Cisco IOS Security Configuration Guide, Release 12.2
RADIUS Vendor-Proprietary Attributes

Table Of Contents

Vendor-Proprietary RADIUS Attributes

Supported Vendor-Proprietary RADIUS Attributes

Comprehensive List of Vendor-Proprietary RADIUS Attribute Descriptions


Vendor-Proprietary RADIUS Attributes

Although an IETF draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the network access server and the RADIUS server, some vendors have extended the RADIUS attribute set for specific applications.

This section contains the following sections:

Supported Vendor-Proprietary RADIUS Attributes

Comprehensive List of Vendor-Proprietary RADIUS Attribute Descriptions

Supported Vendor-Proprietary RADIUS Attributes

Table 33 lists Cisco-supported vendor-proprietary RADIUS attributes and the Cisco IOS release in which they are implemented. In cases where the attribute has a security server-specific format, the format is specified. Refer to Table 34 for a list of descriptions.


Note Attributes implemented in special (AA) or early development (T) releases will be added to the next mainline image.


Table 33 Supported Vendor-Proprietary RADIUS Attributes 

Number
Vendor-Proprietary Attribute
11.1
11.2
11.3
11.3AA
11.3T
12.0
12.1
12.2

17

Change-Password

no

no

yes

yes

yes

yes

yes

yes

21

Password-Expiration

no

no

yes

yes

yes

yes

yes

yes

68

Tunnel-ID

no

no

no

no

no

no

no

yes

108

My-Endpoint-Disc-Alias

no

no

no

no

no

no

no

no

109

My-Name-Alias

no

no

no

no

no

no

no

no

110

Remote-FW

no

no

no

no

no

no

no

no

111

Multicast-GLeave-Delay

no

no

no

no

no

no

no

no

112

CBCP-Enable

no

no

no

no

no

no

no

no

113

CBCP-Mode

no

no

no

no

no

no

no

no

114

CBCP-Delay

no

no

no

no

no

no

no

no

115

CBCP-Trunk-Group

no

no

no

no

no

no

no

no

116

Appletalk-Route

no

no

no

no

no

no

no

no

117

Appletalk-Peer-Mode

no

no

no

no

no

no

no

no

118

Route-Appletalk

no

no

no

no

no

no

no

no

119

FCP-Parameter

no

no

no

no

no

no

no

no

120

Modem-PortNo

no

no

no

no

no

no

no

no

121

Modem-SlotNo

no

no

no

no

no

no

no

no

122

Modem-ShelfNo

no

no

no

no

no

no

no

no

123

Call-Attempt-Limit

no

no

no

no

no

no

no

no

124

Call-Block-Duration

no

no

no

no

no

no

no

no

125

Maximum-Call-Duration

no

no

no

no

no

no

no

no

126

Router-Preference

no

no

no

no

no

no

no

no

127

Tunneling-Protocol

no

no

no

no

no

no

no

no

128

Shared-Profile-Enable

no

no

no

no

no

no

no

no

129

Primary-Home-Agent

no

no

no

no

no

no

no

no

130

Secondary-Home-Agent

no

no

no

no

no

no

no

no

131

Dialout-Allowed

no

no

no

no

no

no

no

no

133

BACP-Enable

no

no

no

no

no

no

no

no

134

DHCP-Maximum-Leases

no

no

no

no

no

no

no

no

135

Primary-DNS-Server

no

no

no

no

yes

yes

yes

yes

136

Secondary-DNS-Server

no

no

no

no

yes

yes

yes

yes

137

Client-Assign-DNS

no

no

no

no

no

no

no

no

138

User-Acct-Type

no

no

no

no

no

no

no

no

139

User-Acct-Host

no

no

no

no

no

no

no

no

140

User-Acct-Port

no

no

no

no

no

no

no

no

141

User-Acct-Key

no

no

no

no

no

no

no

no

142

User-Acct-Base

no

no

