Using NAP-Specific VSAs to Authenticate 802.1X Supplicants

The following table contains the VSA definitions for 802.1X network login in conjunction with devices and servers that support NAP.

The Microsoft Vendor ID is 311.

Note

Note

For more information about NAP and the VSAs supported by NAP, please refer to the documentation that came with your Microsoft operating system or server.

Click to expand in new window

NAP-Specific VSA Definitions for 802.1X Network Login

VSA Vendor Type Type Sent-in Description

MS-Quarantine-State

45

Integer

Access-Accept

Indicates the network access level that the RADIUS server authorizes the user. The network access server (the switch) also enforces the network access level. A value of “0” gives the user full network access. A value of “1” gives the user limited network access. A value of “2” gives the user full network access within a specified time period.

MS-IPv4-Remediation-Servers

52

Integer

Access-Accept

Indicates the IP address(es) of the remediation server(s) that an unhealthy supplicant moves to in order to get healthy.