HP-UX AAA Server A.08.02 Administrator's Guide

Tunnel-Private-Group-ID A group identifier for a private session. Private groups may
be used to associate a tunneled session with a particular
group of users. For example, it may be used to facilitate
routing of unregistered IP addresses through a particular
interface.
Tunnel-Assignment-ID This attribute indicates what tunnel will be used to provide
an appropriate level of service for the user. Data transfer for
users that share the same assignment will be multiplexed over
a shared tunnel. A client that supports this attribute will handle
it as follows:
• If this attribute is present and a tunnel exists between the
specified endpoints with the specified ID, then the session
should be assigned to that tunnel.
• If this attribute is present and no tunnel exists between
the specified endpoints with the specified ID, then a new
tunnel should be established for the session and the
specified ID should be associated with the new tunnel.
• If this attribute is not present, then the session is assigned
to an unnamed tunnel. If an unnamed tunnel does not
yet exist between the specified endpoints then it is
established and used for this and subsequent sessions
established without the Tunnel-Assignment-ID attribute.
NOTE: The same ID may be used to name different tunnels
if the tunnels are between different endpoints.
Tunnel-Preference When returning more than one tagged tunnel description,
this attribute indicates each tunnel’s relative level of
preference. Values for this attribute are specified as an ordinal
number (e.g., first, second, etc.).
Tunnel-Client-Auth-ID Name used by the client during the authentication that occurs
between the Tunnel-Client-Endpoint and Tunnel-Server-Endpoint
based on Tunnel-Password and any other checks that may be
configured for Tunnel-Server-Endpoint.
Tunnel-Server-Auth-ID Name used by the server during the authentication that occurs
between the Tunnel-Client-Endpoint and Tunnel-Server-Endpoint
based on Tunnel-Password and any other checks that may be
configured for Tunnel-Server-Endpoint.
Other Attributes
Acct-Interim-Interval This attribute indicates the number of seconds between each
interim update for a specific session. If the server wishes to
receive interim accounting messages for a given user, it must
include this RADIUS attribute in the message which indicates the
interval in seconds between interim messages.
NOTE: The Acct-Interim-Interval value field contains
the number of seconds between each interim update to be sent
from the NAS for a session. The value must not be smaller than
60 seconds and should not be smaller than 600. Careful
consideration should be given to its impact on network traffic.
412 Attribute-Value Pairs