Chapter 4 Configuring the domain 149

Configuring Nortel SNAS 4050-specific attributes using the CLI

The RADIUS accounting server uses Vendor-Id and Vendor-Type attributes in combination to identify the source of the accounting information. The attributes are sent to the RADIUS accounting server together with the accounting information for the logged in user.

You can assign vendor-specific codes to the Vendor-Id and Vendor-Type attributes for the Nortel SNAS 4050 domain. In this way, the RADIUS accounting server can provide separate accounting information for each Nortel SNAS 4050 domain.

Each vendor has a specific dictionary. The Vendor-Id specified for an attribute identifies the dictionary the RADIUS server will use to retrieve the attribute value. The Vendor-Type indicates the index number of the required entry in the dictionary file.

The Internet Assigned Numbers Authority (IANA) has designated SMI Network Management Private Enterprise Codes that can be assigned to the Vendor-Id attribute (see www.iana.org/assignments/enterprise-numbers).

RFC 2866 describes usage of the Vendor-Type attribute.

Contact your RADIUS system administrator for information about the vendor-specific attributes used by the external RADIUS accounting server.

To simplify the task of finding accounting entries in the RADIUS server log, do the following:

1In the RADIUS server dictionary, define a descriptive string (for example,

NSNAS-Portal-ID).

2Map this string to the Vendor-Type value.

To configure vendor-specific attributes in order to identify the Nortel SNAS 4050 domain, use the following command:

/cfg/domain #/aaa/radacct/vpnattribu

The VPN Attribute menu displays.

Nortel Secure Network Access Switch 4050 User Guide

Page 149
Image 149
Nortel Networks 4050 manual VPN Attribute menu displays, NSNAS-Portal-ID, Cfg/domain #/aaa/radacct/vpnattribu