Alcatel-Lucent 6850-48 网络指南
Managing Authentication Servers
RADIUS Servers
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
page 35-11
Vendor-Specific Attributes for RADIUS
The Alcatel-Lucent RADIUS client supports attribute 26, which includes a vendor ID and some addi-
tional sub-attributes called subtypes. The vendor ID and the subtypes collectively are called Vendor
Specific Attributes (VSAs). Alcatel-Lucent, through partnering arrangements, has included these VSAs in
some vendors’ RADIUS server configurations.
tional sub-attributes called subtypes. The vendor ID and the subtypes collectively are called Vendor
Specific Attributes (VSAs). Alcatel-Lucent, through partnering arrangements, has included these VSAs in
some vendors’ RADIUS server configurations.
The attribute subtypes are defined in the server’s dictionary file. If you are using single authority mode,
the first VSA subtype, Alcatel-Lucent-Auth-Vlan, must be defined on the server for each authenticated
VLAN. Alcatel-Lucent’s vendor ID is 800 (SMI Network Management Private Enterprise Code).
the first VSA subtype, Alcatel-Lucent-Auth-Vlan, must be defined on the server for each authenticated
VLAN. Alcatel-Lucent’s vendor ID is 800 (SMI Network Management Private Enterprise Code).
The following are VSAs for RADIUS servers:
The Alcatel-Lucent-Auth-Group attribute is used for Ethernet II only. If a different protocol, or more than
one protocol is required, use the Alcatel-Lucent-Auth-Group-Protocol attribute instead. For example:
one protocol is required, use the Alcatel-Lucent-Auth-Group-Protocol attribute instead. For example:
Alcatel-Lucent-Auth-Group-Protocol 23: IP_E2 IP_SNAP
Alcatel-Lucent-Auth-Group-Protocol 24: IPX_E2
Alcatel-Lucent-Auth-Group-Protocol 24: IPX_E2
In this example, authenticated users on VLAN 23 may use Ethernet II or SNAP encapsulation. Authenti-
cated users on VLAN 24 may use IPX with Ethernet II.
cated users on VLAN 24 may use IPX with Ethernet II.
Num. RADIUS VSA
Type
Description
1 Alcatel-Lucent-Auth-Group
integer
The authenticated VLAN number. The only protocol
associated with this attribute is Ethernet II. If other
protocols are required, use the protocol attribute
instead.
associated with this attribute is Ethernet II. If other
protocols are required, use the protocol attribute
instead.
2 Alcatel-Lucent-Slot-Port
string
Slot(s)/port(s) valid for the user.
3 Alcatel-Lucent-Time-of-Day
string
The time of day valid for the user to authenticate.
4 Alcatel-Lucent-Client-IP-
Addr
address
The IP address used for Telnet only.
5 Alcatel-Lucent-Group-Desc
string
Description of the authenticated VLAN.
6 Alcatel-Lucent-Port-Desc
string
Description of the port.
8 Alcatel-Lucent-Auth-Group-
Protocol
string
The protocol associated with the VLAN. Must be
configured for access to other protocols. Values
include: IP_E2, IP_SNAP, IPX_E2, IPX_NOV,
IPX_LLC, IPX_SNAP.
configured for access to other protocols. Values
include: IP_E2, IP_SNAP, IPX_E2, IPX_NOV,
IPX_LLC, IPX_SNAP.
9 Alcatel-Lucent-Asa-Access
string
Specifies that the user has access to the switch. The
only valid value is all.
only valid value is all.
39 Alcatel-Lucent-Acce-Priv-F-
R1
hex.
Configures functional read privileges for the user.
40 Alcatel-Lucent-Acce-Priv-F-
R2
hex.
Configures functional read privileges for the user.
41 Alcatel-Lucent-Acce-Priv-F-
W1
hex.
Configures functional write privileges for the user.
42 Alcatel-Lucent-Acce-Priv-F-
W2
hex.
Configures functional write privileges for the user.