Vendor Specific Attributes

In addition to the standard RADIUS message, you can include Vendor Specific Attributes (VSAs). The ExtremeWireless authentication mechanism provides VSAs for RADIUS and other authentication mechanisms (Vendor Specific Attributes).

Click to expand in new window

Vendor Specific Attributes

Attribute Name ID Type Messages Description
AP-Name 2 string Sent to RADIUS server The name of the AP the client is associating to. It can be used to assign role based on AP name or location.
AP-Serial 3 string Sent to RADIUS server The AP serial number. It can be used instead of (or in addition to) the AP name.
AP Ethernet MAC   string Sent to RADIUS server The MAC address of the AP used by the ECP to determine client location.
AP Location   string Sent to RADIUS server The physical location of the AP. Provided by the network administrator.
VNS-Name 4 string Sent to RADIUS server The name of the Virtual Network the client has been assigned to. It is used in assigning role and billing options, based on service selection.
SSID 5 string Sent to RADIUS server The name of the SSID the client is associating to. It is used in assigning role and billing options, based on service selection.
BSS-MAC 6 string Sent to RADIUS server The name of the BSS-ID the client is associating to. It is used in assigning role and billing options, based on service selection and location.
Role-Name 7 string Sent to RADIUS server The name of the role applied to the station‘s session.
Topology-Name 8 string Sent to RADIUS server The name of the topology applied to the station‘s session.
Ingress-RC-Name 9 string Sent to RADIUS server The name of the rate limit applied to the station‘s session‘s outbound traffic.
Egress-RC-Name 10 string Sent to RADIUS server The name of the rate limit applied to the station‘s session‘s inbound traffic.

The RADIUS message also includes RADIUS attributes Called-Station-Id and Calling-Station-Id to include the MAC address of the wireless device.

Note

Note

Siemens-URL-Redirection is supported by MAC-based authentication.