Bay Networks Radius Instrukcja Użytkownika Strona 4

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 14
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 3
the numeric value (ala VSAs) which would to divide up the attribute
value space. This technique has not seen any acceptance by the
working group or other vendors, however, the vendor did accomplish
the goal of not conflicting with working group additions or other
vendor values.
Example dictionary of VSE values:
VALUE Service-Type VSE-Authorize-Only 0x06300001
VALUE Acct-Status-Type VSE-User-Reject 0x06300001
VALUE Acct-Status-Type VSE-Call-Reject 0x06300002
VALUE Acct-Status-Type VSE-IPCP-Start 0x06300003
VALUE Acct-Status-Type VSE-IPXCP-Start 0x06300004
VALUE Acct-Status-Type VSE-ATCP-Start 0x06300005
VALUE Acct-Status-Type VSE-Accounting-Restart 0x06300006
VALUE Acct-Status-Type VSE-Accounting-Shutoff 0x06300007
Mitton Informational [Page 4]
RFC 2882 Extended RADIUS Practices July 2000
VALUE Acct-Status-Type VSE-Tunnel-Start 0x06300008
VALUE Acct-Status-Type VSE-Tunnel-Stop 0x06300009
VALUE Acct-Status-Type VSE-Tunnel-Reject 0x0630000a
VALUE Acct-Status-Type VSE-Tunnel-Link-Start 0x0630000b
VALUE Acct-Status-Type VSE-Tunnel-Link-Stop 0x0630000c
VALUE Acct-Status-Type VSE-MP-Start 0x0630000d
VALUE Acct-Status-Type VSE-MP-Stop 0x0630000e
VALUE Acct-Status-Type VSE-Line-Seizure 0x0630000f
VALUE Acct-Status-Type VSE-Rlogin-Start 0x06300010
VALUE Acct-Status-Type VSE-Rlogin-Stop 0x06300011
2.3. Vendor Specific Attribute Usage
Because attribute 26 Vendor Specific Attributes (VSAs) came late in
the RADIUS working group development, there were some server
implementations that were late to support them. Today, there are
several leading implementations of clients that make extensive use of
VSAs. What's unfortunate is that there is also several different
formats of VSAs implemented. This is because the RFC suggested
format does not support more than 256 attributes.
2.3.1. VSAs in use by some clients:
At the time this document was written, the following had be observed:
- Microsoft: several for MS-CHAP authentication support [9]
- ACC: 42 [10]
- Nortel(Bay): about 60 VSAs and 16 VSEs
- Nortel(Aptis): about 60 VSA: 20 1-byte, ~130 4-byte header.
Aptis VSAs have shifted from a regular format to a 4-byte header
format, due to the large number of attributes implemented.
- 3Com (USR): about 130
USR VSAs are different than the format suggested in RFC 2138.
They have a 4 byte type field and have no internal length.
Some vendors that did not initially use VSAs, have shifted in later
releases VSA usage as a configuration option.
2.3.2. Clients that support Multiple Vendor Attributes
Przeglądanie stron 3
1 2 3 4 5 6 7 8 9 ... 13 14

Komentarze do niniejszej Instrukcji

Brak uwag