- RADIUS Attributes Overview and RADIUS IETF Attributes
- RADIUS Vendor-Proprietary Attributes
- RADIUS Vendor-Specific Attributes and RADIUS Disconnect-Cause Attribute Values
- RADIUS Attribute 8 Framed-IP-Address in Access Requests
- RADIUS Tunnel Attribute Extensions
- RADIUS Attribute Screening
- RADIUS NAS-IP-Address Attribute Configurability
RADIUS Vendor-Proprietary Attributes
The IETF draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the network access server and the RADIUS server. However, some vendors have extended the RADIUS attribute set for specific applications. This document provides Cisco IOS support information for these vendor-proprietary RADIUS attrubutes.
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the Feature Information Table at the end of this document.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
Supported Vendor-Proprietary RADIUS Attributes
The table below lists Cisco-supported vendor-proprietary RADIUS attributes and the Cisco IOS release in which they are implemented. In cases where the attribute has a security server-specific format, the format is specified. Refer to Vendor-Proprietary RADIUS Attributes table for a list of descriptions.
 Note |
Attributes implemented in special (AA) or early development (T) releases will be added to the next mainline image. |
| Table 1 | Supported Vendor-Proprietary RADIUS Attributes |
| Number |
Vendor-Proprietary Attribute |
11.1 |
11.2 |
11.3 |
11.3AA |
11.3T |
12.0 |
12.1 |
12.2 |
12.3 |
12.4 |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 17 |
Change-Password |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 21 |
Password-Expiration |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 68 |
Tunnel-ID |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
| 108 |
My-Endpoint-Disc-Alias |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 109 |
My-Name-Alias |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 110 |
Remote-FW |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 111 |
Multicast-GLeave-Delay |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 112 |
CBCP-Enable |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 113 |
CBCP-Mode |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 114 |
CBCP-Delay |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 115 |
CBCP-Trunk-Group |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 116 |
Appletalk-Route |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 117 |
Appletalk-Peer-Mode |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 118 |
Route-Appletalk |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 119 |
FCP-Parameter |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 120 |
Modem-PortNo |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 121 |
Modem-SlotNo |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 122 |
Modem-ShelfNo |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 123 |
Call-Attempt-Limit |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 124 |
Call-Block-Duration |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 125 |
Maximum-Call-Duration |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 126 |
Router-Preference |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 127 |
Tunneling-Protocol |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 128 |
Shared-Profile-Enable |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 129 |
Primary-Home-Agent |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 130 |
Secondary-Home-Agent |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 131 |
Dialout-Allowed |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 133 |
BACP-Enable |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 134 |
DHCP-Maximum-Leases |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 135 |
Primary-DNS-Server |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
| 136 |
Secondary-DNS-Server |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
| 137 |
Ascend-Client-Assign-DNS |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 138 |
User-Acct-Type |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 139 |
User-Acct-Host |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 140 |
User-Acct-Port |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 141 |
User-Acct-Key |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 142 |
User-Acct-Base |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 143 |
User-Acct-Time |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 144 |
Assign-IP-Client |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 145 |
Assign-IP-Server |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 146 |
Assign-IP-Global-Pool |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 147 |
DHCP-Reply |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 148 |
DHCP-Pool-Number |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 149 |
Expect-Callback |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 150 |
Event-Type |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 151 |
Ascend-Session-Svr-Key |
no |
no |
no |
yes |
no |
no |
yes |
yes |
yes |
yes |
| 152 |
Ascend-Multicast-Rate-Limit |
no |
no |
no |
yes |
no |
no |
yes |
yes |
yes |
yes |
| 153 |
IF-Netmask |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 154 |
h323-Remote-Address |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 155 |
Ascend-Multicast-Client |
no |
no |
no |
yes |
no |
no |
yes |
yes |
yes |
yes |
| 156 |
FR-Circuit-Name |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 157 |
FR-LinkUp |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 158 |
FR-Nailed-Grp |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 159 |
FR-Type |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 160 |
FR-Link-Mgt |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 161 |
FR-N391 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 162 |
FR-DCE-N392 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 163 |
FR-DTE-N392 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 164 |
FR-DCE-N393 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 165 |
FR-DTE-N393 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 166 |
FR-T391 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 167 |
FR-T392 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 168 |
Bridge-Address |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 169 |
TS-Idle-Limit |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 170 |
TS-Idle-Mode |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 171 |
DBA-Monitor |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 172 |
Base-Channel-Count |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 173 |
Minimum-Channels |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 174 |
IPX-Route |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 175 |
FT1-Caller |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 176 |
Ipsec-Backup-Gateway |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 177 |
