Attributes - Revision history

Shin: /* Useful User and Group Reply Attributes */

2023-11-29T05:28:46Z

Useful User and Group Reply Attributes

2023-11-27T08:05:04Z

Useful User and Group Authentication Attributes

2023-11-27T02:22:46Z

Useful User and Group Authentication Attributes

2023-10-24T06:58:37Z

Useful User and Group Authentication Attributes

2023-10-24T06:58:18Z

2023-10-24T06:57:46Z

2023-10-19T08:10:27Z

Useful User and Group Authentication Attributes

2023-10-19T08:07:24Z

RADIUS > Attributes

2023-10-19T08:05:47Z

RADIUS > Attributes

2023-10-19T07:48:06Z

Useful User and Group Authentication Attributes

@@ Line 68: / Line 68: @@
 |-
 | Session-Timeout || := || 3600~86400(second) || It refers to the Session-Timeout of a user connected to the wireless LAN, and when this time elapses, a new wireless LAN encryption key is generated to maintain a secure wireless LAN connection. In a typical WPA-Enterprise environment through a wireless LAN authentication server, keys are generated securely to maintain an encrypted channel. However, to ensure an even more secure encrypted channel, you can use this attribute.
 |-
 |}
 === References ===

@@ Line 38: / Line 38: @@
 For examples)
 * my-ssid-A <br>
-* my-ssid-A <nowiki>|</nowiki> myssid-B
+* my-ssid-A <nowiki>|</nowiki> my-ssid-B
 |-
 | Calling-Station-Id || =~ || mac address1 <nowiki>|</nowiki> mac address2 ... || It is used to include the user's device MAC address for user identification during authentication. If this attribute is included, user authentication requires a match in Username, User-Password, and MAC address. You can use the <nowiki>"|"</nowiki> symbol to define multiple MAC addresses. When entering MAC addresses, use lowercase letters without separators.
@@ Line 52: / Line 52: @@
 For examples)
 * my-ssid-A
-* my-ssid-A <nowiki>|</nowiki> myssid-B
+* my-ssid-A <nowiki>|</nowiki> my-ssid-B
 |-
 | Expiration || := || datetime || This can be set in user or group attributes and refers to the authentication expiration time. When the time for this attribute expires, authentication for the user with this attribute or users belonging to groups that include this attribute will be denied.

@@ Line 34: / Line 34: @@
 |-
 | Group-Login-Time || := || text || It is also similar to the Login-Time attribute but acts as an exclusive attribute that takes precedence over Login-Time attributes for users who are part of a group, even if they have their own Login-Time attribute. However, if a user has a User-Login-Time attribute, Group-Login-Time will not be applied (User-Login-Time takes the highest priority). <br> '''This attribute applies only to groups.'''
 |-
 | Calling-Station-Id || =~ || mac address1 <nowiki>|</nowiki> mac address2 ... || It is used to include the user's device MAC address for user identification during authentication. If this attribute is included, user authentication requires a match in Username, User-Password, and MAC address. You can use the <nowiki>"|"</nowiki> symbol to define multiple MAC addresses. When entering MAC addresses, use lowercase letters without separators.

@@ Line 49: / Line 49: @@
 * my-ssid-A <nowiki>|</nowiki> myssid-B
 |-
-| Expiration || := || time date || This can be set in user or group attributes and refers to the authentication expiration time. When the time for this attribute expires, authentication for the user with this attribute or users belonging to groups that include this attribute will be denied.
+| Expiration || := || datetime || This can be set in user or group attributes and refers to the authentication expiration time. When the time for this attribute expires, authentication for the user with this attribute or users belonging to groups that include this attribute will be denied.
 The expiration time should be defined in the format "%b %d %Y %H:%M:%S %Z." <br>

@@ Line 49: / Line 49: @@
 * my-ssid-A <nowiki>|</nowiki> myssid-B
 |-
-| Expiration || := || time || This can be set in user or group attributes and refers to the authentication expiration time. When the time for this attribute expires, authentication for the user with this attribute or users belonging to groups that include this attribute will be denied.
+| Expiration || := || time date || This can be set in user or group attributes and refers to the authentication expiration time. When the time for this attribute expires, authentication for the user with this attribute or users belonging to groups that include this attribute will be denied.
 The expiration time should be defined in the format "%b %d %Y %H:%M:%S %Z." <br>

@@ Line 18: / Line 18: @@
 {{note| Wireless equipment needs to support Session-Timeout attribute for automatic disconnection.}}
 You should define time strings using the "Day%H%M-Day%H%M" format. Days can be Mo, Tu, We, Th, Fr, Sa, or Su, with "Wk" for weekdays and "Any" for all days. <ref>https://networkradius.com/doc/current/raddb/mods-available/logintime.html</ref> <br>
-"%H" represents the hours in the range from 00 to 23, and "%M" represents the minutes in the range from 00 to 59
+"%H" represents the hours in the range from 00 to 23, and "%M" represents the minutes in the range from 00 to 59.<br>
 {{note|Multiple time strings may be a list of simple time strings separated by <nowiki>"|"</nowiki>}}

@@ Line 26: / Line 26: @@
 * Any0900-1800 // Authentication is possible everyday between 9:00 AM and 6:00 PM
 * Any0900-1800, We2000-2100 //Authentication is possible everyday between 9:00 AM and 6:00 PM, and on Wednesday only between 8:00 PM and 9:00 PM.
 * Any // Always(Default)
-* Sa // Authentication is possible every Saturday at any time.
 |-
 | User-Login-Time || := || text || It is similar to the Login-Time attribute. however, it is an exclusive attribute that does not affect users if they are part of a specific group with its own Login-Time attribute. <br> '''This attribute applies only to users.'''