HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

will be used to establish the tunnel. When you use a tunneling attribute as a check item, you are
controlling access to the tunnel server based on what the user is requesting.
Tunnel-Type Indicates the tunneling protocol to use when establishing the
tunnel. Valid values for this attribute are:
• PPTP (Point-to-Point Tunneling Protocol)
• L2F (Layer Two Forwarding)
• L2TP (Layer Two Tunneling Protocol)
• ATMP (Ascend Tunnel Management Protocol)
• VTP (Virtual Tunneling Protocol)
• AH (IP Authentication Header in the Tunnel-mode)
• IP-IP-Encap (IP-in-IP Encapsulation)
• MIN-IP-IP (Minimal IP-in-IP Encapsulation)
• ESP (IP Encapsulating Security Payload in the
Tunnel-mode)
• GRE (Generic Route Encapsulation)
• DVS (Bay Dial Virtual Services)
• IP-IP (IP-in-IP Tunneling)
Tunnel-Medium-Type Transport medium to use when creating a tunnel for those
protocols (e.g., L2TP) that can operate over multiple transports.
Valid values for this attribute are:
• IPv4 (IP version 4)
• IPv6 (IP version 6)
• NSAP
• HDLC (8-bit multidrop)
• BBN-1822 (1822)
• IEEE-802 (All 802 media plus Ethernet “canonical
format”)
• E-163 (POTS)
• E-164 (SMDS, Frame Relay, ATM)
• F-69 (Telex)
• X-121 (X.25, Frame Relay)
• IPX
• Appletalk
• DecnetIV
• Banyan-Vines
• E-164-NSAP
Tunnel-Client-Endpoint Address of the client that initiated the tunnel.
Tunnel-Server-Endpoint Address of the server that provides the tunnel to the user.
Tunnel-Password This password is not used for authentication by the AAA server
but is a separate check made for access to the machine
specified by Tunnel-Server-Endpoint.
412 Attribute-Value Pairs