000022547 - Display Vendor Specific Attributes in a Radius Profile

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000022547
Applies ToRSA Authentication Manager 6.1
RSA Steel Belted Radius
IssueDisplay Vendor Specific Attributes in a Radius Profile
Unable to see Attibutes for a specific Vendor such as Cisco in the "Attributes Check list" area of a Radius Profile.
Resolution

In order to see the vendor attributes of a specific vendor dictionary you must first add a radius client which has the make/model option properly define for the device.  Example Cisco IOS 11.1 or later.

Now when adding your Profile and Adding Check List Attributes or Return List Attributes you will see the Cisco specific items listed.  Such as Cisco-AVPAIR.

The make/model selection corresponds to a specific .dct file in the \radius\service directory.

Notes

DICTIONARIES:

RSA RADIUS Server uses dictionary files to store lists of RADIUS attributes.

RSA RADIUS Server uses these dictionaries to parse authentication and

accounting requests and generate responses.

The main RSA RADIUS Server dictionary file (radius.dct) lists attributes

defined by the RADIUS standard. The radius.dct file resides in the same

directory as the RSA RADIUS Server service (usually C:\Program Files

\RSA Security\RSA RADIUS\Service on Windows computers and

/opt/rsa/radius on Solaris and Linux computers).


Vendor-Specific Attibutes:

In addition to the standard attributes, many RAS devices use vendor-specific

attributes (VSAs) to complete a connection. RSA RADIUS Server supports a

large number of specific RAS devices by providing vendor-specific, proprietary

dictionary files. These files also reside in the server directory and use the filename

extension .dct.

Legacy Article IDa31284

Attachments

    Outcomes