Sending multiple RADIUS attribute values in a single RADIUS Access-Request
A managed FortiSwitch can be configured to send multiple RADIUS attribute values in a single RADIUS Access-Request. This option is configured per RADIUS user, and is set to none by default.
The available service type options are:
|
login |
User should be connected to a host. |
|
framed |
User use Framed Protocol. |
|
callback-login |
User disconnected and called back. |
|
callback-framed |
User disconnected and called back, then a Framed Protocol. |
|
outbound |
User granted access to outgoing devices. |
|
administrative |
User granted access to the administrative unsigned interface. |
|
nas-prompt |
User provided a command prompt on the NAS. |
|
authenticate-only |
Authentication requested, and no authentication information needs to be returned. |
|
callback-nas-prompt |
User disconnected and called back, then provided a command prompt. |
|
call-check |
Used by the NAS in an Access-Request packet, Access-Accept to answer the call. |
|
callback-administrative |
User disconnected and called back, granted access to the admin unsigned interface. |
To configure a managed FortiSwitch to the RADIUS attributes login, framed, and authenticate-only all at the same time:
config user radius
edit "Radius_Server"
set switch-controller-service-type login framed authenticate-only
....
next
end