How to add F5 vendor specific Radius attirbutes to Windows 2008 NPS to authorize external users to different roles

I was just playing with this and I know this question is really old but I wanted to put an answer here anyway.

I'm in Windows Server 2012 R2, I configured NPS

Policies>>Network Policies (right click on this) New Give it a policy name Assign the user group to it that will have these permissions

Now the fun part. Under "RADIUS Attributes" it says "Standard" or "Vendor Specific" Select "Vendor Specific" and "Add" Vendor Drop down is "Custom", Attributes is "Vendor-Specific" click "Add"

Now you want to Add a vendor specific attribute, this will apply to this whole group.

Click Enter Vendor Code and give it code of 3375 Check "Yes. It conforms" Click "Configure attribute"

The attribute number will be whatever attribute in this list that you want to set: ATTRIBUTE F5-LTM-User-Role 1 integer ATTRIBUTE F5-LTM-User-Role-Universal 2 integer enable/disable ATTRIBUTE F5-LTM-User-Partition 3 string ATTRIBUTE F5-LTM-User-Console 4 integer enable/disable ATTRIBUTE F5-LTM-User-Shell 5 string supported values are disable, tmsh and bpsh ATTRIBUTE F5-LTM-User-Context-1 10 integer ATTRIBUTE F5-LTM-User-Context-2 11 integer ATTRIBUTE F5-LTM-User-Info-1 12 string ATTRIBUTE F5-LTM-User-Info-2 13 string ATTRIBUTE F5-LTM-Audit-Msg 14 string

So for example if I wanted to configure F5-LTM-User-Role I would set the Vendor-assigned attribute number to 1

Attribute format is decimal (noted as integer above) Attribute value depends on what role I want in this case (reference the SOL for various options). In this use case I put in 700 because I wanted Guest access.

Now click add again (same code, yes conforms), if I want to set partition then my value is 3 and my attribute type is a string with a value of the partition name (e.g. Common)