rm-Call-Type |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 178 |
Group |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 179 |
FR-DLCI |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 180 |
FR-Profile-Name |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 181 |
Ara-PW |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 182 |
IPX-Node-Addr |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 183 |
Home-Agent-IP-Addr |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 184 |
Home-Agent-Password |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 185 |
Home-Network-Name |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 186 |
Home-Agent-UDP-Port |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 187 |
Multilink-ID |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 188 |
Ascend-Num-In-Multilink |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 189 |
First-Dest |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 190 |
Pre-Input-Octets |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 191 |
Pre-Output-Octets |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 192 |
Pre-Input-Packets |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 193 |
Pre-Output-Packets |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 194 |
Maximum-Time |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
no |
no |
| 195 |
Disconnect-Cause |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 196 |
Connect-Progress |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
| 197 |
Data-Rate |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
| 198 |
PreSession-Time |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 199 |
Token-Idle |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 201 |
Require-Auth |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 202 |
Number-Sessions |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 203 |
Authen-Alias |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 204 |
Token-Expiry |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 205 |
Menu-Selector |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 206 |
Menu-Item |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 207 |
PW-Warntime |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 208 |
PW-Lifetime |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 209 |
IP-Direct |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
| 210 |
PPP-VJ-Slot-Compression |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 211 |
PPP-VJ-1172 |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 212 |
PPP-Async-Map |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 213 |
Third-Prompt |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 214 |
Send-Secret |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
| 215 |
Receive-Secret |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 216 |
IPX-Peer-Mode |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 217 |
IP-Pool |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 218 |
Static-Addr-Pool |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 219 |
FR-Direct |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 220 |
FR-Direct-Profile |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 221 |
FR-Direct-DLCI |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 222 |
Handle-IPX |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 223 |
Netware-Timeout |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 224 |
IPX-Alias |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 225 |
Metric |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 226 |
PRI-Number-Type |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 227 |
Dial-Number |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
| 228 |
Route-IP |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 229 |
Route-IPX |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 230 |
Bridge |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 231 |
Send-Auth |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
| 232 |
Send-Passwd |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 233 |
Link-Compression |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 234 |
Target-Util |
no |
no |
no |
yes |
no |
yes |
yes |
yes |
yes |
yes |
| 235 |
Maximum-Channels |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 236 |
Inc-Channel-Count |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 237 |
Dec-Channel-Count |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 238 |
Seconds-of-History |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 239 |
History-Weigh-Type |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 240 |
Add-Seconds |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 241 |
Remove-Seconds |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 242 |
Data-Filter |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 243 |
Call-Filter |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 244 |
Idle-Limit |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
| 245 |
Preempt-Limit |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 246 |
Callback |
no |
no |
no |
no |
no |
no |
no |
no |
yes |
yes |
| 247 |
Data-Service |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
| 248 |
Force-56 |
no |
no |
no |
no |
no |
no |
yes |
yes |
yes |
yes |
| 249 |
Billing Number |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 250 |
Call-By-Call |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 251 |
Transit-Number |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 252 |
Host-Info |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 253 |
PPP-Address |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 254 |
MPP-Idle-Percent |
no |
no |
no |
no |
no |
no |
no |
no |
no |
no |
| 255 |
Xmit-Rate |
no |
no |
no |
yes |
yes |
yes |
yes |
yes |
yes |
yes |
Comprehensive List of Vendor-Proprietary RADIUS Attribute Descriptions
The table below lists and describes the known vendor-proprietary RADIUS attributes:
| Table 2 | Vendor-Proprietary RADIUS Attributes |
For more information on vendor-propritary RADIUS attributes, refer to the section “ Configuring Router for Vendor-Proprietary RADIUS Server Communication ” in the chapter “ Configuring RADIUS .”
Feature Information for RADIUS Vendor-Proprietary Attributes
The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
| Table 3 | Feature Information for RADIUS Vendor-Proprietary Attributes |
| Feature Name |
Releases |
Feature Information |
|---|---|---|
| RADIUS Vendor-Proprietary Attributes |
12.2(1)XE |
The IETF draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the network access server and the RADIUS server. However, some vendors have extended the RADIUS attribute set for specific applications. This document provides Cisco IOS support information for these vendor-proprietary RADIUS attrubutes. In 12.2(1) XE, this feature was introduced. |
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
Feedback