Configure vendor-specific attributes for a remote access policy

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure vendor-specific attributes for a remote access policy

  1. Open Internet Authentication Service.

  2. In the console tree, click Remote Access Policies.

  3. Right-click the policy for which you want to configure a vendor-specific attribute (VSA), and then click Properties.

  4. Click Edit Profile, click the Advanced tab, and then click Add.

  5. Look at the list of available RADIUS attributes to determine whether your vendor-specific attribute is already in it. If it is, double-click it, and then configure it as specified in your NAS documentation.

If the vendor-specific attribute is not in the list of available RADIUS attributes:

  1. Double-click Vendor-Specific, and then click Add.

  2. Specify the vendor for your network access server.

    To specify the NAS vendor by selecting the name from the list, click Select from list, and then select the vendor of the NAS for which you are configuring the VSA. If you are using Routing and Remote Access as your NAS, click Microsoft.

    If the vendor is not listed, you can specify the vendor by typing the vendor code. To do this, click Enter Vendor Code, and then type the vendor code in the space provided. If you do not know the vendor code for your NAS, see IETF RFC 1007 for a list of SMI Network Management Private Enterprise Codes.

  3. Specify whether the attribute conforms to the RADIUS RFC VSA specification. If you are not sure, see your NAS documentation.

  4. If your attribute conforms, click Yes. It conforms, and then click Configure Attribute.

    • In Vendor-assigned attribute number, type the number that is assigned to the attribute (the numbers available are 0 through 255).

    • In Attribute format, specify the format for the attribute, and then in Attribute value, type the value that you are assigning to the attribute.

  5. If the attribute does not conform, click No. It does not conform, and then click Configure Attribute. In Hexadecimal attribute value, type the value for the attribute.

Notes

  • To open Internet Authentication Service, click Start, click Control Panel, double-click Administrative Tools, and then double-click Internet Authentication Service.

  • To see configuration examples for vendor-specific attributes that both conform and do not conform to the RADIUS RFC, see Related Topics.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Vendor-specific attribute overview
Sample VSA for a Cisco NAS
Sample VSA for a US Robotics NAS