Cisco ACS Radius - How to disable sending the class attribute

[admin_2]

The Cisco ACS radius server send me an access accept message, but it's

including also attribute #25 ( class type ), even if I unchecked it

for both User and Group check box , under the Interface configuration

- Radius (IETF).

Is there a way to force the ACS to not include the class type in the

access accept message ?

[gfullage]

ACS sends a Class attribute in every request, it uses it for Accounting purposes and there's no way to turn it off.

The Radius RFC states that every NAS has to return any received Class attribute unchanged to the server in any future Accounting packets, so this way ACS can more easily keep track of particular sessions for Accounting, Max Sessions, Logged-In Users, etc.

It shouldn't be having any effect on your Radius client though, as they should ignore it. What client is it and what effect are you seeing?