4 # This is derived from the FreeRADIUS dictionary
5 # http://www.freeradius.org
7 # This file contains dictionary translations for parsing
8 # radius packets. All transactions are
9 # composed of Attribute/Value Pairs.
12 # Valid data types are:
14 # string - 0-253 octets
15 # ipaddr - 4 octets in network byte order
16 # integer - 32 bit value in big endian order (high byte first)
17 # (wireshark uses this type for non-standard 1-2-3 and 8 byte integers as well)
18 # date - 32 bit value in big endian order - seconds since
19 # 00:00:00 GMT, Jan. 1, 1970
20 # ifid - 8 octets in network byte order
21 # ipv6addr - 16 octets in network byte order
22 # ipv6prefix - 18 octets in network byte order
23 # octets - raw octets, printed as hex strings
24 # byte - one-octet unsigned integer
25 # short - two-octet unsigned integer in network byte order
26 # signed - 4-octet signed integer in network byte order.
27 # combo-ip - if length 4, is the same as the "ipaddr" type.
28 # if length 16, is the same as "ipv6addr" type.
29 # tlv - encapsulated sub-attributes
30 # i.e. Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv.
33 $INCLUDE dictionary.3com
34 $INCLUDE dictionary.3gpp
35 $INCLUDE dictionary.3gpp2
36 $INCLUDE dictionary.acc
37 $INCLUDE dictionary.alcatel
38 $INCLUDE dictionary.alteon
39 $INCLUDE dictionary.altiga
40 $INCLUDE dictionary.aptis
41 $INCLUDE dictionary.aruba
42 $INCLUDE dictionary.bay
43 $INCLUDE dictionary.bintec
44 $INCLUDE dictionary.cablelabs
45 $INCLUDE dictionary.cabletron
46 $INCLUDE dictionary.cisco
47 $INCLUDE dictionary.cisco.vpn3000
48 $INCLUDE dictionary.cisco.vpn5000
49 $INCLUDE dictionary.cisco.bbsm
50 $INCLUDE dictionary.cosine
51 $INCLUDE dictionary.colubris
52 $INCLUDE dictionary.columbia_university
53 $INCLUDE dictionary.ericsson
54 $INCLUDE dictionary.erx
55 $INCLUDE dictionary.extreme
56 $INCLUDE dictionary.freeradius
57 $INCLUDE dictionary.foundry
58 $INCLUDE dictionary.gandalf
59 $INCLUDE dictionary.garderos
60 $INCLUDE dictionary.gemtek
61 $INCLUDE dictionary.itk
62 $INCLUDE dictionary.juniper
63 $INCLUDE dictionary.karlnet
64 $INCLUDE dictionary.livingston
65 $INCLUDE dictionary.localweb
66 $INCLUDE dictionary.merit
67 $INCLUDE dictionary.microsoft
68 $INCLUDE dictionary.mikrotik
69 $INCLUDE dictionary.navini
70 $INCLUDE dictionary.nomadix
71 $INCLUDE dictionary.netscreen
72 $INCLUDE dictionary.propel
73 $INCLUDE dictionary.quintum
74 $INCLUDE dictionary.redback
75 $INCLUDE dictionary.redcreek
76 $INCLUDE dictionary.shasta
77 $INCLUDE dictionary.shiva
78 $INCLUDE dictionary.sonicwall
79 $INCLUDE dictionary.springtide
80 $INCLUDE dictionary.t_systems_nova
81 $INCLUDE dictionary.telebit
82 $INCLUDE dictionary.trapeze
83 $INCLUDE dictionary.tunnel
84 $INCLUDE dictionary.unisphere
85 $INCLUDE dictionary.valemount
86 $INCLUDE dictionary.versanet
87 $INCLUDE dictionary.wispr
88 $INCLUDE dictionary.xedia
90 # nokia an ascend use non-vendor avps
91 # activate either one or the other as some attributes have common codes
92 #$INCLUDE dictionary.nokia
93 $INCLUDE dictionary.ascend
95 # we do not support 16bit attribute codes yet
96 $INCLUDE dictionary.usr
97 $INCLUDE dictionary.starent
98 $INCLUDE dictionary.wimax
101 # The following are the proper new names. Use these.
