Status in source: current.
Technical details
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"tIPsecRadAuthPlcyInclAttr",
"OBJECT-TYPE",
"SYNTAX",
"BITS",
"{",
"callingStationId",
"(",
"0",
")",
",",
"calledStationId",
"(",
"1",
")",
",",
"nasPortId",
"(",
"2",
")",
",",
"nasIdentifier",
"(",
"3",
")",
",",
"nasIpAddr",
"(",
"4",
")",
",",
"certSubjectKeyId",
"(",
"5",
")",
"}",
"MAX-ACCESS",
"read-create",
"STATUS",
"current",
"DESCRIPTION",
"\"The value of tIPsecRadAuthPlcyInclAttr specifies what RADIUS attributes the system should include into RADIUS access-request messages. When the 'certSubjectKeyId (5)' bit value is configured, the system extracts the Subject Key Identifier (SKID) from the peer certificate and adds it as a Vendor-Specific Attribute (VSA) in the RADIUS access-request. If this field is configured and the peer certificate does not contain a SKID extension, the system will send an empty VSA in the RADIUS access-request. If the SKID length exceeds 247 bytes, the system will use the least significant 247 bytes of the SKID.\"",
"REFERENCE",
"\"RFC 5280, 'Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile', IETF, May 2008, section 4.2.1.2, 'Subject Key Identifier'.\"",
"DEFVAL",
"{",
"{",
"}",
"}",
"::=",
"{",
"tIPsecRadAuthPlcyEntry",
"4",
"}"
],
"syntax_tree": [
[
"BITS",
[
[
"callingStationId",
0
],
[
"calledStationId",
1
],
[
"nasPortId",
2
],
[
"nasIdentifier",
3
],
[
"nasIpAddr",
4
],
[
"certSubjectKeyId",
5
]
]
],
null,
[
"MaxAccessPart",
"read-create"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"The value of tIPsecRadAuthPlcyInclAttr specifies what RADIUS attributes the system should include into RADIUS access-request messages. When the 'certSubjectKeyId (5)' bit value is configured, the system extracts the Subject Key Identifier (SKID) from the peer certificate and adds it as a Vendor-Specific Attribute (VSA) in the RADIUS access-request. If this field is configured and the peer certificate does not contain a SKID extension, the system will send an empty VSA in the RADIUS access-request. If the SKID length exceeds 247 bytes, the system will use the least significant 247 bytes of the SKID."
],
[
"REFERENCE",
"RFC 5280, 'Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile', IETF, May 2008, section 4.2.1.2, 'Subject Key Identifier'."
],
null,
null,
[
"DEFVAL",
[]
]
]
}