Information Technology Reference
In-Depth Information
by the Windows Server 2003 computer itself if IAS is functioning as a RADIUS server, or it can
be passed to a remote RADIUS server group if IAS is configured as a RADIUS proxy.
The attributes that you can specify include a list of RADIUS-standard attributes and a
number of vendor-specific attributes that may not be supported by the RADIUS RFCs, but that
can be used by specific hardware and software manufacturers such as Cisco, Microsoft, and
USRobotics.
See Also
Recipe 6-12 for defining custom RADIUS attributes
Microsoft TechNet: “Add RADIUS Attributes to a Remote Access Policy” (
http://
www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/
2a041150-42f9-4a60-ab18-6de8ab231ee7.mspx
)
6-12. Configuring Vendor-Specific Attributes
Problem
You want to configure a new vendor-specific attribute to control RADIUS connections based
on the manufacturer of the NAS device to which the user is connecting.
Solution
1.
Open the IAS MMC snap-in.
2.
Select the Remote Access Policies node in the left pane.
3.
Right-click the policy that you want to modify and select Properties.
4.
On the Settings tab, click Edit Profile.
5.
On the Advanced tab, click Add. You will see a large list of attributes, some of which are
RADIUS standards and some that are vendor-specific. First verify that the attribute you
wish to add does not already exist, and then double-click the Vendor-Specific attribute
listed under the RADIUS Standard vendor.
6.
On the Multivalued Attribute Information screen, click Add to begin adding a new
vendor-specific attribute.
7.
On the Vendor-Specific Attribute Information screen, select the vendor of your NAS
from the Select from List drop-down box. If the vendor is not listed, select the Enter
Vendor Code radio button and manually enter the vendor code for your NAS device as
supplied by the vendor or as listed in RFC 1007, “SMI Network Management Private
Enterprise Codes.”
8.
Specify whether the attribute that you are adding conforms to the RADIUS RFC specifi-
cation for vendor-specific attributes. Select either the Yes, It Conforms radio button or
the No, It Does Not Conform radio button.
