What are RADIUS vendor-specific attributes?

Vendor-specific attributes (VSA) are defined by remote-access server vendors, usually hardware vendors, to customize how RADIUS works on their servers. The vendor-specific attributes are necessary if you want to give users permission for more than one type of access.

What are RADIUS attributes used for?

Remote Authentication Dial-In User Service (RADIUS) attributes are used to define specific authentication, authorization, and accounting (AAA) elements in a user profile, which are stored on the RADIUS program. This chapter lists the RADIUS attributes that are supported.

What is class attribute in RADIUS?

The CLASS attribute is generic, in that you can put anything in it. So you get to decide what you use. On your RADIUS box, for the users or group that it applies to, set it to something like “WSAAdmin” for admins, “WSARO” for read only users… Then when you config the WSA, you set them appropriately there…

What is VSA RADIUS?

VSA is a method for communicating vendor-specific information between NASs and RADIUS servers. on the RADIUS. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.

What is the vendor specific attribute for radius?

… The Internet Engineering Task Force (IETF) draft standard specifies a method for communicating vendor-specific information between the network access server and the RADIUS server by using the vendor-specific attribute (attribute 26).

Where do I enter vendor code in radius VSA?

In the Vendor-Specific Attribute Information window, select Enter Vendor Code and enter 25461 in the field to the right (below). Next, select “Yes, It conforms,” then click “Configure Attribute…”. In the next window, enter the Vendor-assigned attribute number, from the first page of this document. The Attribute format should be string.

Are there vendor-specific radius attributes in IETF?

The table below describes significant fields listed in the Vendor-Specific RADIUS IETF Attributes table (second table below), which lists supported vendor-specific RADIUS attributes (IETF attribute 26). All attributes listed in the following table are extensions of IETF attribute 26.

What is the vendor ID for Cisco radius?

The Cisco RADIUS implementation supports one vendor-specific option using the format recommended in the specification. Cisco’s vendor-ID is 9, and the supported option has vendor-type 1, which is named “cisco-avpair.” The value is a string of the following format: