Govroam

From RFC3580:

3.20.  Called-Station-Id

   For IEEE 802.1X Authenticators, this attribute is used to store the
   bridge or Access Point MAC address in ASCII format (upper case only),
   with octet values separated by a "-".  Example: "00-10-A4-23-19-C0".
   In IEEE 802.11, where the SSID is known, it SHOULD be appended to the
   Access Point MAC address, separated from the MAC address with a ":".
   Example "00-10-A4-23-19-C0:AP1".

This isn't required as part of the Govroam Tech Spec but it is a very useful attribute to have sent to the NRPS. The MAC can be used in debugging to identify the type of wireless system being used but the most important information is the SSID appended to the MAC.

The SSID has to be 'govroam' verbatim. SSIDs are case sensitive. “Govroam” is not the same as “govroam”. We monitor this to ensure compliance. This is particularly important with Federations. All RADIUS systems should be configured to proxy requests with filters set to allow the CSI to pass through.

Sites with wireless systems broadcasting govroam should configure the wireless system to send the CSI with the RFC3580 format (hyphen separated, upper case letters and the SSID appended with a colon separator).

aaa authentication-server radius <rad_server_name>
called-station-id type
  {ap-group | ap-macaddr | ap-name | ipaddr | macaddr | vlan-id}
  [delimiter {colon | dash | none}] [include-ssid {enable |disable}]

eg.

called-station-id type macaddr delimiter dash include-ssid enable

or

1. In the WLAN SSID configuration wizard, click the Security tab.
2. In Security Level, select Open.
3. From the Key Management drop-down list, select Open or Enhanced Open.
4. Click Advanced Settings
5. Click Next.