Sending multiple RADIUS attribute values in a single RADIUS Access-Request
A managed FortiSwitch can be configured to send multiple RADIUS attribute values in a single RADIUS Access-Request. This option is configured per RADIUS user, and is set to none by default.
The available service type options are:
| login | User should be connected to a host. |
| framed | User use Framed Protocol. |
| callback-login | User disconnected and called back. |
| callback-framed | User disconnected and called back, then a Framed Protocol. |
| outbound | User granted access to outgoing devices. |
| administrative | User granted access to the administrative unsigned interface. |
| nas-prompt | User provided a command prompt on the NAS. |
| authenticate-only | Authentication requested, and no authentication information needs to be returned. |
| callback-nas-prompt | User disconnected and called back, then provided a command prompt. |
| call-check | Used by the NAS in an Access-Request packet, Access-Accept to answer the call. |
| callback-administrative | User disconnected and called back, granted access to the admin unsigned interface. |
To configure a managed FortiSwitch to the RADIUS attributes login, framed, and authenticate-only all at the same time:
config user radius
edit "Radius_Server"
set switch-controller-service-type login framed authenticate-only
....
next
end