Use this window to add a new attribute group or edit an existing attribute group. You can access the Create New/Edit RADIUS Attribute Settings window from the RADIUS Attribute Settings window.
- Attribute Group Name
- The name of the attribute group. Once you create an attribute group, you cannot edit the name of a group.
- Attribute Definition
- The attributes used in the RADIUS request or response to which the attribute group is assigned.
- Attributes can use the following variables in the format %VARIABLE_NAME%:
-
- ES_IP — The IP address of the end-system, if known.
- ES_MAC — The MAC address of the end-system. To change the format of the MAC address, enter
:<format>to the variable. - ES_OUI_VENDOR — Uses the MAC OUI of the end-system's MAC address to look up the vendor of that MAC OUI, if it is in the list of registered vendor OUIs.
- NAS_IP — The IP address of the device on which the end-system is currently authenticating.
- NAS_MAC — The IP address of the device on which the end-system is currently authenticating.
- RADIUS Attributes — Any RADIUS attribute (e.g. Seimens-SSID or Seimens-BSS-MAC). If you use a RADIUS attribute in an Attribute Definition, you can refer to that attribute in another attribute.
For example, for an end-system with a MAC address of "00-12-34-ab-cd-ef," entering%ES_MAC:XX-XX-XX-XX-XX-XX%displays the MAC address as "00-12-34-AB-CD-EF", while entering%ES_MAC:xxxxxx.xxxxxx%displays the MAC address as "001234.abcdef".NOTE: The example shown in the bottom two lines in the Attribute Definition section of the picture above resets the Calling-Station-Id to use the end-system MAC followed by the SSID.
For information on related windows:
