Chapter 20 Authentication & Accounting

20.3.1 Attributes Used for Authentication

The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication.

20.3.1.1Attributes Used for Authenticating Privilege Access

User-Name

- the format of the User-Name attribute is $enab#$, where # is the privilege level (1- 14)

User-Password

NAS-Identifier

NAS-IP-Address

20.3.1.2Attributes Used to Login Users

User-Name User-Password NAS-Identifier NAS-IP-Address

20.3.1.3Attributes Used by the IEEE 802.1x Authentication

User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type

-This value is set to Ethernet(15) on the Switch. Calling-Station-Id

Frame-MTU EAP-Message State Message-Authenticator

20.3.2 Attributes Used for Accounting

The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication.

20.3.2.1Attributes Used for Accounting System Events

NAS-IP-Address NAS-Identifier Acct-Status-Type Acct-Session-ID

-The format of Acct-Session-Id is date+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001)

Acct-Delay-Time

 

155

ES-2024 Series User’s Guide