Get the strength and security of RADIUS without building, maintaining, or monitoring physical servers. It\u2019s quick to roll out managed RADIUS to your organization to authenticate users to Wi-Fi, VPNs, switches, and network devices securely. Read this article to learn how to use functions in the JumpCloud PowerShell Module to configure RADIUS Reply Attributes like VLAN tagging for user groups. <\/p>\n\n\n\n
To configure RADIUS Reply Attributes for User Groups, read Configure Radius Reply Attributes for User Groups<\/a>.<\/p>\n\n\n\n
Definition of terms:<\/p>\n\n\n\n
Four functions in the JumpCloud PowerShell module allow admins to add, update, remove, and report on user groups and their RADIUS reply attributes. <\/p>\n\n\n\n
Example 1<\/strong><\/p>\n\n\n\n
Add-JCRadiusReplyAttribute -GroupName “BoulderOffice” -VLAN 24<\/p>\n<\/div><\/div>\n\n\n\n
By specifying the ‘-VLAN’ parameter, three RADIUS attributes are added to the JumpCloud user group ‘BoulderOffice’.<\/p>\n\n\n\n
“radius”: {
\u00a0\u00a0\u00a0\u00a0\u00a0 “reply”: [
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “name”: “Tunnel-Type”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “value”: “VLAN”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “name”: “Tunnel-Private-Group-ID”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “value”: “24”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “name”: “Tunnel-Medium-Type”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 “value”: “IEEE-802”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }
\u00a0\u00a0\u00a0\u00a0\u00a0 ]
\u00a0\u00a0\u00a0 }<\/p>\n<\/div><\/div>\n\n\n\n
The value specified for the ‘-VLAN’ parameter is populated for the value of\u00a0Tunnel-Private-Group-ID<\/strong>.<\/p>\n\n\n\n
Example 2<\/strong><\/p>\n\n\n\n
Add-JCRadiusReplyAttribute -GroupName “BoulderOffice” -VLAN 24 -VLANTag 3<\/p>\n<\/div><\/div>\n\n\n\n
By specifying the ‘-VLAN’ parameter, three RADIUS attributes are added to the JumpCloud user group ‘BoulderOffice’. The use of ‘-VLANTag’ appends each VLAN attribute with a colon and the tag number specified. These attributes are:<\/p>\n\n\n\n
“radius”: {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“reply”: [
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Tunnel-Type:3”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “VLAN”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Tunnel-Private-Group-ID:3”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “24”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Tunnel-Medium-Type:3”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “IEEE-802”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0]
\u00a0\u00a0\u00a0\u00a0}<\/p>\n<\/div><\/div>\n\n\n\n
The value specified for the ‘-VLAN’ parameter is populated for the value of Tunnel-Private-Group-ID<\/strong>.<\/p>\n\n\n\n
Tags must be an integer between 1-31, to comply with RFC 2868<\/a>, which states that the tag field must be a single octet in length.<\/p>\n\n\n\n
Example 3<\/strong><\/p>\n\n\n\n
Add-JCRadiusReplyAttribute -GroupName “BoulderOffice” -NumberOfAttributes 2 -Attribute1_name “Session-Timeout” -Attribute1_value 100 -Attribute2_name “Termination-Action” -Attribute2_value 1<\/p>\n<\/div><\/div>\n\n\n\n
Adds two RADIUS attributes to the JumpCloud user group ‘BoulderOffice’.<\/p>\n\n\n\n
These attributes are:<\/p>\n\n\n\n
“radius”: {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“reply”: [
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Session-Timeout”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “100”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Termination-Action”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “1”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0]
\u00a0\u00a0\u00a0\u00a0}<\/p>\n<\/div><\/div>\n\n\n\n
The parameter ‘-NumberOfAttributes’ is a dynamic parameter that generates two required parameters for each attribute specified. In this example, these parameters are -Attribute1_name,-Attribute1_value, -Attribute2_name and -Attribute2_value.<\/p>\n\n\n\n
Attributes must be valid RADIUS attributes. Find a list of valid RADIUS attributes in the dictionary files of this repo broken down by vendor<\/a>. If an invalid attribute is configured on a user group, users in the group are prevented from authenticating via RADIUS until the invalid attribute is removed. <\/p>\n\n\n\n
Example 4<\/strong><\/p>\n\n\n\n
Add-JCRadiusReplyAttribute -GroupName “BoulderOffice” -NumberOfAttributes 2 -Attribute1_name “Session-Timeout:3” -Attribute1_value 100 -Attribute2_name “Termination-Action:3” -Attribute2_value 1<\/p>\n<\/div><\/div>\n\n\n\n
Adds two RADIUS attributes to the JumpCloud user group ‘BoulderOffice’ and demonstrates how to configure RADIUS tags using a colon and tag number.<\/p>\n\n\n\n
These attributes are:<\/p>\n\n\n\n
“radius”: {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“reply”: [
