RADIUS attribute value pairs
RADIUS packets include a set of attribute value pairs (AVP) to identify information about the user, their location and other information. The FortiGate unit sends the following RADIUS attributes.
FortiOS supported RADIUS attributes
RADIUS Attribute
Name Description AVP
type
1 Acct-Session-ID Unique number assigned to each start and stop record to make 44 it easy to match them, and to eliminate duplicate records.
| RADIUS Attribute |
Name |
Description |
AVP
type |
|
2 |
Username |
Name of the user being authenticated |
1 |
|
3 |
NAS-Identifier |
Identifier or IP address of the Network Access Server (NAS) that is requesting authentication. In this case, the NAS is the FortiGate unit. |
32 |
|
4 |
Framed-IP-Address |
Address to be configured for the user. |
8 |
|
5 |
Fortinet-VSA |
See Vendor-specific attributes on page 453 |
26 |
|
Number of octets received from the port over the course of this |
|||
| 6 | Acct-Input-Octets | service being provided. | 42 |
| Used to charge the user for the amount of traffic they used. | |||
|
7 |
Acct-Output-Octets |
Number of octets sent to the port while delivering this service. |
43 |
|
Used to charge the user for the amount of traffic they used. |
The following table describes the supported authentication events and the RADIUS attributes that are sent in the
RADIUS accounting message.
Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!