The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Different vendors have extended the standard attribute value pairs (AV-pairs) to satisfy specific needs. The AV-pairs introduced by Cisco are collectively called Vendor Specific Attributes, one of which is called Cisco AV-pair.
This document explains how to add multiple Cisco AV-pairs, or any multi-valued attribute, to a user profile.
There are no specific requirements for this document.
The information in this document is based on these software and hardware versions:
Access Registrar 3.0R8
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
For more information on document conventions, refer to the Cisco Technical Tips Conventions.
Cisco AV-pairs, or multi-valued attributes, cannot be added one at a time. If added one at a time, only the last AV-pair, or attribute remains because it overwrites the others.
The correct syntax to use is:
set Cisco-Avpair "vpdn:l2tp-tunnel-password=XYZ" "vpdn:tunnel-type=l2tp" "vpdn:tunnel-id=tunnel23" "vpdn:ip-addresses=10.10.10.1"
Note: Double quotes are not absolutely needed unless the value has a space in it. In this case, double quotes are not needed. The entire command has to be entered on one line. It has been wrapped to the second line in this document for spatial reasons.
This is an example of how to perform the steps in aregcmd:
--> cd /Radius/Profiles/default-PPP-users/Attributes/ [ //localhost/Radius/Profiles/default-PPP-users/Attributes ] Ascend-Idle-Limit = 1800 Framed-Compression = "VJ TCP/IP header compression" Framed-MTU = 1500 Framed-Protocol = PPP Framed-Routing = None Service-Type = Framed !--- This command is brought down to a second line !--- for spatial reasons. Keep this command on one line when you !--- enter it. --> set Cisco-Avpair "vpdn:l2tp-tunnel-password=XYZ" "vpdn:tunnel-type=l2tp" "vpdn:tunnel-id=tunnel23" "vpdn:ip-addresses=10.10.10.1" !--- This command is brought down to a second line !--- for spatial reasons. Keep this command on one line when you !--- enter it. Set Cisco-Avpair vpdn:l2tp-tunnel-password=XYZ vpdn:tunnel-type=l2tp vpdn:tunnel-id=tunnel23 vpdn:ip-addresses=10.10.10.1 --> ls [ //localhost/Radius/Profiles/default-PPP-users/Attributes ] Ascend-Idle-Limit = 1800 Cisco-Avpair = vpdn:l2tp-tunnel-password=XYZ Cisco-Avpair = vpdn:tunnel-type=l2tp Cisco-Avpair = vpdn:tunnel-id=tunnel23 Cisco-Avpair = vpdn:ip-addresses=10.10.10.1 !--- All av-pairs are successfully added. Framed-Compression = "VJ TCP/IP header compression" Framed-MTU = 1500 Framed-Protocol = PPP Framed-Routing = None Service-Type = Framed