ATTRIBUTEID Enumeration

The ATTRIBUTEID enumeration type enumerates the RADIUS attributes supported by the SDO API.

typedef enum _ATTRIBUTEID
{
  ATTRIBUTE_UNDEFINED = 0,
  ATTRIBUTE_MIN_VALUE = 1,
  RADIUS_ATTRIBUTE_USER_NAME = ATTRIBUTE_MIN_VALUE,
  RADIUS_ATTRIBUTE_USER_PASSWORD,
  RADIUS_ATTRIBUTE_CHAP_PASSWORD,
  RADIUS_ATTRIBUTE_NAS_IP_ADDRESS,
  RADIUS_ATTRIBUTE_NAS_PORT,
  RADIUS_ATTRIBUTE_SERVICE_TYPE,
  RADIUS_ATTRIBUTE_FRAMED_PROTOCOL,
  RADIUS_ATTRIBUTE_FRAMED_IP_ADDRESS,
  RADIUS_ATTRIBUTE_FRAMED_IP_NETMASK,
  RADIUS_ATTRIBUTE_FRAMED_ROUTING = 10,
  RADIUS_ATTRIBUTE_FILTER_ID,
  RADIUS_ATTRIBUTE_FRAMED_MTU,
  RADIUS_ATTRIBUTE_FRAMED_COMPRESSION,
  RADIUS_ATTRIBUTE_LOGIN_IP_HOST,
  RADIUS_ATTRIBUTE_LOGIN_SERVICE,
  RADIUS_ATTRIBUTE_LOGIN_TCP_PORT,
  RADIUS_ATTRIBUTE_UNASSIGNED1,
  RADIUS_ATTRIBUTE_REPLY_MESSAGE,
  RADIUS_ATTRIBUTE_CALLBACK_NUMBER,
  RADIUS_ATTRIBUTE_CALLBACK_ID = 20,
  RADIUS_ATTRIBUTE_UNASSIGNED2,
  RADIUS_ATTRIBUTE_FRAMED_ROUTE,
  RADIUS_ATTRIBUTE_FRAMED_IPX_NETWORK,
  RADIUS_ATTRIBUTE_STATE,
  RADIUS_ATTRIBUTE_CLASS,
  RADIUS_ATTRIBUTE_VENDOR_SPECIFIC,
  RADIUS_ATTRIBUTE_SESSION_TIMEOUT,
  RADIUS_ATTRIBUTE_IDLE_TIMEOUT,
  RADIUS_ATTRIBUTE_TERMINATION_ACTION,
  RADIUS_ATTRIBUTE_CALLED_STATION_ID = 30,
  RADIUS_ATTRIBUTE_CALLING_STATION_ID,
  RADIUS_ATTRIBUTE_NAS_IDENTIFIER,
  RADIUS_ATTRIBUTE_PROXY_STATE,
  RADIUS_ATTRIBUTE_LOGIN_LAT_SERVICE,
  RADIUS_ATTRIBUTE_LOGIN_LAT_NODE,
  RADIUS_ATTRIBUTE_LOGIN_LAT_GROUP,
  RADIUS_ATTRIBUTE_FRAMED_APPLETALK_LINK,
  RADIUS_ATTRIBUTE_FRAMED_APPLETALK_NET,
  RADIUS_ATTRIBUTE_FRAMED_APPLETALK_ZONE,
  RADIUS_ATTRIBUTE_ACCT_STATUS_TYPE = 40,
  RADIUS_ATTRIBUTE_ACCT_DELAY_TIME,
  RADIUS_ATTRIBUTE_ACCT_INPUT_OCTETS,
  RADIUS_ATTRIBUTE_ACCT_OUTPUT_OCTETS,
  RADIUS_ATTRIBUTE_ACCT_SESSION_ID,
  RADIUS_ATTRIBUTE_ACCT_AUTHENTIC,
  RADIUS_ATTRIBUTE_ACCT_SESSION_TIME,
  RADIUS_ATTRIBUTE_ACCT_INPUT_PACKETS,
  RADIUS_ATTRIBUTE_ACCT_OUTPUT_PACKETS,
  RADIUS_ATTRIBUTE_ACCT_TERMINATE_CAUSE,
  RADIUS_ATTRIBUTE_ACCT_MULTI_SSN_ID = 50,
  RADIUS_ATTRIBUTE_ACCT_LINK_COUNT = 51,
  RADIUS_ATTRIBUTE_CHAP_CHALLENGE = 60,
  RADIUS_ATTRIBUTE_NAS_PORT_TYPE,
  RADIUS_ATTRIBUTE_PORT_LIMIT,
  RADIUS_ATTRIBUTE_LOGIN_LAT_PORT,
  RADIUS_ATTRIBUTE_TUNNEL_TYPE,
  RADIUS_ATTRIBUTE_TUNNEL_MEDIUM_TYPE,
  RADIUS_ATTRIBUTE_TUNNEL_CLIENT_ENDPT,
  RADIUS_ATTRIBUTE_TUNNEL_SERVER_ENDPT,
  RADIUS_ATTRIBUTE_ACCT_TUNNEL_CONN,
  RADIUS_ATTRIBUTE_TUNNEL_PASSWORD,
  RADIUS_ATTRIBUTE_ARAP_PASSWORD = 70,
  RADIUS_ATTRIBUTE_ARAP_FEATURES,
  RADIUS_ATTRIBUTE_ARAP_ZONE_ACCESS,
  RADIUS_ATTRIBUTE_ARAP_SECURITY,
  RADIUS_ATTRIBUTE_ARAP_SECURITY_DATA,
  RADIUS_ATTRIBUTE_PASSWORD_RETRY,
  RADIUS_ATTRIBUTE_PROMPT = 76,
  RADIUS_ATTRIBUTE_CONNECT_INFO,
  RADIUS_ATTRIBUTE_CONFIGURATION_TOKEN,
  RADIUS_ATTRIBUTE_EAP_MESSAGE,
  RADIUS_ATTRIBUTE_SIGNATURE = 80,
  RADIUS_ATTRIBUTE_TUNNEL_PVT_GROUP_ID,
  RADIUS_ATTRIBUTE_TUNNEL_ASSIGNMENT_ID,
  RADIUS_ATTRIBUTE_TUNNEL_PREFERENCE,
  RADIUS_ATTRIBUTE_ARAP_CHALLENGE_RESPONSE,
  RADIUS_ATTRIBUTE_ACCT_INTERIM_INTERVAL = 85,
  RADIUS_ATTRIBUTE_NAS_IPv6_ADDRESS = 95,
  RADIUS_ATTRIBUTE_FRAMED_INTERFACE_ID,
  RADIUS_ATTRIBUTE_FRAMED_IPv6_PREFIX,
