13.1.20 Service-Type

ATTRIBUTE Service-Type 6 integer

VALUE      Service-Type      Login-User           1
VALUE      Service-Type      Framed-User          2
VALUE      Service-Type      Callback-Login-User  3
VALUE      Service-Type      Callback-Framed-User 4
VALUE      Service-Type      Outbound-User        5
VALUE      Service-Type      Administrative-User  6
VALUE      Service-Type      NAS-Prompt-User      7
VALUE      Service-Type      Authenticate-Only    8
VALUE      Service-Type      Call-Check           10

This attribute indicates the type of service the user has requested, or the type of service to be provided. It may be used in both Access-Request and Access-Accept packets.

When used in an Access-Request the service type represents a hint to the Radius server that the NAS has reason to believe the user would prefer the kind of service indicated.

When used in an Access-Accept, the service type is an indication to the NAS that the user must be provided this type of service.

The meaning of various service types is as follows:

Login-User

The user should be connected to a host.

Framed-User

A framed protocol, such as PPP or SLIP, should be started for the user. The Framed-IP-Address attribute (see Framed-IP-Address) will supply the IP to be used.

Callback-Login-User

The user should be disconnected and called back, then connected to a host.

Callback-Framed-User

The user should be disconnected and called back; then a framed protocol, such as PPP or SLIP, should be started for the user.

Outbound-User

The user should be granted access to outgoing devices.

Administrative-User

The user should be granted access to the administrative interface to the NAS, from which privileged commands can be executed.

NAS-Prompt

The user should be provided a command prompt on the NAS, from which nonprivileged commands can be executed.

Authenticate-Only

Only authentication is requested, and no authorization information needs to be returned in the Access-Accept.

Call-Check

Callback-NAS-Prompt

The user should be disconnected and called back, then provided a command prompt on the NAS, from which nonprivileged commands can be executed.