aaa
IsaRadiusPolicy

This is a class for ISA RADIUS Policy.



public class IsaRadiusPolicy

Properties
aaa.IsaRadiusServer-Set type=Children-Set
acctUpdateTrigger Specifies a bitmap to enable/disable triggered RADIUS Interim Account updates.

type=aaa.AcctUpdateTriggers
default=0
Displayed(tab/group)=RADIUS Interim Account Triggers

authIncludeAttributes Specifies what RADIUS attributes the system should include into RADIUS Access-Request messages.

type=aaa.AuthIncludeRadiusAttribute
default=2048
Displayed(tab/group)=Authentication RADIUS Attributes

nasIpAddrOrigin The value of nasIpAddrOrigin specifies the content of the NAS-IP-Address attribute.

type=aaa.NasIpAddressOrigin
default=systemIp
Displayed(tab/group)=NAS IP Address Origin

password Specifies the string to use in the User-Password RADIUS attribute.

type=string
default=
minimum=0
maximum=10
Displayed(tab/group)=Password (/Password)

plcyInterval The value of plcyInterval specifies the interval at which the Radius logging refreshes are generated. The generation of logging refreshes may be delayed past the configured interval value in case that message pacing (rate-limit) is enabled.

type=int
default=0
minimum=0
maximum=72
units=hours
Displayed(tab/group)=Interval (/Periodic Update)

plcyRateLimit The value of plcyRateLimit specifies the pacing of the Interim-Update messages related to the refreshment of the currently allocated port blocks.

type=int
default=0
minimum=0
maximum=100000
units=messages/sec
Displayed(tab/group)=Rate Limit (/Periodic Update)

pythonPolicyPointer Specifies the Python policy used for modifying Radius messages.

type=Pointer
default=
Displayed(tab/group)=Python Policy

userNameFormat Specifies the format used to identify the user towards the RADIUS server.

type=aaa.IsaRadiusUserNameFormat
default=mac
Displayed(tab/group)=User Name Format

userNameMacFormat Specifies how to format a MAC address. The value 'alu' specifies the SROS style, like 00:0c:f1:99:85:b8. The value 'ieee' specifies IEEE canonical style, like 00-0C-F1-99-85-B8. It is applicable while userNameFormat is 'mac' or 'macIp'.

type=aaa.IsaRadiusUserNameMacFormat
default=alu
Displayed(tab/group)=User Name MAC Format

 
Overridden Properties
serverSrcAddrEnd Specifies the end of the the range of source addresses to be used for NAT RADIUS accounting; It must be a valid unicast address. This property becomes read only on 11.0+ node.

access=read-only

 
Properties inherited from aaa.IsaRadiusPolicyBase
description, displayedName, includeAttributes, routerType, serverAlgorithm, serverRetry, serverSrcAddrEnd, serverSrcAddrStart, serverSrcAddrType, serverTimeOut, serverVirtualID, vprnPointer
 
Properties inherited from policy.PolicyDefinition
configurationAction, configurationMode, discoveryState, displayedName, distributionMode, isMaster, lastSyncTime, numberOfUnderlyingPolicyItems, origin, policyMode, policySyncGroupPointer, policyType
 
Properties inherited from policy.PolicyObject
description, displayedName, globalPolicy, id, isLocal, policyType, siteId, siteName, templateObject
 
Properties inherited from ManagedObject
actionMask, children-Set, deploymentState, isFaultSquelched, name, objectFullName, selfAlarmed
 
Methods

removePassword

Remove password associated with ISA RADIUS Policy.
Input Parameters:
deployer : Deployer - the deployment state
synchronousDeploy : boolean - (Optional) Specify whether to block until the changes have been fully deployed to the network. A value of "true" means to block. A value of "false" means to return immediately. Default: false (asynchronous)
clearOnDeployFailure : boolean - (Optional) Specify whether to clear any failed deployers. A value of "true" means to clear. A value of "false" means to leave the failed deployer. Default: false
deployRetries : int - (Optional) The number of times to attempt re-deployment during synchronous deployment. This parameter is meaningless in the asynchronous case. Default: 0
deployRetryInterval : long - (Optional) The number of milliseconds to wait between deployment retries. This parameter is meaningless in the asynchronous case. Default: 0
taskDescription : string - (Optional) A user friendly description of what the operation does. This information will be used by the task manager.
instanceFullName : string - the full name of the object.
continueOnFailure : continueOnFailure - (Optional) Continue processing requests in this stream if an exception occurs, unless the request is invalid. Default: false
Methods inherited from policy.PolicyDefinition
distribute, distributeUsingGroups, distributeV2, evaluatePolicy, findGlobal, findLocal, findReleased, getSyncTaskResult, resetToReleasedPolicy, setConfigurationModeToDraft, setConfigurationModeToReleased, setDistributionModeToLocalEditOnly, setDistributionModeToSyncWithGlobal, syncTo, syncToLocalWithResync
 
Supported Network Elements
7750 SR Supported from 11.0.R1 until 12.0.R1
  • Excluded chassis types: 7750-SRc4, 7750-SRc12, VSR, VSR-I, VSR-MG, 7750-SR1 Fixed CFM
Supported from 12.0.R1 until 13.0.R8
  • Excluded chassis types: 7750-SRc4, 7750-SRa4, 7750-SRa8, 7750 SR-1e, 7750 SR-2e, 7750 SR-3e, VSR, VSR-I, VSR-MG, 7750-SR1 Fixed CFM
Supported from 13.0.R8
  • Excluded chassis types: 7750-SRc4, 7750-SRa4, 7750-SRa8, VSR-MG, 7750-SR1 Fixed CFM, 7750 SR-14s, 7750 SR-7s, 7750 SR-1s, 7750 SR-2s
7450 ESS Supported from 11.0.R1
  • Excluded chassis types: 7450-ESS1
Product Specifics
7450 ESS (all versions)
7450 ESS 20.0
7450 ESS 21.0
7450 ESS 22.0
7450 ESS 23.0
7450 ESS 24.0
7450 ESS 25.0
7705 SAR Gen 2 (all versions)
7750 SR (all versions)
7750 SR 20.0
7750 SR 21.0
7750 SR 22.0
7750 SR 23.0
7750 SR 24.0
7750 SR 25.0