  RADIUS_ATTRIBUTE_LOGIN_IPv6_HOST,
  RADIUS_ATTRIBUTE_FRAMED_IPv6_ROUTE,
  RADIUS_ATTRIBUTE_FRAMED_IPv6_POOL = 100,
  IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_IP_ADDRESS = 0x1000,
  IAS_ATTRIBUTE_SAVED_RADIUS_CALLBACK_NUMBER,
  IAS_ATTRIBUTE_NP_CALLING_STATION_ID,
  IAS_ATTRIBUTE_SAVED_NP_CALLING_STATION_ID,
  IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_ROUTE,
  IAS_ATTRIBUTE_IGNORE_USER_DIALIN_PROPERTIES,
  IAS_ATTRIBUTE_NP_TIME_OF_DAY,
  IAS_ATTRIBUTE_NP_CALLED_STATION_ID,
  IAS_ATTRIBUTE_NP_ALLOWED_PORT_TYPES = 0x1008,
  IAS_ATTRIBUTE_NP_AUTHENTICATION_TYPE,
  IAS_ATTRIBUTE_NP_ALLOWED_EAP_TYPE,
  IAS_ATTRIBUTE_SHARED_SECRET,
  IAS_ATTRIBUTE_CLIENT_IP_ADDRESS,
  IAS_ATTRIBUTE_CLIENT_PACKET_HEADER,
  IAS_ATTRIBUTE_TOKEN_GROUPS,
  IAS_ATTRIBUTE_ALLOW_DIALIN,
  IAS_ATTRIBUTE_NP_CONSTRAINT = 0x1010,
  IAS_ATTRIBUTE_REQUEST_ID = 0x1010,
  IAS_ATTRIBUTE_NP_VERSION = 0x1011,
  IAS_ATTRIBUTE_MANIPULATION_TARGET = 0x1011,
  IAS_ATTRIBUTE_NP_VENDORID = 0x1012,
  IAS_ATTRIBUTE_MANIPULATION_RULE = 0x1012,
  IAS_ATTRIBUTE_NP_SEQUENCE = 0x1013,
  IAS_ATTRIBUTE_ORIGINAL_USER_NAME = 0x1013,
  IAS_ATTRIBUTE_CLIENT_VENDOR_TYPE,
  IAS_ATTRIBUTE_CLIENT_UDP_PORT,
  MS_ATTRIBUTE_CHAP_CHALLENGE,
  MS_ATTRIBUTE_CHAP_RESPONSE,
  MS_ATTRIBUTE_CHAP_DOMAIN = 0x1018,
  MS_ATTRIBUTE_CHAP_ERROR,
  MS_ATTRIBUTE_CHAP_CPW1,
  MS_ATTRIBUTE_CHAP_CPW2,
  MS_ATTRIBUTE_CHAP_LM_ENC_PW,
  MS_ATTRIBUTE_CHAP_NT_ENC_PW,
  MS_ATTRIBUTE_CHAP_MPPE_KEYS,
  IAS_ATTRIBUTE_AUTHENTICATION_TYPE,
  IAS_ATTRIBUTE_CLIENT_NAME = 0x1020,
  IAS_ATTRIBUTE_NT4_ACCOUNT_NAME,
  IAS_ATTRIBUTE_FULLY_QUALIFIED_USER_NAME,
  IAS_ATTRIBUTE_NTGROUPS,
  IAS_ATTRIBUTE_EAP_FRIENDLY_NAME,
  MS_ATTRIBUTE_ARAP_CHALLENGE = 0x1025,
  IAS_ATTRIBUTE_AUTH_PROVIDER_TYPE = 0x1025,
  MS_ATTRIBUTE_ACCT_AUTH_TYPE,
  MS_ATTRIBUTE_ACCT_EAP_TYPE,
  IAS_ATTRIBUTE_PACKET_TYPE = 0x1028,
  MS_ATTRIBUTE_OLD_ARAP_PASSWORD = 0x1029,
  IAS_ATTRIBUTE_AUTH_PROVIDER_NAME = 0x1029,
  MS_ATTRIBUTE_NEW_ARAP_PASSWORD = 0x102A,
  IAS_ATTRIBUTE_ACCT_PROVIDER_TYPE = 0x102A,
  MS_ATTRIBUTE_ARAP_PASSWORD_CHANGE_REASON = 0x102B,
  IAS_ATTRIBUTE_ACCT_PROVIDER_NAME = 0x102B,
  MS_ATTRIBUTE_MPPE_SEND_KEY,
  MS_ATTRIBUTE_MPPE_RECV_KEY,
  IAS_ATTRIBUTE_REASON_CODE,
  MS_ATTRIBUTE_FILTER,
  MS_ATTRIBUTE_CHAP2_RESPONSE = 0x1030,
  MS_ATTRIBUTE_CHAP2_SUCCESS,
  MS_ATTRIBUTE_CHAP2_CPW,
  MS_ATTRIBUTE_RAS_VENDOR,
  MS_ATTRIBUTE_RAS_VERSION,
  IAS_ATTRIBUTE_NP_NAME,
  MS_ATTRIBUTE_PRIMARY_DNS_SERVER,
  MS_ATTRIBUTE_SECONDARY_DNS_SERVER,
  MS_ATTRIBUTE_PRIMARY_NBNS_SERVER = 0x1038,
  MS_ATTRIBUTE_SECONDARY_NBNS_SERVER,
  IAS_ATTRIBUTE_PROXY_POLICY_NAME,
  IAS_ATTRIBUTE_PROVIDER_TYPE,
  IAS_ATTRIBUTE_PROVIDER_NAME,
  IAS_ATTRIBUTE_REMOTE_SERVER_ADDRESS,
  IAS_ATTRIBUTE_GENERATE_CLASS_ATTRIBUTE,
  MS_ATTRIBUTE_RAS_CLIENT_NAME,
  MS_ATTRIBUTE_RAS_CLIENT_VERSION = 0x1040,
  IAS_ATTRIBUTE_ALLOWED_CERTIFICATE_EKU,
  IAS_ATTRIBUTE_EXTENSION_STATE,
  IAS_ATTRIBUTE_GENERATE_SESSION_TIMEOUT,
  MS_ATTRIBUTE_SESSION_TIMEOUT,
  MS_ATTRIBUTE_QUARANTINE_IPFILTER,
  MS_ATTRIBUTE_QUARANTINE_SESSION_TIMEOUT,
  MS_ATTRIBUTE_USER_SECURITY_IDENTITY,
  IAS_ATTRIBUTE_REMOTE_RADIUS_TO_WINDOWS_USER_MAPPING = 0x1048,
