2 Specifies the password of the user requesting authentication.
3 Specifies the password of the CHAP user requesting authentication.
4 Specifies the IP address of the NAS where the request originates (NPS only).
5 Specifies the physical port number of the NAS where the request originates.
6 Specifies the type of service that the user has requested.
7 Specifies the protocol that is used.
8 Specifies the framed address that is configured for the user.
9 Specifies the IP subnet mask that is configured for the user.
10 Specifies the routing method that is used by the user.
11 Specifies the name of filter list for the user requesting authentication.
12 Specifies the maximum transmission unit (MTU) that is configured for the user.
13 Specifies the compression protocol that is used.
14 Specifies the IP address of the host to which the user should connect.
15 Specifies the service that connects the user to the host.
16 Specifies the TCP port to which the user should connect.
18 Specifies the message displayed to the user when the authentication request is accepted or rejected.
19 Specifies the callback phone number.
20 Specifies the name of a location called by the NAS.
22 Specifies the routing information that is configured on the NAS for the user.
23 Specifies the IPX network number configured on the NAS for the user.
24 Specifies the attribute sent to the client in an Access-Challenge packet.
25 Specifies the classification of accounting records.
26 Specifies the support of proprietary NAS features.
27 Specifies the length of time, in seconds, before the session is terminated.
28 Specifies the length of idle time, in seconds, before the session is terminated.
29 Specifies the action that the NAS should take when service is completed.
30 Specifies the phone number dialed by the user.
31 Specifies the phone number from which the call originated.
32 Specifies the string that identifies the NAS that originated the request (NPS only).
33 Specifies the string sent by the proxy server when forwarding an Access-Request packet.
34 Specifies the host to which user is connected by the Local Area Transport (LAT) service.
35 Specifies the node to which user is connected by the Local Area Transport (LAT) service.
36 Specifies the Local Area Transport (LAT) group codes for which the user is authorized.
37 Specifies the AppleTalk network number for the link to the user. This only applies when the user is a router.
38 Specifies the AppleTalk network number that the NAS must query to allocate the user's AppleTalk node.
39 Specifies the AppleTalk default zone for the user.
40 Specifies whether the Accounting packet starts or stops a bridging, routing or terminal server session
41 Specifies the length of time, in seconds, for which the NAS has been sending the same accounting packet.
42 Specifies the number of octets received during the session.
43 Specifies the number of octets sent during the session.
44 Specifies the unique numeric string that identifies the server session.
45 Specifies which server authenticated an incoming call.
46 Specifies the length of time, in seconds, for which the session has been active.
47 Specifies the number of packets received during the session.
48 Specifies the number of packets sent during the session.
49 Specifies the reason that a connection was terminated.
50 Specifies the unique numeric string that identifies the multilink session.
51 Specifies the number of links in a multilink session.
52 Specifies the number of times that the Acct-Input-Octets counter has reached 4,294,967,295 and been reset to 0.
53 Specifies the number of times that the Acct-Output-Octets counter has reached 4,294,967,295 and been reset to 0.
55 Specifies that this attribute is included in an Accounting-Request packet to record the time that a specific event occurred on the NAS. The time is denoted in seconds, since midnight of January 1, 1970.
60 Specifies the CHAP challenge sent by the NAS to the CHAP user.
61 Specifies the type of physical port that is used by the NAS originating the request.
62 Specifies the maximum number of ports that the NAS provides to the user.
63 Specifies the port with which the user is connected by Local Area Transport (LAT).
64 Specifies the tunneling protocols used.
65 Specifies the transport medium used when creating a tunnel for protocols (for example, L2TP) that can operate over multiple transports.
66 Specifies the IP address of the initiator end of the tunnel.
67 Specifies the IP address of the server end of the tunnel.
69 Specifies the password used for authenticating to a remote server.
70 Specifies the user password for AppleTalk Remote Access Protocol (ARAP).
71 Specifies the information that the NAS sends to the user in the AppleTalk Remote Access Protocol (ARAP) flags packet.
72 Specifies the way in which the AppleTalk Remote Access Protocol (ARAP) zone list is used.
73 Specifies the AppleTalk Remote Access Protocol (ARAP) security module used in an Access-Challenge packet .
74 Specifies the AppleTalk Remote Access Protocol (ARAP) security module challenge or response.
75 Specifies the number of times the user can try to be authenticated before the NAS terminates the connection.
76 Specifies to the NAS whether or not it should echo the user's response as it is typed.
77 Specifies the nature of the user's connection.
78 Specifies the type of user profile used. This profile is sent in an Access-Accept packet from a RADIUS proxy server to a RADIUS proxy client (not to a NAS).
