Cisco Systems CSACS3415K9 Uživatelský manuál stáhnout pdf (Strana 605)

100

101

A-11

User Guide for Cisco Secure Access Control System 5.4

OL-26225-01

Appendix A AAA Protocols

Overview of RADIUS

• If the Multiple attributes are allowed, then the update operation removes all the occurrences of this

attribute and adds one attribute with a new value.

Example:

On the Access Request:

Attribute Operation statement:

Result of the attribute operation on the request forwarded to the server:

• If the attribute is cisco-avpair (pair of key=value) the update is done according to the key.

Example:

On the Access Request:

cisco-avpair = url-redirect=www.cisco.com

cisco-avpair = url-redirect=www.yahoo.com

cisco-avpair = cmd=show

Attribute Operation statement:

cisco-avpair UPDATE new value:[url-redirect=www.google.com]

Result of the attribute operation on the request forwarded to the server:

cisco-avpair = url-redirect=www.google.com

cisco-avpair = cmd=show

Delete Attribute

The delete attributes operation is used delete the value of the selected RADIUS attributes.

Example:

On the Access Request:

Attribute Operation statement:

Result of the attribute operation on the request forwarded to the server:

Attribute Login-IP-Host NOT on the request

RADIUS Access Requests

A user login contains a query (Access-Request) from the network access device to the RADIUS server

and a corresponding response (Access-Accept or Access-Reject) from the server. The Access-Request

packet contains the username, password, NAD IP address, and NAD port, and other relevant attributes.

1 2 ... 600 601 602 603 604 605 606 607 608 609 610 ... 677 678

Komentáře k této Příručce

Žádné komentáře

Cisco Systems CSACS3415K9 Uživatelský manuál Strana 605

Komentáře k této Příručce

Související produkty a manuály pro Software Cisco Systems CSACS3415K9