  IAS_ATTRIBUTE_PASSPORT_USER_MAPPING_UPN_SUFFIX,
  IAS_ATTRIBUTE_TUNNEL_TAG,
  IAS_ATTRIBUTE_NP_PEAPUPFRONT_ENABLED,
  IAS_ATTRIBUTE_ARAP_GUEST_LOGON = 8096,
  IAS_ATTRIBUTE_CERTIFICATE_EKU = 8097,
  IAS_ATTRIBUTE_EAP_CONFIG,
  MS_ATTRIBUTE_PEAP_EMBEDDED_EAP_TYPEID,
  MS_ATTRIBUTE_PEAP_FAST_ROAMED_SESSION = 8100,
  IAS_ATTRIBUTE_EAP_TYPEID,
  MS_ATTRIBUTE_EAP_TLV,
  IAS_ATTRIBUTE_REJECT_REASON_CODE,
  IAS_ATTRIBUTE_PROXY_EAP_CONFIG,
  IAS_ATTRIBUTE_EAP_SESSION,
  IAS_ATTRIBUTE_IS_REPLAY,
  IAS_ATTRIBUTE_CLEAR_TEXT_PASSWORD,
  MS_ATTRIBUTE_IDENTITY_TYPE,
  MS_ATTRIBUTE_SERVICE_CLASS,
  MS_ATTRIBUTE_QUARANTINE_USER_CLASS = 8110,
  MS_ATTRIBUTE_QUARANTINE_STATE,
  IAS_ATTRIBUTE_OVERRIDE_RAP_AUTH,
  IAS_ATTRIBUTE_PEAP_CHANNEL_UP,
  IAS_ATTRIBUTE_NAME_MAPPED,
  IAS_ATTRIBUTE_POLICY_ENFORCED,
  IAS_ATTRIBUTE_MACHINE_NTGROUPS,
  IAS_ATTRIBUTE_USER_NTGROUPS,
  IAS_ATTRIBUTE_MACHINE_TOKEN_GROUPS,
  IAS_ATTRIBUTE_USER_TOKEN_GROUPS,
  MS_ATTRIBUTE_QUARANTINE_GRACE_TIME = 8120,
  IAS_ATTRIBUTE_QUARANTINE_URL,
  IAS_ATTRIBUTE_QUARANTINE_FIXUP_SERVERS,
  MS_ATTRIBUTE_NOT_QUARANTINE_CAPABLE,
  IAS_ATTRIBUTE_QUARANTINE_SYSTEM_HEALTH_RESULT,
  IAS_ATTRIBUTE_QUARANTINE_SYSTEM_HEALTH_VALIDATORS,
  IAS_ATTRIBUTE_MACHINE_NAME,
  IAS_ATTRIBUTE_NT4_MACHINE_NAME,
  IAS_ATTRIBUTE_QUARANTINE_SESSION_HANDLE,
  IAS_ATTRIBUTE_FULLY_QUALIFIED_MACHINE_NAME,
  IAS_ATTRIBUTE_QUARANTINE_FIXUP_SERVERS_CONFIGURATION = 8130,
  IAS_ATTRIBUTE_CLIENT_QUARANTINE_COMPATIBLE,
  MS_ATTRIBUTE_NETWORK_ACCESS_SERVER_TYPE,
  IAS_ATTRIBUTE_QUARANTINE_SESSION_ID,
  MS_ATTRIBUTE_AFW_QUARANTINE_ZONE,
  MS_ATTRIBUTE_AFW_PROTECTION_LEVEL,
  IAS_ATTRIBUTE_QUARANTINE_UPDATE_NON_COMPLIANT,
  IAS_ATTRIBUTE_REQUEST_START_TIME,
  MS_ATTRIBUTE_MACHINE_NAME,
  IAS_ATTRIBUTE_CLIENT_IPv6_ADDRESS,
  IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_INTERFACE_ID = 8140,
  IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_IPV6_PREFIX,
  IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_IPV6_ROUTE,
  MS_ATTRIBUTE_QUARANTINE_GRACE_TIME_CONFIGURATION,
  MS_ATTRIBUTE_IPv6_FILTER = 8144,
  MS_ATTRIBUTE_IPV4_REMEDIATION_SERVERS,
  MS_ATTRIBUTE_IPV6_REMEDIATION_SERVERS,
  IAS_ATTRIBUTE_PROXY_RETRY_COUNT,
  IAS_ATTRIBUTE_MACHINE_INVENTORY,
  IAS_ATTRIBUTE_ABSOLUTE_TIME,
  MS_ATTRIBUTE_QUARANTINE_SOH = 8150,
  IAS_ATTRIBUTE_EAP_TYPES_CONFIGURED_IN_PROXYPOLICY,
  MS_ATTRIBUTE_HCAP_LOCATION_GROUP_NAME,
  MS_ATTRIBUTE_EXTENDED_QUARANTINE_STATE,
  IAS_ATTRIBUTE_SOH_CARRIER_EAPTLV,
  MS_ATTRIBUTE_HCAP_USER_GROUPS = 8155,
  IAS_ATTRIBUTE_SAVED_MACHINE_HEALTHCHECK_ONLY,
  IAS_ATTRIBUTE_POLICY_EVALUATED_SHV,
  IAS_ATTRIBUTE_RAS_CORRELATION_ID,
  MS_ATTRIBUTE_HCAP_USER_NAME,
  IAS_ATTRIBUTE_NT4_HCAP_ACCOUNT_NAME = 8160,
  IAS_ATTRIBUTE_USER_TOKEN_SID,
  IAS_ATTRIBUTE_MACHINE_TOKEN_SID,
  MS_ATTRIBUTE_USER_IPv4_ADDRESS = 8164,
  MS_ATTRIBUTE_USER_IPv6_ADDRESS,
  MS_ATTRIBUTE_TSG_DEVICE_REDIRECTION,
  RAS_ATTRIBUTE_EAP_PROTOCOL = (0xFFFFFFFF-90),
  RAS_ATTRIBUTE_ENCRYPTION_TYPE = (0xFFFFFFFF-89),
  RAS_ATTRIBUTE_ENCRYPTION_POLICY,
  RAS_ATTRIBUTE_BAP_REQUIRED,
  RAS_ATTRIBUTE_BAP_LINE_DOWN_TIME,
  RAS_ATTRIBUTE_BAP_LINE_DOWN_LIMIT,
  RAS_ATTRIBUTE_ALLOWED_PORT_TYPE
}ATTRIBUTEID;