79 Specifies the encoding of Extensible Authentication Protocol (EAP) information to allow dial-in users to use EAP to authenticate without implementing EAP on the NAS.
80 Specifies that Access-Request packets are signed to prevent dictionary attacks on CHAP, ARAP, or EAP authentication methods.
81 Specifies the Group ID for a tunneled session.
82 Specifies the tunnel to which a session is assigned.
83 Specifies the relative preference assigned to each tunnel when more than one set of tunneling attributes is returned to the tunnel initiator.
85 Specifies the length of the interval (in seconds) between each interim update that the NAS sends.
86 Specifies the number of packets that are lost on a given link.
87 Specifies the port of the NAS that authenticates the user by using a text string.
88 Specifies the name of an assigned address pool that should be used to assign an address for the user.
90 Specifies the name used by the tunnel initiator during the authentication phase of tunnel establishment.
91 Specifies the name used by the tunnel terminator during the authentication phase of tunnel establishment.
108 Specifies the delay (in seconds) before the Ascend NAS calls the user back.
120 Specifies the port number for the modem that the Ascend NAS is using.
121 Specifies the slot number for the modem that the Ascend NAS is using.
122 Specifies the shelf number for the modem that the Ascend NAS is using.
125 Specifies the maximum time (in minutes) before the Ascend NAS terminates a connection.
126 Specifies the route preference for the Ascend NAS.
131 Specifies whether dial-out access is allowed.
132 Specifies the gateway used by the Ascend NAS.
135 Specifies the primary DNS name used by the Ascend NAS.
136 Specifies the secondary DNS name used by the Ascend NAS.
139 Specifies the IP address of the server on which the user has an account.
141 Specifies the shared secret of the server on which the user has an account.
152 Specifies that the user is a multicast client of the Ascend NAS.
153 Specifies the time (in seconds) that the Ascend NAS waits before accepting another packet from a multicast client.
154 Specifies the subnet mask that is being used for the local numbered interface.
155 Specifies the IP address of the numbered interface at the remote end of a link.
156 Specifies the permanent virtual circuit (PVC) for which the user profile is an endpoint.
157 Specifies whether the Frame Relay link becomes available automatically in a Frame Relay profile.
158 Specifies the association of a group of permanent virtual circuits (PVCs) within the Frame Relay profile.
159 Specifies the type of connection that is used by the Frame Relay profile.
160 Specifies the link management protocol that is used between the Ascend NAS and the Frame Relay switch in a Frame Relay profile.
161 Specifies the interval (in seconds) between Ascend NAS requests for full status reports in a Frame Relay profile.
162 Specifies the number of errors that occurred during Ascend-FR-DCE-N393-monitored events, causing the network to render user-originating procedures inactive.
163 Specifies the number of errors that occurred during Ascend-FR-DTE-N393-monitored events, causing the user to render the network-originating procedures inactive.
164 Specifies the DCE-monitored event count. A link is considered active if the value of the Ascend-FR-DCE-N393 attribute is not reached.
165 Specifies the DTE-monitored event count. A link is considered active if the value of the Ascend-FR-DTE-N393 attribute is not reached.
166 Specifies the Link Integrity Verification polling timer (in seconds).
167 Specifies the time that the unit waits between Status Inquiry messages.
169 Specifies the length of time (in seconds) that a terminal server connection must be idle before the Ascend NAS disconnects the session.
170 Specifies whether the Ascend NAS uses a terminal server idle timer and, if it does, whether both the user and the host must be idle before the Ascend NAS disconnects the session.
171 Specifies the method that the Ascend NAS uses to monitor traffic on a Multilink Protocol Plus (MP+) call.
172 Specifies the initial number of channels created by an Ascend NAS when originating certain calls.
173 Specifies the minimum number of channels that are used in a Multilink Protocol Plus (MP+) call.
174 Specifies the configuration of a static IPX route (Ascend only).
175 Specifies whether the NAS initiates FT1-AIM or FT1-B&O calls or waits for a remote end to initiate such calls.
176 Specifies the profile name of a backup profile for a permanent link.
177 Specifies the type of permanent connection used.
178 Specifies the permanent virtual circuits (PVCs) that are used by the WAN link.
179 Specifies the Data Link Connection Identifier (DLCI) that identifies the connection profile to the Frame Relay switch.
