The NETGEAR M4300 and M4250 fully managed switches support the RADIUS attributes shown in the following table.
We recommend using a large screen to view the table.
| Type | RADIUS Attribute Name | Internal Name | Description |
| 1 | USER-NAME | RADIUS_ATTR_TYPE_USER_NAME | Indicates the name of the user to be authenticated by the RADIUS server. |
| 2 | USER-PASSWORD | RADIUS_ATTR_TYPE_USER_PASSWORD | Indicates the password of the user to be authenticated or the user's input following an Access-Challenge. |
| 4 | NAS-IP-ADDRESS | RADIUS_ATTR_TYPE_NAS_IP_ADDRESS | Indicates the IP Address of the NAS (network authentication server) which is authenticating the user. The NAS must be unique within the scope of the RADIUS server. |
| 5 | NAS-PORT | RADIUS_ATTR_TYPE_NAS_PORT | Indicates the physical port number of the NAS which is authenticating the user. It is only used in Access-Request packets. NAS-Port, NAS-Port-Type (61), or both should be present in an Access-Request packet if the NAS differentiates among its ports. |
| 6 | SERVICE-TYPE | RADIUS_ATTR_TYPE_SERVICE_TYPE | Indicates the type of service the user has requested or the type of service to
be provided. List of service types supported:
|
| 8 | FRAMED-IP-ADDRESS | RADIUS_ATTR_TYPE_FRAMED_IP_ADDRESS | Indicates the address to be configured for the user in RADIUS Access-Accept packets. The Address field is four octets. The value 0xFFFFFFFF indicates that the NAS should allow the user to select an address (for example, negotiated). The value 0xFFFFFFFE indicates that the NAS should select an address for the user (for example, assigned from a pool of addresses kept by the NAS). Other valid values indicate that the NAS should use the value as the user's IP address. |
| 11 | FILTER-ID | RADIUS_ATTR_TYPE_FILTER_ID | Indicates the name of the filter list for the user. A RADIUS Access-Accept packet can contain either zero or more Filter-Id attributes. Identifying a filter list by name allows the filter to be used on different NASes without regard to filter-list implementation details. |
| 12 | FRAMED-MTU | RADIUS_ATTR_TYPE_FRAMED_MTU | Indicates the Maximum Transmission Unit (MTU) to be configured for the user when it is not negotiated by some other means (such as PPP) in the RADIUS Access-Accept packet. In a RADIUS Access-Request packet, it can be used as a hint by the NAS to the server that it would prefer that value, but the server is not required to honor the hint. MTU values range from 64 to 65535. |
| 15 | LOGIN-SERVICE | RADIUS_ATTR_TYPE_LOGIN_SERVICE | Indicates the service to use to connect the user to the login host in Access-Accept packets. |
| 18 | REPLY-MESSAGE | RADIUS_ATTR_TYPE_REPLY_MESSAGE | Indicates text which might be displayed to the user.
|
| 24 | STATE | RADIUS_ATTR_TYPE_STATE | This attribute is sent by the server to the client in a RADIUS packet and must be sent back unmodified from client to server. The state sent in an Access-Challenge or an Access-Accept with Termination Action should be unmodified in the new Access-Request reply to that challenge. |
| 25 | CLASS | RADIUS_ATTR_TYPE_CLASS | This attribute is sent by the server to the client in a RADIUS packet and must be sent back unmodified from client to server. The class sent in a RADIUS Access-Accept packet should be sent unmodified in the Access-Request packet sent by client. |
| 26 | VENDOR-SPECIFIC | RADIUS_ATTR_TYPE_VENDOR | Allow vendors to support their own extended Attributes not suitable for general usage which should not affect the operation of the RADIUS protocol. Clients should operate in degraded mode if the desired vendor specific information is not received. |
| 27 | SESSION-TIMEOUT | RADIUS_ATTR_TYPE_SESSION_TIMEOUT | This attribute is sent by the server to the client to determine the maximum number of seconds the service can be provided to the user. |
| 29 | TERMINATION-ACTION | RADIUS_ATTR_TYPE_TERMINATION_ACTION | Indicates the action to be taken by the NAS after a session is terminated. |
| 30 | CALLED-STATION-ID | RADIUS_ATTR_TYPE_CALLED_STATION_ID | This attribute is included in RADIUS messages sent when authenticating and accounting DOT1X clients. The burnt in MAC address of the port on which the supplicant is connected is used to populate this attribute. |
| 31 | CALLING-STATION-ID | RADIUS_ATTR_TYPE_CALLING_STATION_ID | Allows the NAS to send the phone number from where the call came from in the Access-Request packets using Automatic Number Identification (ANI) or similar technology. |
| 32 | NAS-IDENTIFIER | RADIUS_ATTR_TYPE_NAS_IDENTIFIER | This attribute is included in RADIUS messages sent when authenticating and accounting DOT1X clients. Whether it should be included or not in Access and Accounting messages is configurable. The format of the value is also configurable. |
| 40 | ACCT-STATUS-TYPE | RADIUS_ATTR_TYPE_ACCT_STATUS_TYPE | Indicates whether this Accounting-Request marks the beginning of the user service (Start) or the end (Stop). Used by the client to mark the start of accounting (for example, upon booting) by specifying Accounting-On and to mark the end of accounting (for example, just before a scheduled reboot) by specifying Accounting-Off. |