Constants

  • ATTRIBUTE_UNDEFINED
    Specifies a value equal to zero, and used as the NULL terminator in an array of attributes.

  • ATTRIBUTE_MIN_VALUE
    Specifies the minimum value for values of this enumeration type.

  • RADIUS_ATTRIBUTE_USER_NAME
    Specifies the name of the user to be authenticated. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_USER_PASSWORD
    Specifies the password of the user to be authenticated. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_CHAP_PASSWORD
    Specifies the password provided by the user in response to an MD5 Challenge Handshake Authentication Protocol (CHAP) challenge. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_NAS_IP_ADDRESS
    Specifies the Network Access Server (NAS) IP address. An Access-Request should specify either an NAS IP address or an NAS identifier. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_NAS_PORT
    Specifies the physical or virtual private network (VPN) through which the user is connecting to the NAS. Note that this value is not a port number in the sense of TCP or UDP. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_SERVICE_TYPE
    Specifies the type of service the user has requested or the type of service to be provided. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_PROTOCOL
    Specifies the type of framed protocol to use for framed access, for example SLIP, PPP, or ARAP (AppleTalk Remote Access Protocol). For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_IP_ADDRESS
    Specifies the IP address that is configured for the user requesting authentication. This attribute is typically returned by the authentication provider. However, the NAS may use it in an authentication request to specify a preferred IP address. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_IP_NETMASK
    Specifies the IP network mask for a user that is a router to a network. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_ROUTING
    Specifies the routing method for a user that is a router to a network. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FILTER_ID
    Specifies the filter list for the user requesting authentication. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_MTU
    Specifies the Maximum Transmission Unit (MTU) for the user. This attribute is used in cases where the MTU is not negotiated through some other means, such as PPP. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_COMPRESSION
    Specifies a compression protocol to use for the connection. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_IP_HOST
    Specifies the system with which to connect the user. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_SERVICE
    Specifies the service to use to connect the user to the host specified by raatLoginIPHost. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_TCP_PORT
    Specifies the port to which to connect the user. This attribute is present only if the raatLoginService attribute is present. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_UNASSIGNED1
    This value is currently unassigned.

  • RADIUS_ATTRIBUTE_REPLY_MESSAGE
    Specifies a message to display to the user. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_CALLBACK_NUMBER
    Specifies a callback number. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_CALLBACK_ID
    Specifies a location to call back. The value of this attribute is interpreted by the NAS. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_UNASSIGNED2
    This value is currently unassigned. The value field in for this type is also undefined.

  • RADIUS_ATTRIBUTE_FRAMED_ROUTE
    Specifies routing information to configure on the NAS for the user. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_IPX_NETWORK
    Specifies the IPX network number to configure for the user. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_STATE
    Specifies state information provided to the client by the server. Refer to RFC 2865 for detailed information about this value. The value field in for this type is a pointer.

