Filter
Top Products
Working with public access attributes
Attribute definitions
Idle-Timeout
(32-bit unsigned integer)
Maximum idle time in seconds allowed for the user. Once reached, the user session is
terminated with termination-cause IDLE-TIMEOUT. Omitting the attribute or specifying 0
disables the feature.
Reply-Message
(string)
This string (as defined in RFC 2865) is recorded and passed as is to the
GetRadiusReplyMessage() asp function. Multiple string are supported to a maximum length
of 252 bytes.
Session-Timeout
(32-bit unsigned integer)
Maximum time a session can be active. The user must re-authenticate when this timer
expires. Omitting this attribute or specifying 0 disables the feature.
Termination-Action
(32-bit unsigned integer)
As defined by RFC 2865. If set to 1, a new Access Request is sent. If an Access Accept is
returned, the service controller then extends the user’s session timeout, and if applicable,
session quota, according the value returned by the RADIUS server.
Tunnel-Medium-Type
(24-bit unsigned integer)
Only used when assigning a specific VLAN number to a user. In this case it must be set to 802.
Tunnel-Private-Group-ID
(string)
Only used when assigning a specific VLAN number to a user. In this case it must be set to the
VLAN ID.
Tunnel-Type
(24-bit unsigned integer)
Only used when assigning a specific VLAN number to a user. In this case it must be set to 13
(VLAN).
Vendor-specific (Microsoft)
HP ProCurve supports the following Microsoft vendor-specific attributes.
MS-MPPE-Recv-Key
(string)
Use to validate a PMKID inside a 802.11 association request, send EAPOL keys to a
wireless station when a VSC has 802.1X WEP enabled, and to perform a four-way
handshake.
MS-MPPE-Send-Key
(string)
Use to validate a PMKID inside a 802.11 association request, send EAPOL keys to a
wireless station when a VSC has 802.1X WEP enabled, and to perform a four-way
handshake.
9-21