In addition to the standard RADIUS message, you can include Vendor Specific Attributes (VSAs). The ExtremeWireless authentication mechanism provides VSAs for RADIUS and other authentication mechanisms (Vendor Specific Attributes).
Attribute Name | ID | Type | Messages | Description |
---|---|---|---|---|
AP-Name | 2 | string | Sent to RADIUS server | The name of the AP the client is associating to. It can be used to assign role based on AP name or location. |
AP-Serial | 3 | string | Sent to RADIUS server | The AP serial number. It can be used instead of (or in addition to) the AP name. |
AP Ethernet MAC | string | Sent to RADIUS server | The MAC address of the AP used by the ECP to determine client location. | |
AP Location | string | Sent to RADIUS server | The physical location of the AP. Provided by the network administrator. | |
VNS-Name | 4 | string | Sent to RADIUS server | The name of the Virtual Network the client has been assigned to. It is used in assigning role and billing options, based on service selection. |
SSID | 5 | string | Sent to RADIUS server | The name of the SSID the client is associating to. It is used in assigning role and billing options, based on service selection. |
BSS-MAC | 6 | string | Sent to RADIUS server | The name of the BSS-ID the client is associating to. It is used in assigning role and billing options, based on service selection and location. |
Role-Name | 7 | string | Sent to RADIUS server | The name of the role applied to the station‘s session. |
Topology-Name | 8 | string | Sent to RADIUS server | The name of the topology applied to the station‘s session. |
Ingress-RC-Name | 9 | string | Sent to RADIUS server | The name of the rate limit applied to the station‘s session‘s outbound traffic. |
Egress-RC-Name | 10 | string | Sent to RADIUS server | The name of the rate limit applied to the station‘s session‘s inbound traffic. |
The RADIUS message also includes RADIUS attributes Called-Station-Id and Calling-Station-Id to include the MAC address of the wireless device.
Note
Siemens-URL-Redirection is supported by MAC-based authentication.