Dell Configuration Guide for the S4048–ON System 9.14.2.6

PDF

Attributes

In Disconnect messsage requests and CoA-Request packets, certain attributes are used to uniquely identify the NAS as well as user sessions on the NAS.

The combination of NAS and session identification attributes included in a CoA-request or a disconnect-message request must match at least one session in order for a request to be successful; otherwise, a disconnect-Nak or CoA-Nak is sent. For disconnect-user operations using DMs, if all NAS identification attributes match, and more than one session matches all of the session identification attributes, then a CoA-request or a disconnect-message request applies to all matching sessions.

The following tables describe the various types of attributes that identify the NAS and the user sessions:

Table 1. NAS Identification AttributesNAS Identification Attributes
Attribute code	Attribute	Description
4	NAS-IP-Address	IPv4 address of the NAS.
95	NAS-IPv6–Address	IPv6 address of the NAS.

Table 2. Change of Authorization (CoA) AttributeChange of Authorization (CoA) Attribute
Attribute code	Attribute	Description
5	NAS-Port	Port associated with the session to be processed for EAP or MAB users or the VTY ID for AAA sessions.

Table 3. Session Identification AttributesSession Identification Attributes
Attribute code	Attribute	Description
31	Calling-Station-Id (MAC Address)	The link address from which session is connected.

Table 4. Vendor-specific AttributesVendor-specific Attributes
Attribute code	Attribute	Description
26	Vendor-specific	NAS supports the following values for the vendor-specific attributes: t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=re-authenticate” t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=disable-host-port” t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=bounce-host-port” t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=terminate-session” t=26(vendor-speific);l=length;vendor-identification-attribute;Length=value;data=”cmd=disconnect-user” The vendor identification attribute can be one of the following: v=9(Cisco);Vendor-Type=1(cisco-av-pair) Length = value v=6027 (Force10);Vendor-Type=1(Force10-av-pair) Length = value

Table 5. DM AttributesDM Attributes
Attribute code	Attribute	Description
1	User-Name(Mandatory)	Name of the user associated with one or more sessions.

Mandatory attributes

The following tables describe the mandatory attributes for various message types:

Table 6. CoA EAP/MAB Session(s) Re-authenticateCoA EAP/MAB Session(s) Re-authenticate
Radius Attribute code	Radius Attribute	Description	Mandatory
NAS Identification Attributes
4	NAS-IP-Address	IPv4 address of the NAS.	No
95	NAS-IPv6–Address	IPv6 address of the NAS.	No
Session Identification Attributes
5	NAS-Port	Port on which session is terminated	Yes, If Calling-Station-Id attribute is not provided
31	Calling-Station-Id	The link address from which session is connected.	Yes, If NAS-Port attribute is not provided
Authorization Attributes
26	Vendor-Specific	t=26(vendor-specific);l=length;vendor-identification-attribute;Length=value; Data=”cmd=re-authenticate”	Yes

Table 7. CoA EAP/MAB Disable PortCoA EAP/MAB Disable Port
Radius Attribute code	Radius Attribute	Description	Mandatory
NAS Identification Attributes
4	NAS-IP-Address	IPv4 address of the NAS.	No
95	NAS-IPv6–Address	IPv6 address of the NAS.	No
Session Identification Attributes
5	NAS-Port	Port on which session is terminated	Yes
Authorization Attributes
26	Vendor-Specific	t=26(vendor-specific);l=length;vendor-identification-attribute;Length=value; Data=”cmd=bounce-host-port”	Yes

Table 8. CoA EAP/MAB Bounce PortCoA EAP/MAB Bounce Port
Radius Attribute code	Radius Attribute	Description	Mandatory
NAS Identification Attributes
4	NAS-IP-Address	IPv4 address of the NAS.	No
95	NAS-IPv6–Address	IPv6 address of the NAS.	No
Session Identification Attributes
5	NAS-Port	Port on which session is terminated	Yes
Authorization Attributes
26	Vendor-Specific	t=26(vendor-specific);l=length;vendor-identification-attribute;Length=value; Data=”cmd=bounce-host-port”	Yes

Table 9. DM EAP/MAB Session(s) disconnectDM EAP/MAB Session(s) disconnect
Radius Attribute code	Radius Attribute	Description	Mandatory
NAS Identification Attributes
4	NAS-IP-Address	IPv4 address of the NAS.	No
95	NAS-IPv6–Address	IPv6 address of the NAS.	No
Session Identification Attributes
5	NAS-Port	Port on which session is terminated	Yes, if Calling-Station-Id attribute is not provided
31	Calling-Station-Id	The link address from which session is connected.	Yes, If NAS-Port attribute is not provided
Authorization Attributes
26	Vendor-Specific	t=26(vendor-specific);l=length;vendor-identification-attribute;Length=value; Data=”cmd=terminate-session”	Yes

Table 10. DM AAA Session(s) disconnectDM AAA Session(s) disconnect
Radius Attribute code	Radius Attribute	Description	Mandatory
NAS Identification Attributes
4	NAS-IP-Address	IPv4 address of the NAS.	No
95	NAS-IPv6–Address	IPv6 address of the NAS.	No
Session Identification Attributes
1	User-Name	Name of the user associated with one or more sessions - AAA user name	Yes
5	NAS-Port	Port on which session is terminated	No
Authorization Attributes
26	Vendor-Specific	t=26(vendor-specific);l=length;vendor-identification-attribute;Length=value; Data=”cmd=disconnect-user”	Yes