radius-server attribute 6
To provide for the presence of the Service-Type attribute (attribute 6) in RADIUS Access-Accept messages, use the radius-server attribute 6 command in global configuration mode. To make the presence of the Service-Type attribute optional in Access-Accept messages, use the no form of this command.
radius-server attribute 6 {mandatory | on-for-login-auth | support-multiple | voice value}
no radius-server attribute 6 {mandatory | on-for-login-auth | support-multiple | voice value}
Syntax Description
mandatory |
Makes the presence of the Service-Type attribute mandatory in RADIUS Access-Accept messages. |
||
on-for-login-auth |
Sends the Service-Type attribute in the authentication packets.
|
||
support-multiple |
Supports multiple Service-Type values for each RADIUS profile. |
||
voice value |
Selects the Service-Type value for voice calls. The only value that can be entered is 1. The default is 12. |
Command Default
If this command is not configured, the absence of the Service-Type attribute is ignored, and the authentication or authorization does not fail. The default for the voice keyword is 12.
Command Modes
Global configuration
Command History
Release |
Modification |
---|---|
12.2(11)T |
This command was introduced. |
12.2(13)T |
The mandatory keyword was added. |
12.2SX |
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware. |
Usage Guidelines
If this command is configured and the Service-Type attribute is absent in the Access-Accept message packets, the authentication or authorization fails.
The support -multiple keyword allows for multiple instances of the Service-Type attribute to be present in an Access-Accept packet. The default behavior is to disallow multiple instances, which results in an Access-Accept packet containing multiple instances being treated as though an Access-Reject was received.
Examples
The following example shows that the presence of the Service-Type attribute is mandatory in RADIUS Access-Accept messages:
Router(config)# radius-server attribute 6 mandatory
The following example shows that attribute 6 is to be sent in authentication packets:
Router(config)# radius-server attribute 6 on-for-login-auth
The following example shows that multiple Service-Type values are to be supported for each RADIUS profile:
Router(config)# radius-server attribute 6 support-multiple
The following example shows that Service-Type values are to be sent in voice calls:
Router(config)# radius-server attribute 6 voice 1