C-3
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Appendix C RADIUS Attributes
Cisco IOS Dictionary of RADIUS AV Pairs
Note If you specify a given AV pair on Cisco Secure ACS, the corresponding AV pair
must be implemented in the Cisco IOS software running on the network device.
Always consider which AV pairs your Cisco IOS release supports. If Cisco Secure
ACS sends an AV pair that the Cisco IOS software does not support, the attribute
is not implemented.
Note Because IP pools and callback supersede them, the following RADIUS attributes
do not appear on the Group Setup page:
8, Framed-IP-Address
19, Callback-Number
218, Ascend-Assign-IP-Pool
None of these attributes can be set via RDBMS Synchronization.
Table C-1 lists the supported Cisco IOS RADIUS AV pairs.
Table C-1 Cisco IOS Software RADIUS AV Pairs
Number Attribute Type of Value Inbound/Outbound Multiple
1 User-Name String Inbound No
2 User-Password String Outbound No
3 CHAP-Password String Outbound No
4 NAS-IP Address Ipaddr Inbound No
5 NAS-Port Integer Inbound No
6 Service-Type Integer Both No
7 Framed-Protocol Integer Both No
9 Framed-IP-Netmask Ipaddr (maximum length
15 characters)
Outbound No
10 Framed-Routing Integer Outbound No
11 Filter-Id String Outbound Yes
12 Framed-MTU Integer (maximum length
10 characters)
Outbound No