Manuals / Nortel Networks / Computer Equipment / Switch

Nortel Networks 42C4911 manual Supported Radius Attributes, Support for Radius Attributes

Models: 42C4911

1 260
Download 260 pages 54.2 Kb
Page 72
Image 72

Alteon OS Application Guide

Supported RADIUS Attributes

The Alteon 802.1x Authenticator relies on external RADIUS servers for authentication with EAP. Table 2 lists the RADIUS attributes that are supported as part of RADIUS-EAP authentication based on the guidelines specified in Annex D of the 802.1x standard and RFC 3580.

Table 2 Support for RADIUS Attributes

#

Attribute

Attribute Value

A-R

A-A

A-C

A-R

 

 

 

 

 

 

 

1

User-Name

The value of the Type-Data field from the supplicant’s

1

0-1

0

0

 

 

EAP-Response/Identity message. If the Identity is

 

 

 

 

 

 

unknown (i.e. Type-Data field is zero bytes in length), this

 

 

 

 

 

 

attribute will have the same value as the Calling-Station-

 

 

 

 

 

 

Id.

 

 

 

 

 

 

 

 

 

 

 

4

NAS-IP-Address

IP address of the authenticator used for Radius commu-

1

0

0

0

 

 

nication.

 

 

 

 

 

 

 

 

 

 

 

5

NAS-Port

Port number of the authenticator port to which the suppli-

1

0

0

0

 

 

cant is attached.

 

 

 

 

 

 

 

 

 

 

 

24

State

Server-specific value. This is sent unmodified back to the

0-1

0-1

0-1

0

 

 

server in an Access-Request that is in response to an

 

 

 

 

 

 

Access-Challenge.

 

 

 

 

 

 

 

 

 

 

 

30

Called-Station-ID

The MAC address of the authenticator encoded as an

1

0

0

0

 

 

ASCII string in canonical format, e.g. 000D5622E3 9F.

 

 

 

 

 

 

 

 

 

 

 

31

Calling-Station-ID

The MAC address of the supplicant encoded as an ASCII

1

0

0

0

 

 

string in canonical format, e.g. 00034B436206.

 

 

 

 

 

 

 

 

 

 

 

79

EAP-Message

Encapsulated EAP packets from the supplicant to the

1+

1+

1+

1+

 

 

authentication server (Radius) and vice-versa. The

 

 

 

 

 

 

authenticator relays the decoded packet to both devices.

 

 

 

 

 

 

 

 

 

 

 

80

Message-Authentica-

Always present whenever an EAP-Message attribute is

1

1

1

1

 

tor

also included. Used to integrity-protect a packet.

 

 

 

 

 

 

 

 

 

 

 

87

NAS-Port-ID

Name assigned to the authenticator port, e.g.

1

0

0

0

 

 

Server1_Port3

 

 

 

 

Legend:

RADIUS Packet Types: A-R (Access-Request), A-A (Access-Accept), A-C (Access-Challenge), A-R (Access-Reject) RADIUS Attribute Support:

0 This attribute MUST NOT be present in a packet.

0+ Zero or more instances of this attribute MAY be present in a packet.

0-1 Zero or one instance of this attribute MAY be present in a packet.

1Exactly one instance of this attribute MUST be present in a packet.

1+ One or more of these attributes MUST be present.

72 „ Chapter 2: Port-based Network Access Control

42C4911, January 2007

Page 71 Page 73
Page 72
Image 72
Nortel Networks 42C4911 manual Supported Radius Attributes, Support for Radius Attributes
Page 71 Page 73

42C4911 specifications

Nortel Networks 42C4911 is a key hardware component designed to meet the needs of modern telecommunications infrastructure. As part of Nortel's extensive portfolio, the 42C4911 has made a significant impact on network design and operation, particularly in enterprises requiring reliable and efficient communication solutions.

One of the standout features of the 42C4911 is its modularity. This allows for flexible configurations and upgrades, enabling organizations to adapt to changing technology requirements and business demands. The design philosophy behind the 42C4911 emphasizes scalability, allowing users to start with a basic setup and expand it as their networking needs grow. This feature is particularly appealing to medium and large enterprises that anticipate increased data and communication requirements over time.

In terms of technology, the 42C4911 supports various telecommunications standards, making it versatile for multiple applications. It typically integrates with other Nortel equipment and can work with third-party devices, ensuring seamless interoperability across different platforms. This is critical as organizations look to create unified communications systems that can handle voice, data, and video traffic efficiently.

The 42C4911 is known for its robust performance and reliability. It is designed to operate continuously under demanding conditions, which is essential for organizations that rely on constant connectivity for their operations. Its built-in redundancy features help safeguard against potential failures, thus enhancing the overall stability of the network. This reliability is further complemented by Nortel's commitment to high-quality manufacturing standards, ensuring that users receive a durable and efficient product.

Security is another major consideration for any networking device, and the 42C4911 provides advanced security features to protect sensitive data. With increasing cybersecurity threats, organizations prioritize devices that offer strong encryption and access control mechanisms. The 42C4911 addresses these needs while facilitating secure communication channels for users, which is essential in today's increasingly interconnected world.

Overall, the Nortel Networks 42C4911 stands out as a versatile and powerful component in the telecommunications landscape. Its modular design, compatibility with diverse technologies, reliability, and emphasis on security make it an appealing choice for organizations looking to enhance their networks. As companies continue to navigate the complexities of communication, devices like the 42C4911 play a crucial role in ensuring that they remain connected and efficient.