The Cisco-AVPair mechanism is a mutation of the standard VSA mechanism. Cisco uses a single Vendor ID but wanted to use many VSAs. The limit with a single Vendor ID is 255 (IIRC). So, Cisco's Vendor Specific Attribute number 1 is "Cisco-AVPair". They then create "sub-VSAs" within that VSA using the textual syntax Cisco-AVPair="Sub-VSA-name=Sub-VSA-value" To get a list of relevant VSAs, you really need to refer to Cisco's documentation. Rgds, Guy On 29/03/06, James J J Hooper <jjj.hooper@bristol.ac.uk> wrote:
--On Wednesday, March 29, 2006 12:20:57 +0200 Antonio Matera <antonio.matera@create-net.it> wrote:
Hallo, thanks for the replies. If I insert only the Cisco-AVPair attribute, it doesn't work...
Now I try the "radius-server vsa send authentication" command... It is a AP console command? It is possible to set this command from the AP web interface? I haven't experience with the console setting....
yes, either at the console or go to this url: <https://YOUR-ACCESS-POINT-ADDRESS/level/15/configure/-/radius-server/vsa/send/authentication/CR>
(you may need to use http instead of https)
Regards, James
-- James J J Hooper, Information Services University of Bristol -- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html