Extreme VSA

[bw447]

Is there a list of all Extreme VSA's that I can pass back to our switches from our NPS server. Currently we just pass back a vlan that machines should be dropped into. I would like to see if there is anything else we could do. (run ACL on the port, run UPM script,...) Thanks

[Gilmour__Scott]

Hi,
Is there a way to get the Extreme VSA's onto the Windows 2008 Server R2 so they are permanent in NPS? It appears the only way to enter the VSA's is per policy rather than the Attributes list. I am looking for a way to select them from the attributes list on a per policy need basis.
Thanks
Scott

[dflouret]

Sumit,

VSAs exist only in RADIUS. TACACS+ has AV (Attribute-Value) pairs, that would be the equivalent to VSAs in RADIUS.

Most VSAs in EXOS are related to Network Login, which requires RADIUS and does not support TACACS+.

So, NO, VSAs are only for RADIUS.

Regards, Daniel

[Sumit_Tokle]

Does TACACS+ VSA are the same as that of Radius server on Extreme device?

[dflouret]

The complete list is:
VENDOR Extreme 1916
ATTRIBUTE Extreme-CLI-Authorization 201 integer
ATTRIBUTE Extreme-Shell-Command 202 string
ATTRIBUTE Extreme-Netlogin-Vlan 203 string
ATTRIBUTE Extreme-Netlogin-Url 204 string
ATTRIBUTE Extreme-Netlogin-Url-Desc 205 string
ATTRIBUTE Extreme-Netlogin-Only 206 integer
ATTRIBUTE Extreme-User-Location 208 string
ATTRIBUTE Extreme-Netlogin-Vlan-Tag 209 integer
ATTRIBUTE Extreme-Netlogin-Extended-Vlan 211 string
ATTRIBUTE Extreme-Security-Profile 212 string
VALUE Extreme-CLI-Authorization Disabled 0
VALUE Extreme-CLI-Authorization Enabled 1
VALUE Extreme-Netlogin-Only Disabled 0
VALUE Extreme-Netlogin-Only Enabled 1

For a detailed explanation of each one of these, please refer to EXOS Concepts guide.

Regards, Daniel