Dell N3200-ON Networking N-Series Switches User Guide version 6.8.0 - Page 259

NOTE: To set the user privilege level at login, it is required that the Service-Type attribute be used for RADIUS instead of the vendor proprietary (vendor ID 9, subtype 1) AV pair priv-lvl attribute. The Cisco AV priv-lvl is supported only for TACACS authorization. Which RADIUS Attributes Does the Switch Support? Table 9-6 lists the RADIUS attributes that the switch supports and indicates whether the 802.1X feature, User Manager feature, or Captive Portal feature supports the attribute. The RADIUS administrator must configure these attributes on the RADIUS server(s) when utilizing the switch RADIUS service and may also need to enable processing of the specific attribute on the switch. Only one of the NAS-IP-Address or the NAS-Identifier may be sent in an Access-Request message. The switch relies on IP Device Tracking (IPDT) to populate the RADIUS Framed-IP-Address attribute and to modify the IP source address in received Dynamic ACLs. Enable DHCP Snooping and IPDT to support transmission of the Framed-IP-Address in RADIUS AccessRequest packets and the update of Dynamic ACLs. Table 9-6. Supported RADIUS Attributes Type RADIUS Attribute Name 1 User-Name 2 User-Password 3 CHAP-Password 4 NAS-IP-Address 5 NAS-Port 6 Service-Type 8 Framed-IP-Address 11 Filter-ID 12 Framed-MTU 15 Login-Service 18 Reply-Message 24 State 802.1X Yes Yes Yes Yes Yes Yes Auth. only Yes Yes No Auth. only Yes User Manager Captive Portal Yes No Yes No No No Yes No No No Yes No Yes No No No No No Yes No Yes No Yes No Authentication, Authorization, and Accounting 259