Add a comment from IANA assignments, whitspace changes.
[obnox/wireshark/wip.git] / radius / dictionary
1 #
2 # Version $Id$
3 #
4 #   This is derived from the FreeRADIUS dictionary
5 #   http://www.freeradius.org
6 #
7 #       This file contains dictionary translations for parsing
8 #       radius packets.  All transactions are
9 #       composed of Attribute/Value Pairs.  
10 #
11 #
12 #  Valid data types are:
13 #
14 #       string  - 0-253 octets
15 #       ipaddr  - 4 octets in network byte order
16 #       integer - 32 bit value in big endian order (high byte first)
17 #             (wireshark uses this type for non-standard 1-2-3 and 8 byte integers as well)
18 #       date    - 32 bit value in big endian order - seconds since
19 #                                       00:00:00 GMT,  Jan.  1,  1970
20 #       ifid    - 8 octets in network byte order
21 #       ipv6addr   - 16 octets in network byte order
22 #       ipv6prefix - 18 octets in network byte order
23 #       octets  - raw octets, printed as hex strings
24 #       byte     - one-octet unsigned integer
25 #       short    - two-octet unsigned integer in network byte order
26 #       signed   - 4-octet signed integer in network byte order.
27 #       combo-ip - if length 4, is the same as the "ipaddr" type.
28 #                  if length 16, is the same as "ipv6addr" type.
29 #       tlv      - encapsulated sub-attributes
30 #                  i.e. Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv.
31 #
32
33 $INCLUDE dictionary.3com
34 $INCLUDE dictionary.3gpp
35 $INCLUDE dictionary.3gpp2
36 $INCLUDE dictionary.acc
37 $INCLUDE dictionary.alcatel
38 $INCLUDE dictionary.alteon
39 $INCLUDE dictionary.altiga
40 $INCLUDE dictionary.aptis
41 $INCLUDE dictionary.aruba
42 $INCLUDE dictionary.bay
43 $INCLUDE dictionary.bintec
44 $INCLUDE dictionary.cablelabs
45 $INCLUDE dictionary.cabletron
46 $INCLUDE dictionary.cisco
47 $INCLUDE dictionary.cisco.vpn3000
48 $INCLUDE dictionary.cisco.vpn5000
49 $INCLUDE dictionary.cisco.bbsm
50 $INCLUDE dictionary.cosine
51 $INCLUDE dictionary.colubris
52 $INCLUDE dictionary.columbia_university
53 $INCLUDE dictionary.ericsson
54 $INCLUDE dictionary.erx
55 $INCLUDE dictionary.extreme
56 $INCLUDE dictionary.freeradius
57 $INCLUDE dictionary.foundry
58 $INCLUDE dictionary.gandalf
59 $INCLUDE dictionary.garderos
60 $INCLUDE dictionary.gemtek
61 $INCLUDE dictionary.itk
62 $INCLUDE dictionary.juniper
63 $INCLUDE dictionary.karlnet
64 $INCLUDE dictionary.livingston
65 $INCLUDE dictionary.localweb
66 $INCLUDE dictionary.merit
67 $INCLUDE dictionary.microsoft
68 $INCLUDE dictionary.mikrotik
69 $INCLUDE dictionary.navini
70 $INCLUDE dictionary.nomadix
71 $INCLUDE dictionary.netscreen
72 $INCLUDE dictionary.propel
73 $INCLUDE dictionary.quintum
74 $INCLUDE dictionary.redback
75 $INCLUDE dictionary.redcreek
76 $INCLUDE dictionary.shasta
77 $INCLUDE dictionary.shiva
78 $INCLUDE dictionary.sonicwall
79 $INCLUDE dictionary.springtide
80 $INCLUDE dictionary.t_systems_nova
81 $INCLUDE dictionary.telebit
82 $INCLUDE dictionary.trapeze
83 $INCLUDE dictionary.tunnel
84 $INCLUDE dictionary.unisphere
85 $INCLUDE dictionary.valemount
86 $INCLUDE dictionary.versanet
87 $INCLUDE dictionary.wispr
88 $INCLUDE dictionary.xedia
89
90 # nokia an ascend use non-vendor avps
91 # activate either one or the other as some attributes have common codes
92 #$INCLUDE dictionary.nokia
93 $INCLUDE dictionary.ascend
94
95 # we do not support 16bit attribute codes yet
96 $INCLUDE dictionary.usr
97 $INCLUDE dictionary.starent
98 $INCLUDE dictionary.wimax
99
100 #
101 #       The following are the proper new names. Use these.