180 Specifies the name of the Frame Relay profile for this connection.
181 Specifies the password of the incoming caller on an AppleTalk remote access connection.
182 Specifies the unique IPX node address.
183 Specifies the IP address of the home agent in an ATMP operation.
184 Specifies the password sent by the remote agent the to home agent in an ATMP operation.
185 Specifies the connection profile, through which the home agent sends packets that are received by a mobile node in ATMP operation.
186 Specifies the UDP port remote agent that sends messages to the home agent.
187 Specifies the ID of a Multilink bundle (multichannel Multilink Protocol or Multilink Protocol Plus call).
188 Specifies the number of sessions that remain in a Multilink bundle (multichannel Multilink Protocol or Multilink Protocol Plus call). This information is reported in an Accounting-Stop packet.
189 Specifies the destination IP address of the first packed received through an authenticated connection.
190 Specifies the number of input octets that are received before authentication.
191 Specifies the number of output octets that are sent before authentication.
192 Specifies the number of input packets that are received before authentication.
193 Specifies the number of output packets that are sent before authentication.
194 Specifies the length of time (in seconds) before the session is terminated by the Ascend NAS.
195 Specifies the reason that a connection was terminated.
196 Specifies the state of the connection before it is terminated.
197 Specifies the data rate of the connection (in bits per second).
198 Specifies the length of time (in seconds) between the time that a call connects and the time that authentication is complete.
199 Specifies the length of time (in minutes) for which a cached token can remain alive between authentications if a call is idle (Ascend NAS only).
200 Specifies the method that RADIUS uses to handle passwords that received from users who are required to use a hand-held security card server.
201 Specifies whether additional authentication is required for Called Line Identification (CLID)-authenticated calls (Ascend NAS only).
202 Specifies the number of active sessions of the type of class specified in the Class attribute.
203 Specifies the Ascend NAS login name for PPP authentication.
204 Specifies the lifetime of cached token or hand-held security card authentication (Ascend NAS only).
205 Specifies the prompt for user input in the terminal server menu (Ascend NAS only).
206 Specifies a single menu item for an Ascend NAS user profile.
208 Specifies the number of days for which user's password is valid (Ascend NAS only).
209 Specifies the IP address to which Ascend NAS redirects packets from the user.
210 Specifies that the Ascend PPP implementation must not use slot compression when sending packets that are compressed through Van Jacobsen compression.
211 Specifies that the Ascend PPP implementation must use the value of 0x0037 value for the Van Jacobsen compression type.
212 Specifies the async control character map that the Ascend PPP implementation must use during the PPP session (Ascend NAS only).
213 Specifies an additional prompt (other than the login and password prompts) for user input (Ascend NAS only).
214 Specifies that the password is encrypted when passed between the RADIUS server and the Ascend NAS. This attribute is used in place of Ascend-Send-Passwd.
215 Specifies the value received from the dial-in user that is used to verify the encrypted password.
216 Specifies the mode of the IPX router.
217 Specifies an IP address pool for dynamic assignment.
218 Specifies the index number of the IP address pool that the user must use for dynamic address assignment.
219 Specifies whether the connection profile uses Frame Relay redirect mode (Ascend NAS only).
220 Specifies the name of the Frame Relay profile.
221 Specifies the presence of a Data Link Connection Identifier (DLCI) for the user profile in a Frame Relay redirect connection.
222 Specifies the method that the Ascend NAS uses to handle IPX Watchdog protocol requests during IPX bridging.
223 Specifies the length of time (in minutes) for which an Ascend NAS responds to IPX Watchdog protocol requests.
224 Specifies the IPX address that is used by the NAS when connecting to IPX routers that require numbered interfaces.
225 Specifies the virtual hop count of the route.
226 Specifies the type of phone number that the MAX dials.
227 Specifies the phone number that the Ascend NAS dials to reach the bridge, router, or node at the remote end of the link.
228 Specifies that IP routing is enabled.
229 Specifies that IPX routing is enabled.
230 Specifies that protocol-independent bridging is used for the current connection.
231 Specifies the protocol used for name-password authentication (following Called Link Identification [CLID] authentication).
232 Specifies the password sent by NPS to the remote end of a connection on outgoing calls.
234 Specifies the percentage of bandwidth used, after which the Ascend NAS adds or subtracts bandwidth.
235 Specifies the maximum number of channels allowed on a Multilink Protocol Plus (MP+) call.
236 Specifies the number of channels that the Ascend NAS adds when bandwidth changes either manually or automatically during a call.
