Solved: Cisco AV Pair

Nub65 · ‎02-19-2020

Hello,

Could anyone please explain to me what AV pairs mean and what they are used for?

Mike.Cifelli · ‎02-19-2020

AV in AV-Pair stands for attribute-value. Some types of examples include TACACS+ and RADIUS AV pairs. These AV pairs can be utilized to define specific authentication, authorization, and accounting elements for each individual session. Something else that you may stumble upon are VSAs which are vendor specific attributes. Attribute 26 was defined for communicating vendor specific information. This attribute encapsulates vendor specific attributes which essentially allows vendors to support their own extended attributes. Take a peek at the following to gain a better understanding:
https://tools.ietf.org/html/rfc2865#page-63
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_radatt/configuration/xe-16/sec-usr-radatt-xe-16-book/sec-vsa-rad-discnct.html
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_tacacs/configuration/xe-16/sec-usr-tacacs-xe-16-book/sec-usr-tacacs-att-value-pairs.html

Mike.Cifelli · ‎02-19-2020

AV in AV-Pair stands for attribute-value. Some types of examples include TACACS+ and RADIUS AV pairs. These AV pairs can be utilized to define specific authentication, authorization, and accounting elements for each individual session. Something else that you may stumble upon are VSAs which are vendor specific attributes. Attribute 26 was defined for communicating vendor specific information. This attribute encapsulates vendor specific attributes which essentially allows vendors to support their own extended attributes. Take a peek at the following to gain a better understanding:
https://tools.ietf.org/html/rfc2865#page-63
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_radatt/configuration/xe-16/sec-usr-radatt-xe-16-book/sec-vsa-rad-discnct.html
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_tacacs/configuration/xe-16/sec-usr-tacacs-xe-16-book/sec-usr-tacacs-att-value-pairs.html