102 #
103 #       http://www.iana.org/assignments/radius-types
104 #
105 ATTRIBUTE       User-Name                                       1       string
106 ATTRIBUTE       User-Password                           2       string encrypt=1
107 ATTRIBUTE       CHAP-Password                           3       octets
108 ATTRIBUTE       NAS-IP-Address                          4       ipaddr
109 ATTRIBUTE       NAS-Port                                        5       integer
110 ATTRIBUTE       Service-Type                            6       integer
111 ATTRIBUTE       Framed-Protocol                         7       integer
112 ATTRIBUTE       Framed-IP-Address                       8       ipaddr
113 ATTRIBUTE       Framed-IP-Netmask                       9       ipaddr
114 ATTRIBUTE       Framed-Routing                          10      integer
115 ATTRIBUTE       Filter-Id                                       11      string
116 ATTRIBUTE       Framed-MTU                                      12      integer
117 ATTRIBUTE       Framed-Compression                      13      integer
118 ATTRIBUTE       Login-IP-Host                           14      ipaddr
119 ATTRIBUTE       Login-Service                           15      integer
120 ATTRIBUTE       Login-TCP-Port                          16      integer
121 ATTRIBUTE       Reply-Message                           18      string
122 ATTRIBUTE       Callback-Number                         19      string
123 ATTRIBUTE       Callback-Id                                     20      string
124 ATTRIBUTE       Framed-Route                            22      string
125 ATTRIBUTE       Framed-IPX-Network                      23      ipaddr
126 ATTRIBUTE       State                                           24      octets
127 ATTRIBUTE       Class                                           25      octets
128 ATTRIBUTE       Vendor-Specific                         26      octets
129 ATTRIBUTE       Session-Timeout                         27      integer
130 ATTRIBUTE       Idle-Timeout                            28      integer
131 ATTRIBUTE       Termination-Action                      29      integer
132 ATTRIBUTE       Called-Station-Id                       30      string
133 ATTRIBUTE       Calling-Station-Id                      31      string
134 ATTRIBUTE       NAS-Identifier                          32      string
135 ATTRIBUTE       Proxy-State                                     33      octets
136 ATTRIBUTE       Login-LAT-Service                       34      string
137 ATTRIBUTE       Login-LAT-Node                          35      string
138 ATTRIBUTE       Login-LAT-Group                         36      octets
139 ATTRIBUTE       Framed-AppleTalk-Link           37      integer
140 ATTRIBUTE       Framed-AppleTalk-Network        38      integer
141 ATTRIBUTE       Framed-AppleTalk-Zone           39      string
142
143 ATTRIBUTE       Acct-Status-Type                        40      integer
144 ATTRIBUTE       Acct-Delay-Time                         41      integer
145 ATTRIBUTE       Acct-Input-Octets                       42      integer
146 ATTRIBUTE       Acct-Output-Octets                      43      integer
147 ATTRIBUTE       Acct-Session-Id                         44      string
148 ATTRIBUTE       Acct-Authentic                          45      integer
149 ATTRIBUTE       Acct-Session-Time                       46      integer
150 ATTRIBUTE   Acct-Input-Packets                  47      integer
151 ATTRIBUTE   Acct-Output-Packets                 48      integer
152 ATTRIBUTE       Acct-Terminate-Cause            49      integer
153 ATTRIBUTE       Acct-Multi-Session-Id           50      string
154 ATTRIBUTE       Acct-Link-Count                         51      integer
155 ATTRIBUTE       Acct-Input-Gigawords            52  integer
156 ATTRIBUTE       Acct-Output-Gigawords           53  integer
157 ATTRIBUTE       Event-Timestamp                         55  date
158 ATTRIBUTE       Egress-VLANID                           56      integer
159 ATTRIBUTE       Ingress-Filters                         57      integer
160 ATTRIBUTE       Egress-VLAN-Name                        58      string
161 ATTRIBUTE       User-Priority-Table                     59      octets # 8
162 ATTRIBUTE       CHAP-Challenge                          60      octets
163 ATTRIBUTE       NAS-Port-Type                           61      integer
164 ATTRIBUTE       Port-Limit                                      62      integer
