User Manual Part 2

Wi-Fi Array
443
RADIUS Vendor Specific Attributes (VSAs) for Xirrus
A number of RADIUS VSAs are defined for Xirrus Arrays. These control
administrator privileges and a number of settings for user accounts, such as QoS,
roaming, VLAN, etc.
The RADIUS VSAs are used by Arrays to define selected attributes for the
following account types:
 Array administrators — the Xirrus-Admin-Role attribute sets the
privilege level for this account. Set the value to the string defined in
Privilege Level Name as described in “About Creating Admin Accounts
on the RADIUS Server” on page 219.
 Array users — all of the VSAs whose names start with Xirrus-User set
attributes of WiFi client accounts. As you can see in the dictionary.xirrus
file listed below, attribute types may be integer or string. For integer -type
attributes, the possible integer values that you may set are listed and
described in dictionary.xirrus. For string-type attributes, set the value to
an entry name that you have configured on the Array. For example, set
Xirrus-User-VLAN to a VLAN Name that you created in “VLAN
Management” on page 207. Most of the Xirrus-User attributes are
described in “Group Management” on page 264.
The following Xirrus RADIUS VSA dictionary is provided here as a sample for
your convenience. These definitions may be updated from time to time. Always
check the Xirrus Customer Support website for the latest version:
support.xirrus.com.
VENDOR Xirrus 21013
BEGIN-VENDOR Xirrus
ATTRIBUTE Xirrus-Admin-Role 1 string
ATTRIBUTE Xirrus-User-VLAN 2 string
ATTRIBUTE Xirrus-User-Qos-WiFi 3 integer
ATTRIBUTE Xirrus-User-Qos-L2 4 integer
ATTRIBUTE Xirrus-User-Qos-L3-TOS 5 integer
ATTRIBUTE Xirrus-User-Qos-L3-DSCP 6 integer