Cisco Systems OL-4387-02 Network Router User Manual


 
CHAPTER
4-1
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
OL-4387-02
4
Authentication and Accounting
The Cisco 10000 series router supports the following SSG features for authentication and accounting
related functions:
SSG Full Username RADIUS Attribute, page 4-1
RADIUS Accounting Records, page 4-2
This chapter describes the SSG features for authentication and accounting.
SSG Full Username RADIUS Attribute
The Full Username RADIUS attribute allows SSG to include the user’s full username and domain
(user@service) in the RADIUS authentication and accounting requests.
Restrictions for SSG Full Username RADIUS Attribute
The size of the full username is limited to the smaller of the following values:
246 bytes (10 bytes less than the standard RADIUS protocol limitation)
10 bytes less than the maximum size of the RADIUS attribute supported by your proxy
Configuration Examples for SSG Full Username RADIUS Attribute
Example 4-1 RADIUS Freeware Format Example
Service-Info = “X”
Example 4-2 CiscoSecure ACS for UNIX Example
9,251 = “X”