4.3 Access-Reject

4.3. Access-Reject

Description

  If any value of the received Attributes is not acceptable, then
  the RADIUS server MUST transmit a packet with the Code field set
  to 3 (Access-Reject).  It MAY include one or more Reply-Message
  Attributes with a text message which the NAS MAY display to the
  user.

A summary of the Access-Reject packet format is shown below. The fields are transmitted from left to right.

0                   1                   2                   3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

Code

  3 for Access-Reject.

Identifier

  The Identifier field is a copy of the Identifier field of the
  Access-Request which caused this Access-Reject.

Response Authenticator

  The Response Authenticator value is calculated from the Access-
  Request value, as described earlier.

Attributes

  The Attribute field is variable in length, and contains a list of
  zero or more Attributes.