no

no

no

no

no

no

143

User-Acct-Time

no

no

no

no

no

no

no

no

144

Assign-IP-Client

no

no

no

no

no

no

no

no

145

Assign-IP-Server

no

no

no

no

no

no

no

no

146

Assign-IP-Global-Pool

no

no

no

no

no

no

no

no

147

DHCP-Reply

no

no

no

no

no

no

no

no

148

DHCP-Pool-Number

no

no

no

no

no

no

no

no

149

Expect-Callback

no

no

no

no

no

no

no

no

150

Event-Type

no

no

no

no

no

no

no

no

151

Session-Svr-Key

no

no

no

yes

no

no

yes

yes

152

Multicast-Rate-Limit

no

no

no

yes

no

no

yes

yes

153

IF-Netmask

no

no

no

no

no

no

no

no

154

Remote-Addr

no

no

no

no

no

no

no

no

155

Multicast-Client

no

no

no

yes

no

no

yes

yes

156

FR-Circuit-Name

no

no

no

no

no

no

no

no

157

FR-LinkUp

no

no

no

no

no

no

no

no

158

FR-Nailed-Grp

no

no

no

no

no

no

no

no

159

FR-Type

no

no

no

no

no

no

no

no

160

FR-Link-Mgt

no

no

no

no

no

no

no

no

161

FR-N391

no

no

no

no

no

no

no

no

162

FR-DCE-N392

no

no

no

no

no

no

no

no

163

FR-DTE-N392

no

no

no

no

no

no

no

no

164

FR-DCE-N393

no

no

no

no

no

no

no

no

165

FR-DTE-N393

no

no

no

no

no

no

no

no

166

FR-T391

no

no

no

no

no

no

no

no

167

FR-T392

no

no

no

no

no

no

no

no

168

Bridge-Address

no

no

no

no

no

no

no

no

169

TS-Idle-Limit

no

no

no

no

no

no

no

no

170

TS-Idle-Mode

no

no

no

no

no

no

no

no

171

DBA-Monitor

no

no

no

no

no

no

no

no

172

Base-Channel-Count

no

no

no

no

no

no

no

no

173

Minimum-Channels

no

no

no

no

no

no

no

no

174

IPX-Route

no

no

no

no

no

no

no

no

175

FT1-Caller

no

no

no

no

no

no

no

no

176

Backup

no

no

no

no

no

no

no

no

177

Call-Type

no

no

no

no

no

no

no

no

178

Group

no

no

no

no

no

no

no

no

179

FR-DLCI

no

no

no

no

no

no

no

no

180

FR-Profile-Name

no

no

no

no

no

no

no

no

181

Ara-PW

no

no

no

no

no

no

no

no

182

IPX-Node-Addr

no

no

no

no

no

no

no

no

183

Home-Agent-IP-Addr

no

no

no

no

no

no

no

no

184

Home-Agent-Password

no

no

no

no

no

no

no

no

185

Home-Network-Name

no

no

no

no

no

no

no

no

186

Home-Agent-UDP-Port

no

no

no

no

no

no

no

no

187

Multilink-ID

no

no

no

yes

yes

yes

yes

yes

188

Num-In-Multilink

no

no

no

yes

yes

yes

yes

yes

189

First-Dest

no

no

no

no

no

no

no

no

190

Pre-Input-Octets

no

no

no

yes

yes

yes

yes

yes

191

Pre-Output-Octets

no

no

no

yes

yes

yes

yes

yes

192

Pre-Input-Packets

no

no

no

yes

yes

yes

yes

yes

193

Pre-Output-Packets

no

no

no

yes

yes

yes

yes

yes

194

Maximum-Time

no

no

yes

yes

yes

yes

yes

yes

195

Disconnect-Cause

no

no

yes

yes

yes

yes

yes

yes

196

Connect-Progress

no

no

no

no

no

no

yes

yes

197

Data-Rate

no

no

no

no

yes

yes

yes

yes

198

PreSession-Time

no

no

no

yes

yes

yes

yes

yes

199

Token-Idle

no

no

no

no

no

no

no

no

201

Require-Auth

no

no

no

no

no

no

no

no

202

Number-Sessions

no

no

no

no

no

no

no

no

203

Authen-Alias

no

no

no

no

no

no

no

no

204

Token-Expiry

no

no

no

no

no

no

no

no

205

Menu-Selector

