# CLI AAA Messages

There are four types of AAA messages used by CLI users to gain administrative access to the router. Access-Challenge attributes pertain only to CLI/telnet users.

- Access-Request
- Access-Accept
- Access-Challenge
- Access-Reject

Table 43 lists the RADIUS attributes supported for CLI AAA messages.

Table 43: CLI AAA Access Message RADIUS Attributes Supported

Attribute Number | Attribute Name | Access-Request | Access-Accept | Access-Challenge | Access-Reject
--- | --- | --- | --- | --- | ---
[1] | User-Name | ✓ | – | – | –
[2] | User Password | ✓ | – | – | –
[4] | NAS-IP-Address | ✓ | – | – | –
[6] | Service-Type | ✓ | ✓ | – | –
[18] | Reply-Message | – | – | ✓ | ✓
[24] | State (Access-Request is only in response to an Access-Challenge) | ✓ | – | ✓ | –
[25] | Class | – | ✓ | – | –
[26-1] | Virtual-Router | – | ✓ | – | –
[26-18] | Init-CLI-Access-Level | – | ✓ | – | –
[26-19] | Allow-All-VR-Access | – | ✓ | – | –
[26-20] | Alt-CLI-Access-Level | – | ✓ | – | –
[26-21] | Alt-CLI-Virtual-Router-Name | – | ✓ | – | –
[26-25] | Redirect-Vrouter-Name | – | ✓ | – | –