165 ATTRIBUTE       Login-LAT-Port                          63      integer
166 ATTRIBUTE       Tunnel-Type                                     64      integer 
167 ATTRIBUTE       Tunnel-Medium-Type                      65      integer 
168 ATTRIBUTE       Tunnel-Client-Endpoint          66      string  
169 ATTRIBUTE       Tunnel-Server-Endpoint          67      string  
170 ATTRIBUTE       Acct-Tunnel-Connection          68      string
171
172 ATTRIBUTE       ARAP-Password                           70  string
173 ATTRIBUTE       ARAP-Features                           71  string
174 ATTRIBUTE       ARAP-Zone-Access                        72  integer
175 ATTRIBUTE       ARAP-Security                           73  integer
176 ATTRIBUTE       ARAP-Security-Data                      74  string
177 ATTRIBUTE       Password-Retry                          75  integer
178 ATTRIBUTE       Prompt                                          76  integer
179 ATTRIBUTE       Connect-Info                            77      string
180 ATTRIBUTE       Configuration-Token                     78      string
181 ATTRIBUTE       EAP-Message                                     79      octets
182 ATTRIBUTE       Message-Authenticator           80      octets
183 ATTRIBUTE       ARAP-Challenge-Response         84      string  # 10 octets
184 ATTRIBUTE       Acct-Interim-Interval           85  integer
185 ATTRIBUTE       Acct-Tunnel-Packets-Lost        86      integer
186 ATTRIBUTE       NAS-Port-Id                                     87      string
187 ATTRIBUTE       Framed-Pool                                     88      string
188 ATTRIBUTE       Chargeable-User-Identity        89      string
189 ATTRIBUTE       Tunnel-Server-Auth-Id           91      string
190 ATTRIBUTE       NAS-Filter-Rule                         92      string
191 ATTRIBUTE       NAS-IPv6-Address                        95      ipv6addr
192 ATTRIBUTE       Framed-Interface-Id                     96      ifid
193 ATTRIBUTE       Framed-IPv6-Prefix                      97      ipv6prefix
194 ATTRIBUTE       Login-IPv6-Host                         98      ipv6addr
195 ATTRIBUTE       Framed-IPv6-Route                       99      string
196 ATTRIBUTE       Framed-IPv6-Pool                        100     string
197
198 #  As defined in RFC 3576
199 ATTRIBUTE       Error-Cause                                     101     integer
200
201 ATTRIBUTE       EAP-Key-Name                            102     string
202
203 #  As defined in RFC 4590
204 ATTRIBUTE       Digest-Response                         103     string
205 ATTRIBUTE       Digest-Realm                            104     string
206 ATTRIBUTE       Digest-Nonce                            105     string
207 ATTRIBUTE       Digest-Nextnonce                        106     string
208 ATTRIBUTE       Digest-Response-Auth            107     string
209 ATTRIBUTE       Digest-Method                           108     string
210 ATTRIBUTE       Digest-URI                                      109     string
211 ATTRIBUTE       Digest-Qop                                      110     string
212 ATTRIBUTE       Digest-Algorithm                        111     string
213 ATTRIBUTE       Digest-Entity-Body-Hash         112     string
214 ATTRIBUTE       Digest-CNonce                           113     string
215 ATTRIBUTE       Digest-Nonce-Count                      114     string
216 ATTRIBUTE       Digest-Username                         115     string
217 ATTRIBUTE       Digest-Opaque                           116     string
218 ATTRIBUTE       Digest-Auth-Param                       117     string
219 ATTRIBUTE       Digest-AKA-Auts                         118     string
220 ATTRIBUTE       Digest-Domain                           119     string
221 ATTRIBUTE       Digest-Stale                            120     string
222 ATTRIBUTE       Digest-HA1                                      121     string
223 ATTRIBUTE       SIP-AOR                                         122     string
224 # http://www.iana.org/assignments/radius-types 2009-04-24
225 #123       Delegated-IPv6-Prefix                    [RFC4818]
226 #124       MIP6-Feature-Vector                      [RFC5447]
227 #125       MIP6-Home-Link-Prefix                    [RFC5447]
228 #126-191   Unassigned
229 #192-223   Experimental Use                         [RFC3575]
230 #224-240   Implementation Specific                  [RFC3575]