238 Specifies the length of time (in seconds) that the Ascend NAS uses as a sample for calculating the average line utilization (ALU) for transmitted data.
239 Specifies the Dynamic Bandwidth Allocation (DBA) algorithm used for calculating the average line utilization (ALU) for transmitted data.
240 Specifies the threshold, in seconds, that the average line utilization (ALU) for transmitted data must exceed before the Ascend NAS adds bandwidth. This threshold is specified by the Ascend-Target-Util attribute.
241 Specifies the threshold, in seconds, that the average line utilization (ALU) for transmitted data must fall below before the Ascend NAS removes bandwidth from a session. This threshold is specified by the Ascend-Target-Util attribute.
242 Specifies the data filter for the Ascend NAS.
243 Specifies the call filter for the Ascend NAS.
244 Specifies the length of time, in seconds, that the Ascend NAS waits before clearing a call when a session is inactive.
245 Specifies the number of idle seconds that the Ascend NAS waits before using one of the channels of an idle link for a new call.
246 Specifies that callback is either enabled or disabled on the Ascend NAS.
247 Specifies the data service used by the Ascend NAS.
248 Specifies that the Ascend NAS use only the 56-Kbps portion of a channel (even when the full 64 Kbps channel is available for use).
249 Specifies the billing number for charges incurred on the line.
250 Specifies the T1 PRI service that is used by NAS.
251 Specifies the U.S Interexchange Carrier (IEC) that you use for long distance calls over a T1 PRI line.
252 Specifies a list of hosts to which a user can establish a Telnet session.
253 Specifies the IP address reporting to the calling unit during IPCP negotiations.
254 Specifies the percentage of bandwidth utilization, below which the Ascend NAS clears a single-channel Multilink Protocol Plus (MP+) call.
4096 Specifies the framed address configured for the user (for NPS internal use only).
4097 Specifies the phone number used for callback (for NPS internal use only).
4098 Specifies the phone number from which the call originated.
4099 Specifies the phone number from which the call originated (for NPS internal use only).
4100 Specifies the routing information configured on the NAS for the user (for NPS internal use only).
4101 Specifies that the user's dial-in properties are ignored.
4102 Specifies the time periods and days of week during which user is allowed to connect.
4103 Specifies the phone number dialed by the user.
4104 Specifies the port types permitted for a connection.
4105 Specifies the authentication types permitted for a connection.
4106 Specifies the EAP encryption modes that are permitted for a connection.
4107 Specifies the shared secret that is used by the NAS.
4108 Specifies the IP address of the RADIUS client (NPS only).
4116 Specifies the manufacturer of the RADIUS proxy or NAS (NPS only).
4117 Specifies the port that NPS uses to communicate with the client.
4127 Specifies the authentication scheme that is used to verify the user.
4128 Specifies the friendly name for the RADIUS client (NPS only).
4131 Specifies the Windows groups that the user belongs to.
4132 Specifies the EAP friendly name.
4149 Specifies the friendly name of the network access policy.
4158 Specifies whether NPS automatically generates the class attribute. NPS automatically generates the class attribute by default.
4161 Specifies the certificate purpose or usage object identifiers (OIDs), in dotted decimal notation, that are allowed for when performing certificate-based authentication with EAP-TLS.
4162 Specifies that the Session-Timeout Attribute is automatically generated.
4163 Specifies whether NPS automatically generates the session timeout based on user account expiration and time-of-day restrictions. NPS does not automatically generate the session timeout by default.
4165 Specifies the IP traffic filter that is used by the Routing and Remote Access service when the connection is in a restricted state.
4166 Specifies the time (in seconds) that the connection can remain in a restricted state before being disconnected.
4168 Specifies that Windows authorization is enabled for users authenticated by the remote RADIUS server (for example, use with Passport user mapping).
4169 Specifies the UPN suffix of the Passport to Windows user mapping.
5000 Specifies the Cisco AV Pair VSA.
6000 Specifies the Quality of Service values that the switch uses for the packets sent by the user.
6001 Specifies the IEEE 802.1p priority value.
44464 Sdoias
53464 SdoMachine Class
55464 SdoService Class
59464 Manages authentication, authorization, auditing, and accounting for VPN, dial-up, 802.1x wireless or Ethernet switch connection attempts that are compatible with the IETF RADIUS protocol.
60464 Internet Authentication Service
61464 Description not yet defined
65446 Specifies the encryption type for the user connection.
