Policy Server Guides › Policy Server Configuration Guide › Using the Policy Server as a RADIUS Server › Responses in RADIUS Policy Domains › Attribute Types › RADIUS Attributes

RADIUS Attributes

These attributes return values defined by the following Agent type attributes:

• RADIUS

  Generic RADIUS attributes, as defined by the RADIUS Protocol specification, Request for Comment (RFC) 2138. The identifiers for these attributes include 1-25 and 27-63. Some of these attributes may be used multiple times in the same response.

  Any RADIUS Agent type can return a response that includes generic RADIUS attributes.

• RADIUS Extended

  Attributes defined in the Dictionary file of the NAS device. These attributes define values that are not defined by generic RADIUS attributes and are specific to the type of NAS device in use. The unique identifiers for these attributes extend beyond the range reserved for generic RADIUS attributes, starting with 64. For example, Lucent provides an extended RADIUS attribute called Ascend-Disconnect-Cause, which uses the identifier 195.

  Only Agent types that match the vendor type of the extended RADIUS attribute can use the attribute. For example, a Shiva Agent type can use the extended RADIUS attributes defined for Shiva, but a Cisco Agent type cannot use Shiva extended attributes in a response. The extended attributes that are used in a response must match the attributes defined in the Dictionary file of the RADIUS client.

  By default, SiteMinder provides pre-defined RADIUS extended attributes for some Agent Types that use these attributes, such as Ascend (Lucent). You can also define additional RADIUS extended attributes for any of the RADIUS Agent types, if necessary.

• Vendor-Specific

  Attributes defined in the Dictionary file of the NAS device, which use 26 as an identifier. Vendor-specific attributes enable you to define attributes for values that are not provided by the generic RADIUS attributes. Some vendors use vendor-specific attributes in place of or in addition to RADIUS extended attributes. For example, Cisco does not use RADIUS Extended attributes; however, this NAS device supports several vendor-specific attributes, such as Cisco-AVpair and Account-Info.

  You can use vendor-specific attributes to pass information to other protocols. For example, you can define a vendor specific attribute for the Cisco-AV Pair attribute to pass TACACS+ information to a TACACS+ server.

  Vendor-specific attributes can only be defined in responses that match the vendor type of the RADIUS client.

  By default, SiteMinder provides pre-defined vendor-specific attributes for some Agent Types that use these attributes, such as the Network Associates' Sniffer Agent type. You can also define additional RADIUS extended attributes to any of the RADIUS Agent types, if necessary.

  Note: For more information about RADIUS attributes, see Request for Comment (RFC) RADIUS Protocol 2138.