231 #241-255   Reserved                                 [RFC3575]   
232
233 #  As defined in RFC 4818
234 ATTRIBUTE       Delegated-IPv6-Prefix   123     ipv6prefix
235
236 #  As defined in draft-sterman-aaa-sip-00.txt
237 ATTRIBUTE       Digest-Response         206     string
238 ATTRIBUTE       Digest-Attributes       207     octets  # stupid format
239
240
241 #
242 #       Integer Translations
243 #
244
245 #       User Types
246
247 VALUE           Service-Type            Login-User                              1
248 VALUE           Service-Type            Framed-User                             2
249 VALUE           Service-Type            Callback-Login-User             3
250 VALUE           Service-Type            Callback-Framed-User    4
251 VALUE           Service-Type            Outbound-User                   5
252 VALUE           Service-Type            Administrative-User             6
253 VALUE           Service-Type            NAS-Prompt-User                 7
254 VALUE           Service-Type            Authenticate-Only               8
255 VALUE           Service-Type            Callback-NAS-Prompt             9
256 VALUE           Service-Type            Call-Check                              10
257 VALUE           Service-Type            Callback-Administrative 11
258 VALUE           Service-Type            Voice                                   12
259 VALUE           Service-Type            Fax                                             13
260 VALUE           Service-Type            Modem-Relay                             14
261 VALUE           Service-Type            IAPP-Register                   15
262 VALUE           Service-Type            IAPP-AP-Check                   16
263 VALUE           Service-Type            Authorize-Only                  17
264
265
266 #       Framed Protocols
267
268 VALUE           Framed-Protocol         PPP                                     1
269 VALUE           Framed-Protocol         SLIP                            2
270 VALUE           Framed-Protocol         ARAP                            3
271 VALUE           Framed-Protocol         Gandalf-SLML            4
272 VALUE           Framed-Protocol         Xylogics-IPX-SLIP       5
273 VALUE           Framed-Protocol         X.75-Synchronous        6
274 VALUE           Framed-Protocol         GPRS-PDP-Context        7
275
276 #       Framed Routing Values
277
278 VALUE           Framed-Routing          None                    0
279 VALUE           Framed-Routing          Broadcast               1
280 VALUE           Framed-Routing          Listen                  2
281 VALUE           Framed-Routing          Broadcast-Listen        3
282
283 #       Framed Compression Types
284
285 VALUE           Framed-Compression      None                    0
286 VALUE           Framed-Compression      Van-Jacobson-TCP-IP     1
287 VALUE           Framed-Compression      IPX-Header-Compression  2
288 VALUE           Framed-Compression      Stac-LZS                3
289
290 #       Login Services
291
292 VALUE           Login-Service           Telnet                  0
293 VALUE           Login-Service           Rlogin                  1
294 VALUE           Login-Service           TCP-Clear               2
295 VALUE           Login-Service           PortMaster              3
296 VALUE           Login-Service           LAT                     4
297 VALUE           Login-Service           X25-PAD                 5
298 VALUE           Login-Service           X25-T3POS               6
299 VALUE           Login-Service           TCP-Clear-Quiet         7
300
301 #       Login-TCP-Port          (see /etc/services for more examples)
302
303 VALUE           Login-TCP-Port          Telnet                  23
304 VALUE           Login-TCP-Port          Rlogin                  513
305 VALUE           Login-TCP-Port          Rsh                     514
306
307 #       Status Types
308
309 VALUE           Acct-Status-Type        Start                           1
310 VALUE           Acct-Status-Type        Stop                            2
311 VALUE           Acct-Status-Type        Interim-Update          3
312 VALUE           Acct-Status-Type        Alive                           3
313 VALUE           Acct-Status-Type        Accounting-On           7
314 VALUE           Acct-Status-Type        Accounting-Off          8
315 #       RFC 2867 Additional Status-Type Values
316 VALUE           Acct-Status-Type        Tunnel-Start            9