  • RADIUS_ATTRIBUTE_CLASS
    Specifies a value that is provided to the NAS by the authentication provider. The NAS should use this value when communicating with the accounting provider. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_VENDOR_SPECIFIC
    Specifies a field for vendor-supplied extended attributes. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_SESSION_TIMEOUT
    Specifies the maximum number of seconds for which to provide service to the user. After this time, the session is terminated. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_IDLE_TIMEOUT
    Specifies the maximum number of consecutive seconds the session can be idle. If the idle time exceeds this value, the session is terminated. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_TERMINATION_ACTION
    Specifies an action the server performs when time the connection terminates. Refer to the above-referenced files for detailed information about this value. The value field in for this type is 32-bit integral value. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_CALLED_STATION_ID
    Specifies the number that the user dialed to connect to the NAS. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_CALLING_STATION_ID
    Specifies the number from which the user is calling. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_NAS_IDENTIFIER
    Specifies the NAS identifier. An Access-Request should specify either an NAS identifier or an NAS IP address. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_PROXY_STATE
    Specifies a value that a proxy server includes when forwarding an authentication request. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_LAT_SERVICE
    Specifies an attribute that is not currently used for authentication on Windows 2000. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_LAT_NODE
    Specifies an attribute that is not currently used for authentication on Windows 2000. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_LAT_GROUP
    Specifies an attribute that is not currently used for authentication on Windows 2000. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_APPLETALK_LINK
    Specifies the AppleTalk network number for the user when the user is another router. The value field in for this type is 32-bit integral value. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_APPLETALK_NET
    Specifies the AppleTalk network number that the NAS should use to allocate an AppleTalk node for the user. This attribute is used only when the user is not another router. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_FRAMED_APPLETALK_ZONE
    Specifies the AppleTalk default zone for the user. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_ACCT_STATUS_TYPE
    Specifies whether the accounting provider should start or stop accounting for the user. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_DELAY_TIME
    Specifies the length of time that the client has been attempting to send the current request. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_INPUT_OCTETS
    Specifies the number of octets that have been received during the current accounting session. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_OUTPUT_OCTETS
    Specifies the number of octets that were sent during the current accounting session. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_SESSION_ID
    Specifies a value to enable the identification of matching start and stop records within a log file. The start and stop records are sent in the raatAcctStatusType attribute. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_AUTHENTIC
    Specifies, to the accounting provider, how the user was authenticated; for example by Windows 2000 Directory Services, RADIUS, or some other authentication provider. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_SESSION_TIME
    Specifies the number of seconds that have elapsed in the current accounting session. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_INPUT_PACKETS
    Specifies the number of packets that are received during the current accounting session. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_OUTPUT_PACKETS
    Specifies the number of packets that are sent during the current accounting session. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_TERMINATE_CAUSE
    Specifies how the current accounting session was terminated. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_MULTI_SSN_ID
    Specifies a value to enable the identification of related accounting sessions within a log file. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_ACCT_LINK_COUNT
    Specifies the number of links if the current accounting session is using a multilink connection. For more information, see RFC 2866.

  • RADIUS_ATTRIBUTE_CHAP_CHALLENGE
    Specifies the CHAP challenge sent by the NAS to a CHAP user. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_NAS_PORT_TYPE
    Specifies the type of the port through which the user is connecting, for example, asynchronous, ISDN, virtual. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_PORT_LIMIT
    Specifies the number of ports the NAS should make available to the user for multilink sessions. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_LOGIN_LAT_PORT
    Specifies an attribute that is not currently used for authentication on Windows 2000. For more information, see RFC 2865.

  • RADIUS_ATTRIBUTE_TUNNEL_TYPE
    Specifies the tunneling protocol used. The following table lists valid tunnel types.

    Tunnel type value Description
    1 Point-to-Point Tunneling Protocol (PPTP)
    2 Layer Two Forwarding (L2F)
    3 Layer Two Tunneling Protocol (L2TP)
    4 Ascend Tunnel Management Protocol (ATMP)
    5 Virtual Tunneling Protocol (VTP)
    6 IP Authentication Header in the Tunnel-mode
    7 IP-in-IP Encapsulation (IP-IP)
    8 Minimal IP-in-IP Encapsulation (MIN-IP-IP)
    9 IP Encapsulating Security Payload in the Tunnel-mode (ESP)
    10 Generic Route Encapsulation (GRE)
    11 Bay Dial Virtual Services (DVS)
    12 IP-in-IP Tunneling
  • RADIUS_ATTRIBUTE_TUNNEL_MEDIUM_TYPE
    Specifies which transport medium to use when creating a tunnel for those protocols (such as L2TP) that can operate over multiple transports. The following table lists valid medium types.

    Medium type value Description
    1 IPv4 (IP version 4)
    2 IPv6 (IP version 6)
    3 OSI Network Service Access Points (NSAP) Signaling Protocol (see ISO 8348 and ITU-T X.213).
    4 High-Level Data Link Control (HDLC) Protocol (8-bit multidrop)
    5 Bolt Beranek and Newman, Inc. (BBN) Report 1822
    6 IEEE 802 (includes all 802 media plus Ethernet "canonical format")
    7 E.163 Plain Old Telephone Service (POTS)
    8 E.164 Switched Multimegabit Data Service (SMDS), Frame Relay, Asynchronous Transfer Mode (ATM)
    9 F.69 (Telex)
    10 X.121 (X.25, Frame Relay)
    11 Internetwork Packet Exchange (IPX)
    12 AppleTalk
    13 Decnet IV
    14 Banyan Vines
    15 E.164 with NSAP format subaddress
  • RADIUS_ATTRIBUTE_TUNNEL_CLIENT_ENDPT
    Specifies the address of the initiator end of the tunnel.

  • RADIUS_ATTRIBUTE_TUNNEL_SERVER_ENDPT
    Specifies the address of the server end of the tunnel.

  • RADIUS_ATTRIBUTE_ACCT_TUNNEL_CONN
    Specifies an identifier assigned to the tunnel session. For more information, see RFC 2867.

  • RADIUS_ATTRIBUTE_TUNNEL_PASSWORD
    The password for authenticating to the remote server.

  • RADIUS_ATTRIBUTE_ARAP_PASSWORD
    Specifies a password to use for AppleTalk Remote Access Protocol (ARAP) authentication. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_ARAP_FEATURES
    Specifies information that an NAS should send back to the user in an ARAP "feature flags" packet. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_ARAP_ZONE_ACCESS
    Specifies how to use the ARAP zone list for the user. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_ARAP_SECURITY
    Specifies an ARAP security module to use during a secondary authentication phase between the NAS and the user. The value field for this type is a 32-bit integral. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_ARAP_SECURITY_DATA
    Specifies the data to use with an ARAP security module. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_PASSWORD_RETRY
    Specifies the number of password retry attempts to permit the user access. The value field for this type is a 32-bit integral value.

