13-20
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter13 Configuring RADIUS and TACACS+ Servers
Configuring and Enabling RADIUS
RADIUS Attributes Sent by the Access Point
Table13-2 through Ta ble 13- 6 identify the attributes sent by an access point to a client in access-request,
access-accept, and accounting-request packets.
Note You can configure the access point to include in its RADIUS accounting and authentication requests
attributes recommended by the Wi-Fi Alliance’s WISPr and WISPv2 Best Current Practices for Wireless
Internet Service Provider Roaming (WISPr) document. Refer to the “Configuring WISPr RADIUS
Attributes” section on page 13-18 for instructions.
Table13-2 Attributes Sent in Access-Request Packets
Attribute ID Description
1User-Name
4 NAS-IP-Address
5NAS-Port
12 Framed-MTU
30 Called-Station-ID (MAC address)
31 Calling-Station-ID (MAC address)
32 NAS-Identifier1
1. The access point sends the NAS-Identifier if attribute 32 (include-in-access-req) is configured.
61 NAS-Port-Type
79 EAP-Message
80 Message-Authenticator
Table13-3 Attributes Honored in Access-Accept Packets
Attribute ID Description
25 Class
27 Session-Timeout
64 Tunnel-Type1
1. RFC2868; defines a VLAN override number.
65 Tunnel-Medium-Type1
79 EAP-Message
80 Message-Authenticator
81 Tunnel-Private-Group-ID1
VSA (attribute 26) LEAP session-key
VSA (attribute 26) Auth-Algo-Type
VSA (attribute 26) SSID