317 VALUE           Acct-Status-Type        Tunnel-Stop                     10
318 VALUE           Acct-Status-Type        Tunnel-Reject           11
319 VALUE           Acct-Status-Type        Tunnel-Link-Start       12
320 VALUE           Acct-Status-Type        Tunnel-Link-Stop        13
321 VALUE           Acct-Status-Type        Tunnel-Link-Reject      14
322 VALUE           Acct-Status-Type        Failed                          15
323
324 #       Authentication Types
325
326 VALUE           Acct-Authentic          RADIUS                  1
327 VALUE           Acct-Authentic          Local                   2
328 VALUE           Acct-Authentic          Remote                  3
329 VALUE           Acct-Authentic          Diameter                4
330
331 VALUE   Ingress-Filters                 Enabled                 1
332 VALUE   Ingress-Filters                 Disabled                2
333
334 #       Tunnel Type
335
336 VALUE   Tunnel-Type                     PPTP                    1
337 VALUE   Tunnel-Type                     L2F                             2
338 VALUE   Tunnel-Type                     L2TP                    3
339 VALUE   Tunnel-Type                     ATMP                    4
340 VALUE   Tunnel-Type                     VTP                             5
341 VALUE   Tunnel-Type                     AH                              6
342 VALUE   Tunnel-Type                     IP                              7
343 VALUE   Tunnel-Type                     MIN-IP                  8
344 VALUE   Tunnel-Type                     ESP                             9
345 VALUE   Tunnel-Type                     GRE                             10
346 VALUE   Tunnel-Type                     DVS                             11
347 VALUE   Tunnel-Type                     IP-in-IP                12
348 VALUE   Tunnel-Type                     VLAN                    13
349 #       Tunnel Medium Type
350
351 VALUE   Tunnel-Medium-Type              IPv4                    1
352 VALUE   Tunnel-Medium-Type              IPv6                    2
353 VALUE   Tunnel-Medium-Type              NSAP                    3
354 VALUE   Tunnel-Medium-Type              HDLC                    4
355 VALUE   Tunnel-Medium-Type              BBN-1822                5
356 VALUE   Tunnel-Medium-Type              IEEE-802                6
357 VALUE   Tunnel-Medium-Type              E.163                   7
358 VALUE   Tunnel-Medium-Type              E.164                   8
359 VALUE   Tunnel-Medium-Type              F.69                    9
360 VALUE   Tunnel-Medium-Type              X.121                   10
361 VALUE   Tunnel-Medium-Type              IPX                             11
362 VALUE   Tunnel-Medium-Type              Appletalk               12
363 VALUE   Tunnel-Medium-Type              DecNet-IV               13
364 VALUE   Tunnel-Medium-Type              Banyan-Vines    14
365 VALUE   Tunnel-Medium-Type              E.164-NSAP              15
366
367 #       ARAP Zone Access
368
369 VALUE   ARAP-Zone-Access                Default-Zone            1
370 VALUE   ARAP-Zone-Access                Zone-Filter-Inclusive   2
371 VALUE   ARAP-Zone-Access                Zone-Filter-Exclusive   4
372
373 #       Prompt
374 VALUE   Prompt                          No-Echo                 0
375 VALUE   Prompt                          Echo                    1
376
377 #       Termination Options
378
379 VALUE           Termination-Action      Default                 0
380 VALUE           Termination-Action      RADIUS-Request          1
381
382 #       NAS Port Types
383
384 VALUE           NAS-Port-Type           Async                   0
385 VALUE           NAS-Port-Type           Sync                    1
386 VALUE           NAS-Port-Type           ISDN                    2
387 VALUE           NAS-Port-Type           ISDN-V120               3
388 VALUE           NAS-Port-Type           ISDN-V110               4
389 VALUE           NAS-Port-Type           Virtual                 5
390 VALUE           NAS-Port-Type           PIAFS                   6
391 VALUE           NAS-Port-Type           HDLC-Clear-Channel      7
392 VALUE           NAS-Port-Type           X.25                    8
393 VALUE           NAS-Port-Type           X.75                    9
394 VALUE           NAS-Port-Type           G.3-Fax                 10
395 VALUE           NAS-Port-Type           SDSL                    11
396 VALUE           NAS-Port-Type           ADSL-CAP                12