  • RADIUS_ATTRIBUTE_PROMPT
    Specifies whether the NAS should echo the user response to a challenge. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_CONNECT_INFO
    Specifies information about the type of connection the user is using. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_CONFIGURATION_TOKEN
    Specifies user-profile information in communications between RADIUS Proxy Servers and RADIUS Proxy Clients. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_EAP_MESSAGE
    Specifies that EAP information be sent directly between the user and the authentication provider. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_SIGNATURE
    Specifies a signature to include with CHAP, EAP, or ARAP packets. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_TUNNEL_PVT_GROUP_ID
    Group ID for a particular tunneled session.

  • RADIUS_ATTRIBUTE_TUNNEL_ASSIGNMENT_ID
    Specifies a tunnel to which a session is assigned.

  • RADIUS_ATTRIBUTE_TUNNEL_PREFERENCE
    Relative preference assigned to each tunnel when more than one set of tunneling attributes is returned to the tunnel initiator.

  • RADIUS_ATTRIBUTE_ARAP_CHALLENGE_RESPONSE
    Specifies the response to a Apple Remote Access Protocol (ARAP) challenge. In ARAP, either the server or the client responds to challenges. For more information, see RFC 2869.

  • RADIUS_ATTRIBUTE_ACCT_INTERIM_INTERVAL
    Indicates the number of seconds between each interim update for this specific session. This value can only appear in the Access-Accept message. For more information, see RFC 2866.

    **Windows 2000 :  **This value is unavailable.

  • RADIUS_ATTRIBUTE_NAS_IPv6_ADDRESS
    Specifies the IPv6 Address of the NAS that requests authentication of the user. It should be unique to the NAS within the scope of the RADIUS server. It is only used in an Access-Request packet. For more information, see the NAS-IPv6-Address section in RFC 3162.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • RADIUS_ATTRIBUTE_FRAMED_INTERFACE_ID
    Specifies the IPv6 interface identifier to be configured for the user. It may be used in an Access-Accept packet. For more information, see the Framed-Interface-Id section in RFC 3162.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • RADIUS_ATTRIBUTE_FRAMED_IPv6_PREFIX
    Specifies an IPv6 prefix (and corresponding route) to be configured for the user. It may be used in an Access-Accept packet and can appear multiple times. For more information, see the Framed-IPv6-Prefix section in RFC 3162.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • RADIUS_ATTRIBUTE_LOGIN_IPv6_HOST
    Specifies the system with which to connect the user, when the ratLoginService attribute is included. It may be used in an Access-Accept packet. For more information, see the Login-IPv6-Host section in RFC 3162.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • RADIUS_ATTRIBUTE_FRAMED_IPv6_ROUTE
    Specifies routing information to be configured for the user on the NAS. It is used in an Access-Accept packet and can appear multiple times. For more information, see the Framed-IPv6-Route section in RFC 3162.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • RADIUS_ATTRIBUTE_FRAMED_IPv6_POOL
    Specifies the name of an assigned pool that should be used to assign an IPv6 prefix for the user. If a NAS does not support multiple prefix pools, the NAS must ignore this attribute. For more information, see the Framed-IPv6-Pool section in RFC 3162.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_IP_ADDRESS
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_SAVED_RADIUS_CALLBACK_NUMBER
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_NP_CALLING_STATION_ID
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_SAVED_NP_CALLING_STATION_ID
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_ROUTE
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_IGNORE_USER_DIALIN_PROPERTIES
    Specifies that the user's dial-in properties are ignored.

  • IAS_ATTRIBUTE_NP_TIME_OF_DAY
    Time periods and days of week during which user is allowed to connect.

  • IAS_ATTRIBUTE_NP_CALLED_STATION_ID
    Phone number dialed by user.

  • IAS_ATTRIBUTE_NP_ALLOWED_PORT_TYPES
    Port types permitted for a connection.

  • IAS_ATTRIBUTE_NP_AUTHENTICATION_TYPE
    Authentication types permitted for a connection.

  • IAS_ATTRIBUTE_NP_ALLOWED_EAP_TYPE
    EAP encryption modes permitted for a connection.

  • IAS_ATTRIBUTE_SHARED_SECRET
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_CLIENT_IP_ADDRESS
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_CLIENT_PACKET_HEADER
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_TOKEN_GROUPS
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_ALLOW_DIALIN
    Specifies whether dial-in access is available for a given user.

  • IAS_ATTRIBUTE_NP_CONSTRAINT
    This attribute is reserved for system use.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_REQUEST_ID
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_NP_VERSION
    This attribute is reserved for system use.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_MANIPULATION_TARGET
    The target data to which an attribute manipulation rule is applied. Attribute manipulation was previously known as 'realms processing'. See the online help for Internet Authentication Service for more information on attribute manipulation.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_NP_VENDORID
    This attribute is reserved for system use.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_MANIPULATION_RULE
    The manipulation rule to apply to the data specified by the Manipulation-Target attribute. See the online help for Internet Authentication Service for more information on attribute manipulation.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_NP_SEQUENCE
    This attribute is reserved for system use.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_ORIGINAL_USER_NAME
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_CLIENT_VENDOR_TYPE
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_CLIENT_UDP_PORT
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_CHALLENGE
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_RESPONSE
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_DOMAIN
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_ERROR
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_CPW1
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_CPW2
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_LM_ENC_PW
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_NT_ENC_PW
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP_MPPE_KEYS
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_AUTHENTICATION_TYPE
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_CLIENT_NAME
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_NT4_ACCOUNT_NAME
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_FULLY_QUALIFIED_USER_NAME
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_NTGROUPS
    Specifies groups used for the policy conditions.