no

no

no

no

no

no

no

no

206

Menu-Item

no

no

no

no

no

no

no

no

207

PW-Warntime

no

no

no

no

no

no

no

no

208

PW-Lifetime

no

no

yes

yes

yes

yes

yes

yes

209

IP-Direct

no

no

no

no

yes

yes

yes

yes

210

PPP-VJ-Slot-Comp

no

no

yes

yes

yes

yes

yes

yes

211

PPP-VJ-1172

no

no

no

no

no

no

no

no

212

PPP-Async-Map

no

no

no

no

no

no

no

no

213

Third-Prompt

no

no

no

no

no

no

no

no

214

Send-Secret

no

no

no

no

no

no

yes

yes

215

Receive-Secret

no

no

no

no

no

no

no

no

216

IPX-Peer-Mode

no

no

no

no

no

no

no

no

217

IP-Pool-Definition

no

no

yes

yes

yes

yes

yes

yes

218

Assign-IP-Pool

no

no

yes

yes

yes

yes

yes

yes

219

FR-Direct

no

no

no

no

no

no

no

no

220

FR-Direct-Profile

no

no

no

no

no

no

no

no

221

FR-Direct-DLCI

no

no

no

no

no

no

no

no

222

Handle-IPX

no

no

no

no

no

no

no

no

223

Netware-Timeout

no

no

no

no

no

no

no

no

224

IPX-Alias

no

no

no

no

no

no

no

no

225

Metric

no

no

no

no

no

no

no

no

226

PRI-Number-Type

no

no

no

no

no

no

no

no

227

Dial-Number

no

no

no

no

no

no

yes

yes

228

Route-IP

no

no

yes

yes

yes

yes

yes

yes

229

Route-IPX

no

no

no

no

no

no

no

no

230

Bridge

no

no

no

no

no

no

no

no

231

Send-Auth

no

no

no

no

no

no

yes

yes

232

Send-Passwd

no

no

no

no

no

no

no

no

233

Link-Compression

no

no

yes

yes

yes

yes

yes

yes

234

Target-Util

no

no

no

yes

no

yes

yes

yes

235

Maximum-Channels

no

no

yes

yes

yes

yes

yes

yes

236

Inc-Channel-Count

no

no

no

no

no

no

no

no

237

Dec-Channel-Count

no

no

no

no

no

no

no

no

238

Seconds-of-History

no

no

no

no

no

no

no

no

239

History-Weigh-Type

no

no

no

no

no

no

no

no

240

Add-Seconds

no

no

no

no

no

no

no

no

241

Remove-Seconds

no

no

no

no

no

no

no

no

242

Data-Filter

no

no

yes

yes

yes

yes

yes

yes

243

Call-Filter

no

no

no

no

no

no

no

no

244

Idle-Limit

no

no

yes

yes

yes

yes

yes

yes

245

Preempt-Limit

no

no

no

no

no

no

no

no

246

Callback

no

no

no

no

no

no

no

no

247

Data-Svc

no

no

no

no

no

no

yes

yes

248

Force-56

no

no

no

no

no

no

yes

yes

249

Billing Number

no

no

no

no

no

no

no

no

250

Call-By-Call

no

no

no

no

no

no

no

no

251

Transit-Number

no

no

no

no

no

no

no

no

252

Host-Info

no

no

no

no

no

no

no

no

253

PPP-Address

no

no

no

no

no

no

no

no

254

MPP-Idle-Percent

no

no

no

no

no

no

no

no

255

Xmit-Rate

no

no

no

yes

yes

yes

yes

yes


Comprehensive List of Vendor-Proprietary RADIUS Attribute Descriptions

Table 34 lists and describes the known vendor-proprietary RADIUS attributes:

Table 34 Vendor-Proprietary RADIUS Attributes 

Number
Vendor-Proprietary Attribute
Description

17

Change-Password

Specifies a request to change the password of a user.

21

Password-Expiration

Specifies an expiration date for a user's password in the user's file entry.

68

Tunnel-ID

(Ascend 5) Specifies the string assigned by RADIUS for each session using CLID or DNIS tunneling. When accounting is implemented, this value is used for