Appendix A:Supported RADIUS attributes 699Nortel WLAN—Security Switch 2300 Series Configuration GuideReply-Message18 Yes No No String. Text that can be displayed to theuser. Multiple Reply-Messages can beincluded. If any are displayed, they mustappear in the order in which they appearin the packet.State 24 Yes Yes No Can be sent by a RADIUS server in anAccess-Challenge message to the WSS.If the WSS receives an Access-Challengewith this attribute, it returns the sameState value in an Access-Requestresponse to the RADIUS server, when aresponse is required. (For details, seeRFC 2865.)Class 25 Yes No Yes If received, this information must be senton, without interpretation, in allsubsequent packets sent to the RADIUSserver for that client session.Vendor-Specific26 Yes No Yes String. Allows WSS Software to supportNortel VSAs. (See Table 2 on page 702.)Session-Timeout 27 Yes No Optional Maximum number of seconds of serviceallowed the user before reauthenticationof the session.Note: If the global reauthenticationtimeout (set by the set dot1xreauth-period command) is shorter thanthe session-timeout, WSS Software usesthe global timeout instead.Called-Station-Id30 No Yes Yes For IEEE 802.1X authenticators, storesthe AP MAC address in uppercase ASCIIformat, with octet values separated byhyphens (for example,00-10-A4-23-19-C0).Calling-Station-Id 31 No Yes Yes For IEEE 802.1X authenticators, storesthe supplicant MAC address in uppercaseASCII format, with octet valuesseparated by hyphens (for example,00-10-A4-23-19-C0).NAS-Identifier 32 No Yes No Name of the RADIUS client originatingan Access-Request. The value in thecurrent release is nortel and cannot bechanged.Table 1: 802.1X attributes (continued)Attribute TypeRcv inAccessResp?Sent inAccessReqst?Sent inAcctReqst?Description and Values
