Cisco Systems OL-4387-02 manual Authentication and Accounting, SSG Full Username RADIUS Attribute

C H A P T E R 4

Authentication and Accounting

The Cisco 10000 series router supports the following SSG features for authentication and accounting related functions:

•SSG Full Username RADIUS Attribute, page 4-1

•RADIUS Accounting Records, page 4-2

This chapter describes the SSG features for authentication and accounting.

SSG Full Username RADIUS Attribute

The Full Username RADIUS attribute allows SSG to include the user’s full username and domain (user@service) in the RADIUS authentication and accounting requests.

Restrictions for SSG Full Username RADIUS Attribute

The size of the full username is limited to the smaller of the following values:

•246 bytes (10 bytes less than the standard RADIUS protocol limitation)

•10 bytes less than the maximum size of the RADIUS attribute supported by your proxy

Configuration Examples for SSG Full Username RADIUS Attribute

Example 4-1 RADIUS Freeware Format Example

Service-Info = “X”

Example 4-2 CiscoSecure ACS for UNIX Example

9,251 = “X”

Cisco 10000 Series Router Service Selection Gateway Configuration Guide

OL-4387-02 4-1