To replace the NAS-Port attribute with RADIUS IETF Attribute 26 and to display extended field information, use the aaa nas-port extended global configuration command. Use the no form of this command to not display extended field information.
aaa nas-port extended
no aaa nas-port extended
This command has no arguments or keywords.
Disabled
Global configuration
| Release | Modification |
|---|---|
| 11.3 | This command was introduced. |
On platforms with multiple interfaces (ports) per slot, the Cisco RADIUS implementation will not provide a unique NAS-Port attribute that permits distinguishing between the interfaces. For example, if a dual PRI interface is in slot 1, calls on both Serial1/0:1 and Serial1/1:1 will appear as NAS-Port = 20101.
Once again, this is because of the 16-bit field size limitation associated with RADIUS IETF NAS-port attribute. In this case, the solution is to replace the NAS-Port attribute with a vendor-specific attribute (RADIUS IETF Attribute 26). Cisco\qs vendor ID is 9, and the cisco-nas-port attribute is subtype 2. Vendor-specific attributes (VSAs) can be turned on by entering the radius-server vsa send command. The port information in this attribute is provided and configured using theaaa nas port extended command.
The standard NAS-Port attribute (RADIUS IETF attribute 5) will continue to be sent. If you do not want this information to be sent, you can suppress it by using theno radius-server attribute nas-portcommand. When this command is configured, the standard NAS-Port attribute will no longer be sent.
The following example specifies that RADIUS will display extended interface information:
radius-server vsa send aaa nas-port extended
| Command | Description |
|---|---|
| radius-server extended-portnames | Displays expanded interface information in the NAS-Port attribute. |
| radius-server vsa send | Configures the network access server to recognize and use vendor-specific attributes. |
Printed for apswan@ctr.ap.nic.in on Wed Mar 5 22:32:57 PST 2003
All material in this document copyright 2000 Cisco Systems, Inc. All rights reserved. No material may be reproduced or distributed without written permission of Cisco Systems, Inc.