397 VALUE           NAS-Port-Type           ADSL-DMT                13
398 VALUE           NAS-Port-Type           IDSL                    14
399 VALUE           NAS-Port-Type           Ethernet                15
400 VALUE           NAS-Port-Type           xDSL                    16
401 VALUE           NAS-Port-Type           Cable                   17
402 VALUE           NAS-Port-Type           Wireless-Other          18
403 VALUE           NAS-Port-Type           Wireless-802.11         19
404 VALUE           NAS-Port-Type           Token-Ring              20
405 VALUE           NAS-Port-Type           FDDI                    21
406 VALUE           NAS-Port-Type           Wireless-CDMA2000       22
407 VALUE           NAS-Port-Type           Wireless-UMTS           23
408 VALUE           NAS-Port-Type           Wireless-1X-EV          24
409 VALUE           NAS-Port-Type           IAPP                    25
410 VALUE           NAS-Port-Type           FTTP                    26
411
412 #       Acct Terminate Causes
413
414 VALUE       Acct-Terminate-Cause    User-Request            1
415 VALUE       Acct-Terminate-Cause    Lost-Carrier            2
416 VALUE       Acct-Terminate-Cause    Lost-Service            3
417 VALUE       Acct-Terminate-Cause    Idle-Timeout            4
418 VALUE       Acct-Terminate-Cause    Session-Timeout         5
419 VALUE       Acct-Terminate-Cause    Admin-Reset             6
420 VALUE       Acct-Terminate-Cause    Admin-Reboot            7
421 VALUE       Acct-Terminate-Cause    Port-Error              8
422 VALUE       Acct-Terminate-Cause    NAS-Error               9
423 VALUE       Acct-Terminate-Cause    NAS-Request             10
424 VALUE       Acct-Terminate-Cause    NAS-Reboot              11
425 VALUE       Acct-Terminate-Cause    Port-Unneeded           12
426 VALUE       Acct-Terminate-Cause    Port-Preempted          13
427 VALUE       Acct-Terminate-Cause    Port-Suspended          14
428 VALUE       Acct-Terminate-Cause    Service-Unavailable     15
429 VALUE       Acct-Terminate-Cause    Callback                16
430 VALUE       Acct-Terminate-Cause    User-Error              17
431 VALUE       Acct-Terminate-Cause    Host-Request            18
432 VALUE           Acct-Terminate-Cause    Supplicant-Restart              19
433 VALUE           Acct-Terminate-Cause    Reauthentication-Failure 20
434 VALUE           Acct-Terminate-Cause    Port-Reinit                             21
435 VALUE           Acct-Terminate-Cause    Port-Disabled                   22
436
437 VALUE           Prompt                  No-Echo                 0
438 VALUE           Prompt                  Echo                    1
439
440 #
441 #       Error causes
442 #
443 VALUE           Error-Cause             Residual-Context-Removed                                201
444 VALUE           Error-Cause             Invalid-EAP-Packet                                              202
445 VALUE           Error-Cause             Unsupported-Attribute                                   401
446 VALUE           Error-Cause             Missing-Attribute                                               402
447 VALUE           Error-Cause             NAS-Identification-Mismatch                             403
448 VALUE           Error-Cause             Invalid-Request                                                 404
449 VALUE           Error-Cause             Unsupported-Service                                             405
450 VALUE           Error-Cause             Unsupported-Extension                                   406
451 VALUE           Error-Cause             Invalid-Attribute-Value                                 407
452 VALUE           Error-Cause             Administratively-Prohibited                             501
453 VALUE           Error-Cause             Proxy-Request-Not-Routable                              502
454 VALUE           Error-Cause             Session-Context-Not-Found                               503
455 VALUE           Error-Cause             Session-Context-Not-Removable                   504
456 VALUE           Error-Cause             Proxy-Processing-Error                                  505
457 VALUE           Error-Cause             Resources-Unavailable                                   506
458 VALUE           Error-Cause             Request-Initiated                                               507
459 VALUE           Error-Cause             Multiple-Session-Selection-Unsupported  508