ADC SG-1 user manual Userorig-name sub-attribute, Adc-avpair = userorig-name=original user name

Appendix A: SG-1Vendor-Specific Attributes June 30, 2006

Format:

adc-avpair = "user:accounting=[disable enable lastpacket enable-on-ip-update interim-update;<accounting update in seconds>]",

Example 1:

adc-avpair = "user:accounting=disable",

Example 2:

gcon-avpair = "user:accounting=interim-update;600",

user:orig-name sub-attribute

The user:orig-namesub-attribute contains the original user name as received during PPP negotiation. The sub- attribute is sent in Access Request messages, only in operation modes that overwrite or that do not send the original user name. It is used in the following modes:

•domain separator

•service authentication

General:

Operation Mode:	Access-Request message
	Service-Request message
Vendor-type:	12
Vendor-length =	2 + name length + 1-128

Format:

adc-avpair = "user:orig-name=<original user name>",

Example:

adc-avpair = "user:orig-name=test",

user:auth-type sub-attribute

The user:auth-type sub-attribute contains the authentication type of the Access Request message sent by the system to the RADIUS. It provides the RADIUS with additional information regarding the purpose of the authentication. There are several irregular reasons for RADIUS authentication: pre-authentication, service selection, and web-authentication.

•pre-authentication– the system authenticates the peer using the CLI before proceeding with the user connection.

•service selection – the system authenticates the requested service in order to receive its definition from the RADIUS.

•WEB authentication – the system authenticates the received user-name and password (using the USER- PASS EDS field) with its configured RADIUS.

Note: The system sends this sub-attribute to the RADIUS and not vice versa.

A-8 SG1-UM-8500-03