HP (Hewlett-Packard) MSM7XX Switch User Manual


 
Working with public access attributes
Attribute definitions
Vendor-specific (Colubris)
(string)
Colubris AV-Pair
HP ProCurve has defined a vendor-specific attribute to support configuration of user
session settings. This attribute conforms to RADIUS RFC 2865. You may need to define
this attribute on your RADIUS server (if it is not already present) using the following
values:
SMI network management private enterprise code = 8744
Vendor-specific attribute type number = 0
Attribute type: A string in the following format <keyword>=<value>
Multiple instances of the Colubris AV-Pair can be defined in a RADIUS account to
configure a variety of settings. For a complete list of all supported settings, see Colubris
AV-Pair attribute - Site values on page 9-29.
Colubris-Intercept
This attribute is used to enable/disable the interception and redirection of traffic for
individual users. The destination for intercepted traffic is defined separately for each VSC
using the Interception option under VSC egress mapping. See VSC egress mapping on
page 2-11.
You may need to define the Colubris-Intercept attribute on your RADIUS server (if it is
not already present) using the following values:
SMI network management private enterprise code = 8744
Vendor-specific attribute type number = 1
Attribute type = integer with one of the following values:
0: Do not intercept user traffic.
1: Intercept user traffic and redirect it to the destination defined by the
Intercepted option under VSC egress mapping in the VSC to which the user is
connected.
Access reject
EAP-Message
(string)
Only supported when authentication is EAP-MD5. Note that the content will not be read as
the RADIUS Access Reject overrides whatever indication is contained inside this packet.
Vendor-specific (Microsoft)
HP ProCurve supports the following Microsoft vendor-specific attributes.
MSCHAP-Error
(string)
A MSCHAP specific error as defined by RFC 2433.
9-22