As previously mentioned, your device transmits far more than just the username and password in a RADIUS request. RADIUS servers might choose to completely ignore these additional attributes, or only use a subset of these attributes. Many of these attributes are used for access to the server using dial-in, and are defined as standard attributes in the RADIUS RFCs. However, some important information for hotspot operation can not be represented with standard attributes. For this reason LANCOM has chosen to provide these values as vendor-specific attributes, marked with LANCOM’s enterprise ID (2356).
Overview of the RADIUS attributes transmitted by the device to the authentication server
- 1
- User name
- The name entered by the user.
- 2
- User-Password
- The password entered by the user.
- 4
- NAS-IP-Address
- IP address of your device
- 6
- Service-Type Id 1
- Type of service that the user requested. The value 1 stands for Login.
- 8
- Framed-IP-Address
- IP address that was assigned to the client
- 26
- Vendor 2356(LCS) ID 2
- MAC address of the client if authentication using the MAC address is enabled. In contrast to the Calling-Station-Id, this value is transmitted as a 6-byte binary string. This attribute only exists for the login mode Authenticate with name, password and MAC address.
- 30
- Called-Station-Id
- MAC address of your device
- 31
- Calling-Station-Id
- MAC address of the client The address is given byte-wise in hexadecimal notation with separators (nn:nn:nn:nn:nn:nn).
- 32
- NAS-identifier
- Name of your device, if configured.
- 61
- NAS-Port-Type
- Type of physical port over which a user had requested authentication.
- ID 19 denotes clients from WLAN
- ID 15 denotes clients from Ethernet
- 87
- NAS-Port-Id
- Description of the interface over which the client is connected to your device. This can be a physical as well as a logical interface, such as LAN-1, WLAN-1-5 or WLC-TUNNEL-27.Anmerkung: Consider that more than one client may be connected to one interface at a time, so that, unlike dial-in servers, port numbers are not unique for clients.