13) is
currently supported (for 802.1X
RADIUS VLAN assignment).
The attribute must be untagged
(the Tag field must be 0).
0 0 ‐ 1 0 0
65 Tunnel ‐ Medium ‐
Type
Only 802 (type 6) is currently
supported (for 802.1X RADIUS
VLAN assignment). The
attribute must be untagged (the
Tag field must be 0).
0 0 ‐ 1 0 0