https://community.cisco.com/t5/network-access-control/cisco-av-pair/m-p/4032268#M453859 AV in AV-Pair stands for attribute-value. Some types of examples include TACACS+ and RADIUS AV pairs. These AV pairs can be utilized to define specific authentication, authorization, and accounting elements for each individual session. Something else that you may stumble upon are VSAs which are vendor specific attributes. Attribute 26 was defined for communicating vendor specific information. This attribute encapsulates vendor specific attributes which essentially allows vendors to support their own extended attributes. Take a peek at the following to gain a better understanding:<BR /><A href="https://tools.ietf.org/html/rfc2865#page-63" target="_blank">https://tools.ietf.org/html/rfc2865#page-63</A><BR /><A href="https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_radatt/configuration/xe-16/sec-usr-radatt-xe-16-book/sec-vsa-rad-discnct.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_radatt/configuration/xe-16/sec-usr-radatt-xe-16-book/sec-vsa-rad-discnct.html</A><BR /><A href="https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_tacacs/configuration/xe-16/sec-usr-tacacs-xe-16-book/sec-usr-tacacs-att-value-pairs.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_tacacs/configuration/xe-16/sec-usr-tacacs-xe-16-book/sec-usr-tacacs-att-value-pairs.html</A> Wed, 19 Feb 2020 12:58:25 GMT Mike.Cifelli 2020-02-19T12:58:25Z https://community.cisco.com/t5/network-access-control/cisco-av-pair/m-p/4032121#M453857 <P>Hello,</P><P>&nbsp;</P><P>Could anyone please explain to me what AV pairs mean and what they are used for?</P> Wed, 19 Feb 2020 10:25:16 GMT https://community.cisco.com/t5/network-access-control/cisco-av-pair/m-p/4032121#M453857 Nub65 2020-02-19T10:25:16Z https://community.cisco.com/t5/network-access-control/cisco-av-pair/m-p/4032268#M453859 AV in AV-Pair stands for attribute-value. Some types of examples include TACACS+ and RADIUS AV pairs. These AV pairs can be utilized to define specific authentication, authorization, and accounting elements for each individual session. Something else that you may stumble upon are VSAs which are vendor specific attributes. Attribute 26 was defined for communicating vendor specific information. This attribute encapsulates vendor specific attributes which essentially allows vendors to support their own extended attributes. Take a peek at the following to gain a better understanding:<BR /><A href="https://tools.ietf.org/html/rfc2865#page-63" target="_blank">https://tools.ietf.org/html/rfc2865#page-63</A><BR /><A href="https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_radatt/configuration/xe-16/sec-usr-radatt-xe-16-book/sec-vsa-rad-discnct.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_radatt/configuration/xe-16/sec-usr-radatt-xe-16-book/sec-vsa-rad-discnct.html</A><BR /><A href="https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_tacacs/configuration/xe-16/sec-usr-tacacs-xe-16-book/sec-usr-tacacs-att-value-pairs.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_tacacs/configuration/xe-16/sec-usr-tacacs-xe-16-book/sec-usr-tacacs-att-value-pairs.html</A> Wed, 19 Feb 2020 12:58:25 GMT https://community.cisco.com/t5/network-access-control/cisco-av-pair/m-p/4032268#M453859 Mike.Cifelli 2020-02-19T12:58:25Z