HP-UX AAA Server A.08.00.01 Administrator's Guide

IMPORTANT: The HP-UX AAA Server only compares a check item with the first value
that appears for an attribute in an Access-Request. The server will disregard any
additional instances of the same attribute in the request. This limitation also applies to
tagged attributes, like those used to establish VPN tunnels.
Attributes Concerning the NAS
NAS-IP-Address
This attribute indicates the identifying IPv4 address of the
NAS which is requesting authentication of the user. Either
the NAS IP address, NAS-IPv6-Address, or the
NAS-Identifier must be present in an Access-Request.
NAS-IPv6-Address
This attribute indicates the identifying IPv6 address of the
NAS which is requesting authentication of the user. This
attribute must be unique to the NAS within the scope of the
RADIUS server. Either the NAS-IP-Address,
NAS-IPv6-Address, or NAS-Identifier must be present in an
Access-Request.
NAS-Identifier
This attribute contains a string identifying the NAS
originating the Access-Request. Either the NAS -IP-Address,
NAS-IPv6-Address, or the NAS-Identifier must be present
in an Access-Request.
NAS-Port
This attribute indicates the physical port number of the NAS
which is authenticating the user.
NOTE: NAS port refers to a physical connection on the
NAS, not a TCP or UDP port number. If the NAS
differentiates among its ports, either NAS-Port or
NAS-Port-Type or both should be present in an
Access-Request packet.
NAS-Port-Type
This attribute indicates the type of the physical port of the
NAS that is authenticating the user. It may appear in an
Access-Request instead of or in addition to the NAS port
attribute value. NAS-Port, NAS-Port-Type, or NAS-Port-Id
should be present in an Access-Request packet if the NAS
differentiates among its ports. Valid values for this attribute
are:
• Async
• Sync
• ISDN-Sync
• ISDN-Async-V120
542 Attribute-Value Pairs