  • IAS_ATTRIBUTE_EAP_FRIENDLY_NAME
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_ARAP_CHALLENGE
    Microsoft Vendor-Specific attribute only present in an Access-Request packet containing a Framed-Protocol Attribute with the value 3 (ARAP). For more information, see the MS-ARAP-Challenge section in RFC 2548.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_AUTH_PROVIDER_TYPE
    The type of authentication provider to use.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_ACCT_AUTH_TYPE
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_ACCT_EAP_TYPE
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_PACKET_TYPE
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_OLD_ARAP_PASSWORD
    Microsoft Vendor-Specific attribute used to transmit the old ARAP password during an ARAP password change operation. It may be included in an Access-Request packet. For more information, see the MS-Old-ARAP-Password section in RFC 2548.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_AUTH_PROVIDER_NAME
    The name of the RADIUS server or server group that provides authentication.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_NEW_ARAP_PASSWORD
    Microsoft Vendor-Specific attribute used to transmit the new ARAP password during an ARAP password change operation. It may be included in an Access-Request packet. For more information, see the MS-New-ARAP-Password section in RFC 2548.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_ACCT_PROVIDER_TYPE
    The type of accounting provider to use.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_ARAP_PASSWORD_CHANGE_REASON
    Microsoft Vendor-Specific attribute used to indicate reason for a server-initiated password change. It may be included in an Access-Challenge packet. For more information, see the MS-ARAP-Password-Change-Reason section in RFC 2548.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_ACCT_PROVIDER_NAME
    The name of the RADIUS server that provides accounting.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_MPPE_SEND_KEY
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_MPPE_RECV_KEY
    This attribute is reserved for system use.

  • IAS_ATTRIBUTE_REASON_CODE
    Specifies an MS-CHAP reason-for-failure code. This attribute is returned in the Failure packet Message field. For more information, see Request for Comments (RFC) 2433.

  • MS_ATTRIBUTE_FILTER
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • MS_ATTRIBUTE_CHAP2_RESPONSE
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP2_SUCCESS
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_CHAP2_CPW
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_RAS_VENDOR
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • MS_ATTRIBUTE_RAS_VERSION
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • IAS_ATTRIBUTE_NP_NAME
    This attribute is reserved for system use.

  • MS_ATTRIBUTE_PRIMARY_DNS_SERVER
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • MS_ATTRIBUTE_SECONDARY_DNS_SERVER
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • MS_ATTRIBUTE_PRIMARY_NBNS_SERVER
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • MS_ATTRIBUTE_SECONDARY_NBNS_SERVER
    See Request for Comments (RFC) 2548, Microsoft Vendor-specific RADIUS Attributes.

  • IAS_ATTRIBUTE_PROXY_POLICY_NAME
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_PROVIDER_TYPE
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_PROVIDER_NAME
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_REMOTE_SERVER_ADDRESS
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_GENERATE_CLASS_ATTRIBUTE
    Specifies whether IAS automatically generates the class attribute. IAS automatically generates the class attribute by default.

  • MS_ATTRIBUTE_RAS_CLIENT_NAME
    Specifies the name of the client generating a request.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_RAS_CLIENT_VERSION
    Specifies the version of the client generating a request.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_ALLOWED_CERTIFICATE_EKU
    Specifies the certificate purpose or usage object identifiers (OIDs), in dotted decimal notation, that are allowed when performing certificate-based authentication with EAP-TLS.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_EXTENSION_STATE
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_GENERATE_SESSION_TIMEOUT
    Specifies whether IAS automatically generates the session timeout based on user account expiration and time-of-day restrictions. IAS does not automatically generate the session timeout by default.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_SESSION_TIMEOUT
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_IPFILTER
    Specifies the IP traffic filter used by the Routing and Remote Access service when the connection is in a restricted state.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_SESSION_TIMEOUT
    Specifies the time (in seconds) that the connection can remain in a restricted state before being disconnected.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_USER_SECURITY_IDENTITY
    Specifies the SID of the user requesting access.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_REMOTE_RADIUS_TO_WINDOWS_USER_MAPPING
    Specifies that Windows authorization is enabled for users authenticated by the remote RADIUS server for example, allows use with Passport user mapping.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_PASSPORT_USER_MAPPING_UPN_SUFFIX
    Specifies the UPN suffix of the Passport to Windows user mapping.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_TUNNEL_TAG
    Used to set the tag byte for any tunnel attributes in the profile. If this is not set, the default is zero.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_NP_PEAPUPFRONT_ENABLED
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_ARAP_GUEST_LOGON
    This attribute is reserved for system use.

    **Windows Server 2003 and later:  **This value is unavailable.

  • IAS_ATTRIBUTE_CERTIFICATE_EKU
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_EAP_CONFIG
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_PEAP_EMBEDDED_EAP_TYPEID
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_PEAP_FAST_ROAMED_SESSION
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • IAS_ATTRIBUTE_EAP_TYPEID
    This attribute is reserved for system use.

    **Windows 2000:  **This value is unavailable.

  • MS_ATTRIBUTE_EAP_TLV
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_REJECT_REASON_CODE
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_PROXY_EAP_CONFIG
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_EAP_SESSION
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_IS_REPLAY
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_CLEAR_TEXT_PASSWORD
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_IDENTITY_TYPE
    Specifies the type of identity check to perform.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_SERVICE_CLASS
    Specifies which group of DHCP scopes correspond to the client requesting access.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_USER_CLASS
    Vendor-specific attribute used to carry the name of a special DHCP user class, as specified in RFC 3004, called Network Access Protection (NAP) user class.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_STATE
    Specifies the target quarantine state of the client.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_OVERRIDE_RAP_AUTH
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_PEAP_CHANNEL_UP
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_NAME_MAPPED
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_POLICY_ENFORCED
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_MACHINE_NTGROUPS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_USER_NTGROUPS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_MACHINE_TOKEN_GROUPS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_USER_TOKEN_GROUPS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_GRACE_TIME
    Specifies the amount of time a host has to become conformant with network policy.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_URL
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_FIXUP_SERVERS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_NOT_QUARANTINE_CAPABLE
    Vendor-specific attribute that specifies if the client is capable of reporting its state to the network access server (NAS). It must be one of the following values.