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Session-Timeout:3”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “100”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Termination-Action:3”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “1”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0]
\u00a0\u00a0\u00a0\u00a0}<\/p>\n<\/div><\/div>\n\n\n\n
The parameter ‘-NumberOfAttributes’ is a dynamic parameter that generates two required parameters for each attribute specified. In this example, these parameters are -Attribute1_name,-Attribute1_value, -Attribute2_name and -Attribute2_value.<\/p>\n\n\n\n
Attributes must be valid RADIUS attributes. Find a list of valid RADIUS attributes in the dictionary files of this repo broken down by vendor<\/a>. If an invalid attribute is configured on a user group, users in the group are prevented from authenticating. <\/p>\n\n\n\n
Example<\/strong><\/p>\n\n\n\n
Get-JCRadiusReplyAttribute -GroupName “BoulderOffice”<\/p>\n<\/div><\/div>\n\n\n\n
Returns the RADIUS reply attributes associated with the JumpCloud user group ‘BoulderOffice’.<\/p>\n\n\n\n
Example 1<\/strong><\/p>\n\n\n\n
Set-JCRadiusReplyAttribute -GroupName “BoulderOffice” -VLAN 34<\/p>\n<\/div><\/div>\n\n\n\n
By specifying the ‘-VLAN’ parameter three RADIUS attributes are updated on the JumpCloud user group ‘BoulderOffice’.<\/p>\n\n\n\n
These attributes are:<\/p>\n\n\n\n
“radius”: {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“reply”: [
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Tunnel-Type”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “VLAN”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Tunnel-Private-Group-ID”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “34”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Tunnel-Medium-Type”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “IEEE-802”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0]
\u00a0\u00a0\u00a0\u00a0}<\/p>\n<\/div><\/div>\n\n\n\n
The value specified for the ‘-VLAN’ parameter is populated for the value of Tunnel-Private-Group-ID.<\/p>\n\n\n\n
Example 2<\/strong><\/p>\n\n\n\n
Set-JCRadiusReplyAttribute -GroupName “BoulderOffice” -NumberOfAttributes 2 -Attribute1_name “Session-Timeout” -Attribute1_value 200 -Attribute2_name “Termination-Action” -Attribute2_value 2<\/p>\n<\/div><\/div>\n\n\n\n
Updates two RADIUS attributes to the JumpCloud user group ‘BoulderOffice’.<\/p>\n\n\n\n
These attributes are:<\/p>\n\n\n\n
“radius”: {
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“reply”: [
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Session-Timeout”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “200”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“name”: “Termination-Action”,
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0“value”: “2”
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0]
\u00a0\u00a0\u00a0\u00a0}<\/p>\n<\/div><\/div>\n\n\n\n
The parameter ‘-NumberOfAttributes’ is a dynamic parameter that generates two required parameters for each attribute specified. In this example these parameters are -Attribute1_name,-Attribute1_value, -Attribute2_name and -Attribute2_value.<\/p>\n\n\n\n
If the Radius reply attribute being updated already exists on the target user group the value for this attribute is updated. If the Radius reply attribute does not exist the attribute is added.<\/p>\n\n\n\n
Attributes must be valid RADIUS attributes. Find a list of valid RADIUS attributes within the dictionary files of this repo broken down by vendor<\/a>. If an invalid attribute is configured on a user group, users in the group are prevented from authenticating. <\/p>\n\n\n\n
Example 1<\/strong><\/p>\n\n\n\n
Remove-JCRadiusReplyAttribute -GroupName “BoulderOffice” -All<\/p>\n<\/div><\/div>\n\n\n\n
Removes all RADIUS reply attributes from the JumpCloud user group ‘BoulderOffice’ using the ‘-All’ parameter.<\/p>\n\n\n\n
Example 2<\/strong><\/p>\n\n\n\n
Remove-JCRadiusReplyAttribute -GroupName “BoulderOffice” -AttributeName “Session-Timeout”, “Termination-Action”<\/p>\n<\/div><\/div>\n\n\n\n
Removes attributes with the name “Session-Timeout”, “Termination-Action” from the target user group ‘BoulderOffice’. To remove multiple attributes at one time separate the attribute names with commas.<\/p>\n\n\n\n
Example 3<\/strong><\/p>\n\n\n\n
Remove-JCRadiusReplyAttribute -GroupName “BoulderOffice” -AttributeName “Tunnel-Type:2”, “Tunnel-Medium-Type:2”, “Tunnel-Private-Group-Id:2”<\/p>\n<\/div><\/div>\n\n\n\n
Removes VLAN attributes that have been added with VLAN tags. The attributes named “Tunnel-Type:2”, “Tunnel-Medium-Type:2”, “Tunnel-Private-Group-Id:2” are removed from the target user group ‘BoulderOffice’.<\/p>\n","protected":false},"excerpt":{"rendered":"
Get the strength and security of RADIUS without building, maintaining, or monitoring physical servers. It\u2019s quick to roll out managed […]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2845,2897],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"\n