IMG 1010 - RADIUS - Tunnel-Client-Endpoint

Radius Attribute: Tunnel-Client-Endpoint

As per RFC2868:

This Attribute contains the address of the initiator end of the tunnel. It MAY be included in both Access-Request and Access-Accept packets to indicate the address from which a new tunnel is to be initiated. If the Tunnel-Client-Endpoint Attribute is included in an Access-Request packet, the RADIUS server should take the value as a hint; the server is not obligated to honor the hint, however. This Attribute SHOULD be included in Accounting-Request packets which contain Acct-Status-Type attributes with values of either Start or Stop, in which case it indicates the address from which the tunnel was initiated.  This Attribute, along with the Tunnel-Server-Endpoint and Acct-Tunnel-Connection-ID attributes, may be used to provide a globally unique means to identify a tunnel for accounting and auditing purposes.

A summary of the Tunnel-Client-Endpoint attribute format is shown below. The fields are transmitted from left to right.

Open

Type (IETF Attribute Number) = 66

Length = (>=3)