    Value Meaning
    0 The client sent a Statement of Health (SoH).
    1 The client did not send an SoH.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_SYSTEM_HEALTH_RESULT
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_SYSTEM_HEALTH_VALIDATORS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_MACHINE_NAME
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_NT4_MACHINE_NAME
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_SESSION_HANDLE
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_FULLY_QUALIFIED_MACHINE_NAME
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_FIXUP_SERVERS_CONFIGURATION
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_CLIENT_QUARANTINE_COMPATIBLE
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_NETWORK_ACCESS_SERVER_TYPE
    Specifies the access type of a network access server (NAS). A NAS may send this attribute to a RADIUS server to indicate the type of this NAS in an Access-Request message.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_SESSION_ID
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_AFW_QUARANTINE_ZONE
    Vendor-specific attribute used as a hint for dynamic selection of a preconfigured Internet Protocol security (IPsec) policy by the client requesting access.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_AFW_PROTECTION_LEVEL
    Vendor-specific attribute used as a hint for dynamic selection of a preconfigured IPsec policy by the client requesting access.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_QUARANTINE_UPDATE_NON_COMPLIANT
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_REQUEST_START_TIME
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_MACHINE_NAME
    Vendor-specific attribute used to communicate the machine name of the client requesting network access.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_CLIENT_IPv6_ADDRESS
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_INTERFACE_ID
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_IPV6_PREFIX
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_SAVED_RADIUS_FRAMED_IPV6_ROUTE
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_GRACE_TIME_CONFIGURATION

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_IPv6_FILTER
    Vendor-specific attribute used to limit the inbound and/or outbound access of the endpoint client.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_IPV4_REMEDIATION_SERVERS
    Specifies a list of servers that should be reachable by a quarantined client so that it may remediate itself.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_IPV6_REMEDIATION_SERVERS
    Specifies a list of servers that should be reachable by a quarantined client so that it may remediate itself.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_PROXY_RETRY_COUNT
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_MACHINE_INVENTORY
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_ABSOLUTE_TIME
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_QUARANTINE_SOH
    Vendor-specific attribute used only to carry Statement of Health (SoH) information when EAP is not used. A RADIUS server may send it to an network access server (NAS) in an Access-Accept message.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_EAP_TYPES_CONFIGURED_IN_PROXYPOLICY
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_HCAP_LOCATION_GROUP_NAME
    Vendor-specific attribute specifying the location group name for the HCAP entity.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_EXTENDED_QUARANTINE_STATE
    Specifies the additional Quarantine state information for a user requesting access to this NAS.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_SOH_CARRIER_EAPTLV
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_HCAP_USER_GROUPS
    An NAS may use this attribute to pass the group name of the user requesting network access to a RADIUS server, which may then use this information to make authentication or authorization decisions.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_SAVED_MACHINE_HEALTHCHECK_ONLY
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_POLICY_EVALUATED_SHV
    Multiple instances of this attribute can be present at one time.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_RAS_CORRELATION_ID
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_HCAP_USER_NAME
    An NAS may use this attribute to pass the name of the user requesting network access to a RADIUS server, which may then use this information to make authentication or authorization decisions.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_NT4_HCAP_ACCOUNT_NAME
    This attribute is reserved for system use.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_USER_TOKEN_SID
    SID for IAS_ATTRIBUTE_NT4_ACCOUNT_NAME or IAS_ATTRIBUTE_NT4_HCAP_ACCOUNT_NAME regardless of whether the later is a user account or a machine account.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • IAS_ATTRIBUTE_MACHINE_TOKEN_SID
    SID for IAS_ATTRIBUTE_NT4_MACHINE_NAME.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_USER_IPv4_ADDRESS
    Specifies the IPv6 address of the user.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_USER_IPv6_ADDRESS
    Specifies the IPv4 address of the user.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • MS_ATTRIBUTE_TSG_DEVICE_REDIRECTION
    Vendor-specific attribute for TS Gateway Device Redirection flags.

    **Windows Server 2003 and earlier:  **This value is unavailable.

  • RAS_ATTRIBUTE_EAP_PROTOCOL
    Specifies the EAP protocol.

    **Windows Server 2003 and later:  **This value is unavailable.

  • RAS_ATTRIBUTE_ENCRYPTION_TYPE
    Specifies the encryption type of the user's connection.

  • RAS_ATTRIBUTE_ENCRYPTION_POLICY
    Specifies the whether encryption is Allowed, Required, or None (disallowed). For more information, see RFC 2548.

  • RAS_ATTRIBUTE_BAP_REQUIRED
    Specifies whether bandwidth allocation protocol (BAP) is required.

  • RAS_ATTRIBUTE_BAP_LINE_DOWN_TIME
    Time in seconds for the capacity utilization calculation.

  • RAS_ATTRIBUTE_BAP_LINE_DOWN_LIMIT
    Percent of capacity utilized at which to bring a line down for this user.

  • RAS_ATTRIBUTE_ALLOWED_PORT_TYPE
    Specifies the allowed port type.

    **Windows Server 2003 and later:  **This value is unavailable.

Requirements

Server

Requires Windows Server 2008, Windows Server 2003, or Windows 2000 Server.

Header

Declared in SdoIas.h.

IDL

Declared in SdoIas.idl.

See Also

Attributes
ISdoDictionaryOld

Send comments about this topic to Microsoft

Build date: 10/15/2007