| 41 | ACCT_DELAY_TIME | RADIUS_ATTR_TYPE_ACCT_DELAY_TIME | Indicates how many seconds the RADIUS client has been trying to send the accounting request to the accounting server. The first accounting request sent by the client contains a value 0. If the request times out and the client retransmits the accounting request, the delay time indicates the accumulated time elapsed since the first request was sent out. The request header identifier is updated whenever the attribute 41 value is changed as defined in RFC 2866 section-5.2. |
| 42 | ACCT-INPUT-OCTETS | RADIUS_ATTR_TYPE_ACCT_INPUT_OCTETS | Indicates how many octets have been received from the port over the course of the service being provided. This attribute can be present only in Accounting-Request records where the Acct-Status-Type is set to Stop. |
| 43 | ACCT-OUTPUT-OCTETS | RADIUS_ATTR_TYPE_ACCT_OUTPUT_OCTETS | Indicates how many octets have been sent to the port in the course of delivering the service. This attribute can be present only in Accounting-Request records where the Acct-Status-Type is set to Stop. |
| 44 | ACCT-SESSION-ID | RADIUS_ATTR_TYPE_ACCT_SESSION_ID | This attribute is included in RADIUS Access request messages for a DOT1X supplicant. Its inclusion in Access requests is configurable. The Accounting session id used in subsequent Accounting requests should be the same one used in the Access requests for the supplicant. |
| 46 | ACCT-SESSION-TIME | RADIUS_ATTR_TYPE_ACCT_SESSION_TIME | Indicates how many seconds the user has received service for. This attribute can be present only in Accounting-Request records where the Acct-Status-Type is set to Stop. |
| 49 | ACCT-TERMINATE-CAUSE | RADIUS_ATTR_TYPE_ACCT_TERMINATE_CAUSE | Indicates how the session was terminated. This attribute can be present only in Accounting-Request records where the Acct-Status-Type is set to Stop. |
| 52 | ACCT-INPUT-GIGAWORDS | RADIUS_ATTR_TYPE_ACCT_G_IBYTES | This attribute indicates how many times the Acct-Input-Octets counter has wrapped around 2^32 over the course of the service being provided. This attribute can be present only in Accounting-Request records where the Acct-Status-Type is set to Stop or Interim-Update. |
| 53 | ACCT-OUTPUT-GIGAWORDS | RADIUS_ATTR_TYPE_ACCT_G_OBYTES | This attribute indicates how many times the Acct-Output-Octets counter has wrapped around 2^32 in the course of delivering this service. This attribute can be present only in Accounting-Request records where the Acct-Status-Type is set to Stop or Interim-Update. |
| 55 | EVENT-TIMESTAMP | RADIUS_ATTR_TYPE_EVENT_TIMESTAMP | This attribute is included in an Accounting-Request packet to record the time that this event occurred on the NAS in seconds since January 1, 1970 00:00 UTC. |
| 61 | NAS-PORT-TYPE | RADIUS_ATTR_TYPE_NAS_PORT_TYPE | Indicates the type of the physical port of the NAS which is authenticating the user. Only type 15 (Ethernet) is supported. |
| 64 | TUNNEL-TYPE | RADIUS_ATTR_TYPE_TUNNEL_TYPE | Indicates the tunneling protocol(s) to be used (in the case of a tunnel initiator) or the tunneling protocol in use (in the case of a tunnel terminator). Only Tunnel Type VLAN is supported. |
| 65 | TUNNEL-MEDIUM-TYPE | RADIUS_ATTR_TYPE_TUNNEL_MEDIUM_TYPE | Indicates which transport medium to use when creating a tunnel for protocols (such as L2TP) that can operate over multiple transports. It can be included in both Access-Accept and Access-Request packets. When it is included in an Access-Request packet, it should be treated as a hint to the RADIUS server as to the tunnel media supported by the tunnel end-point. Supported Medium type: 6 - 802 (includes all 802 media plus Ethernet "canonical format") |
| 79 | EAP-MESSAGE | RADIUS_ATTR_TYPE_EAP_MESSAGE | Encapsulates EAP packets to allow the NAS to authenticate dial-in users via EAP without having to understand the EAP protocol. |
| 80 | MESSAGE-AUTHENTICATOR | RADIUS_ATTR_TYPE_MESSAGE_AUTHENTICATOR | This attribute prevents spoofing RADIUS packets using CHAP, ARAP, or EAP authentication methods. It is supported in Access-Request, Access-Accept, Access-Reject, or Access-Challenge that includes an EAP-Message attribute. |
| 81 | TUNNEL-PRIVATE-GROUP-ID | RADIUS_ATTR_TYPE_TUNNEL_PRIVATE_GROUP_ID | Indicates the group ID for a particular tunneled session. The Tunnel-Private-Group-ID Attribute is included in the Access-Request packet if the tunnel initiator can pre-determine the group resulting from a particular connection and should be included in the Access-Accept packet if this tunnel session is to be treated as belonging to a particular private group. Private groups can be used to associate a tunneled session with a particular group of users. For example, private groups can be used to facilitate routing of unregistered IP addresses through a particular interface. It should be included in Accounting-Request packets which contain Acct-Status-Type attributes with values of either Start or Stop and which pertain to a tunneled session. |
Last Updated:07/07/2025
|
Article ID: 000064865