Basic Configuration Tasks
Adding and Modifying Users
Chapter 344
User Name: Value to compare to the User-Name attribute value in
the request. It must be less than 64 characters. &, “, ~,
\, /,%, $, ‘, and space characters may not be used.
The remaining fields and tabs in Define Users screen allow you to specify
three types of user profile attributes: configuration items, check items,
and reply items.
Configuration Items:
These items indicate various AAA server-specific
attributes that the server can use to perform
authentication or authorization functions. A user
profile must include either the Password attribute or
the Authentication-Type and Server-Name attributes
(Server-Name is only required for some authentication
types and should be listed as a check item under the
Free tab.) Additional items are optional.
Check Items: An optional list of zero or more attribute-value pairs,
delimited by white space. These items indicate various
attribute values that the server will compare to the
corresponding attribute values in the Access-Request.
Reply Items: Reply items generally get returned to configure the
client for the user’s session. They include information
like PPP configuration values, the name of the host
that the user wishes to connect to, or an optional
packet filter name.
Each of the fields on the first four tabs (General, NAS/Login, Framed,
and Others) corresponds to an attribute that can be used in a user profile
as a check or reply item. When specifying attribute values through these
tabs, all A-V pairs that may ordinarily be used as either a check or a
reply item in a server configuration are automatically added as a reply
item, unless the Free tab is used.
There are many more attributes, including vendor-specific attributes,
that can be added to a user profile. The Free tab allows you to enter any
of these attributes in the Check and Reply list boxes.
