Using NAP-Specific VSAs to Authenticate 802.1X Supplicants

NAP-Specific VSA Definitions for 802.1X Network Login contains the VSA definitions for 802.1X network login in conjunction with devices and servers that support NAP.

The Microsoft Vendor ID is 311.

Note

Note

For more information about NAP and the VSAs supported by NAP, please refer to the documentation that came with your Microsoft operating system or server.
Click to expand in new window

NAP-Specific VSA Definitions for 802.1X Network Login

VSA Vendor Type Type Sent-in Description
MS-Quarantine-State 45 Integer Access-Accept Indicates the network access level that the RADIUS (Remote Authentication Dial In User Service) server authorizes the user. The network access server (the switch) also enforces the network access level. A value of “0” gives the user full network access. A value of “1” gives the user limited network access. A value of “2” gives the user full network access within a specified time period.
MS-IPv4-Remediation-Servers 52 Integer Access-Accept Indicates the IP address(es) of the remediation server(s) that an unhealthy supplicant moves to in order to get healthy.