C H A P T E R 4
Authentication and Accounting
The Cisco 10000 series router supports the following SSG features for authentication and accounting related functions:
•SSG Full Username RADIUS Attribute, page
•RADIUS Accounting Records, page
This chapter describes the SSG features for authentication and accounting.
SSG Full Username RADIUS Attribute
The Full Username RADIUS attribute allows SSG to include the user’s full username and domain (user@service) in the RADIUS authentication and accounting requests.
Restrictions for SSG Full Username RADIUS Attribute
The size of the full username is limited to the smaller of the following values:
•246 bytes (10 bytes less than the standard RADIUS protocol limitation)
•10 bytes less than the maximum size of the RADIUS attribute supported by your proxy
Configuration Examples for SSG Full Username RADIUS Attribute
Example 4-1 RADIUS Freeware Format Example
Example 4-2 CiscoSecure ACS for UNIX Example
9,251 = “X”
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
|
| ||
|
|