Cisco 2100 Series Configuration Manual page 204

Configuring RADIUS
Table 5-3
Attribute ID
6
8
25
26
27
29
40
64
79
81
1. To specify read-only or read-write access to controllers through RADIUS authentication, you must set the
Service-Type attribute (6) on the RADIUS server to Callback NAS Prompt for read-only access or to
Administrative for read-write privileges. See
more information.
Note
Table 5-4
Attribute ID
11
16
17
25
26
Cisco Wireless LAN Controller Configuration Guide
5-16
Authentication Attributes Honored in Access-Accept Packets (Standard)
Description
Service-Type
Framed-IP-Address
Class
Vendor-Specific
Timeout
Termination-Action
Acct-Status-Type
Tunnel-Type
EAP-Message
Tunnel-Group-ID
Message authenticator is not supported.
Authentication Attributes Honored in Access-Accept Packets (Microsoft)
Description
MS-CHAP-Challenge
MS-MPPE-Send-Key
MS-MPPE-Receive-Key
MS-MSCHAP2-Response
MS-MSCHAP2-Success
1
Step 19 in the "Configuring RADIUS on the ACS"
Chapter 5 Configuring Security Solutions
section for
OL-17037-01