103 # http://www.iana.org/assignments/radius-types
105 ATTRIBUTE User-Name 1 string
106 ATTRIBUTE User-Password 2 string encrypt=1
107 ATTRIBUTE CHAP-Password 3 octets
108 ATTRIBUTE NAS-IP-Address 4 ipaddr
109 ATTRIBUTE NAS-Port 5 integer
110 ATTRIBUTE Service-Type 6 integer
111 ATTRIBUTE Framed-Protocol 7 integer
112 ATTRIBUTE Framed-IP-Address 8 ipaddr
113 ATTRIBUTE Framed-IP-Netmask 9 ipaddr
114 ATTRIBUTE Framed-Routing 10 integer
115 ATTRIBUTE Filter-Id 11 string
116 ATTRIBUTE Framed-MTU 12 integer
117 ATTRIBUTE Framed-Compression 13 integer
118 ATTRIBUTE Login-IP-Host 14 ipaddr
119 ATTRIBUTE Login-Service 15 integer
120 ATTRIBUTE Login-TCP-Port 16 integer
121 ATTRIBUTE Reply-Message 18 string
122 ATTRIBUTE Callback-Number 19 string
123 ATTRIBUTE Callback-Id 20 string
124 ATTRIBUTE Framed-Route 22 string
125 ATTRIBUTE Framed-IPX-Network 23 ipaddr
126 ATTRIBUTE State 24 octets
127 ATTRIBUTE Class 25 octets
128 ATTRIBUTE Vendor-Specific 26 octets
129 ATTRIBUTE Session-Timeout 27 integer
130 ATTRIBUTE Idle-Timeout 28 integer
131 ATTRIBUTE Termination-Action 29 integer
132 ATTRIBUTE Called-Station-Id 30 string
133 ATTRIBUTE Calling-Station-Id 31 string
134 ATTRIBUTE NAS-Identifier 32 string
135 ATTRIBUTE Proxy-State 33 octets
136 ATTRIBUTE Login-LAT-Service 34 string
137 ATTRIBUTE Login-LAT-Node 35 string
138 ATTRIBUTE Login-LAT-Group 36 octets
139 ATTRIBUTE Framed-AppleTalk-Link 37 integer
140 ATTRIBUTE Framed-AppleTalk-Network 38 integer
141 ATTRIBUTE Framed-AppleTalk-Zone 39 string
143 ATTRIBUTE Acct-Status-Type 40 integer
144 ATTRIBUTE Acct-Delay-Time 41 integer
145 ATTRIBUTE Acct-Input-Octets 42 integer
146 ATTRIBUTE Acct-Output-Octets 43 integer
147 ATTRIBUTE Acct-Session-Id 44 string
148 ATTRIBUTE Acct-Authentic 45 integer
149 ATTRIBUTE Acct-Session-Time 46 integer
150 ATTRIBUTE Acct-Input-Packets 47 integer
151 ATTRIBUTE Acct-Output-Packets 48 integer
152 ATTRIBUTE Acct-Terminate-Cause 49 integer
153 ATTRIBUTE Acct-Multi-Session-Id 50 string
154 ATTRIBUTE Acct-Link-Count 51 integer
155 ATTRIBUTE Acct-Input-Gigawords 52 integer
156 ATTRIBUTE Acct-Output-Gigawords 53 integer
157 ATTRIBUTE Event-Timestamp 55 date
158 ATTRIBUTE Egress-VLANID 56 integer
159 ATTRIBUTE Ingress-Filters 57 integer
160 ATTRIBUTE Egress-VLAN-Name 58 string
161 ATTRIBUTE User-Priority-Table 59 octets # 8
162 ATTRIBUTE CHAP-Challenge 60 octets
163 ATTRIBUTE NAS-Port-Type 61 integer
164 ATTRIBUTE Port-Limit 62 integer
165 ATTRIBUTE Login-LAT-Port 63 integer
166 ATTRIBUTE Tunnel-Type 64 integer
167 ATTRIBUTE Tunnel-Medium-Type 65 integer
168 ATTRIBUTE Tunnel-Client-Endpoint 66 string
169 ATTRIBUTE Tunnel-Server-Endpoint 67 string
170 ATTRIBUTE Acct-Tunnel-Connection 68 string
172 ATTRIBUTE ARAP-Password 70 string
173 ATTRIBUTE ARAP-Features 71 string
174 ATTRIBUTE ARAP-Zone-Access 72 integer
175 ATTRIBUTE ARAP-Security 73 integer
176 ATTRIBUTE ARAP-Security-Data 74 string
177 ATTRIBUTE Password-Retry 75 integer
178 ATTRIBUTE Prompt 76 integer
179 ATTRIBUTE Connect-Info 77 string
180 ATTRIBUTE Configuration-Token 78 string
181 ATTRIBUTE EAP-Message 79 octets
182 ATTRIBUTE Message-Authenticator 80 octets
183 ATTRIBUTE ARAP-Challenge-Response 84 string # 10 octets
184 ATTRIBUTE Acct-Interim-Interval 85 integer
185 ATTRIBUTE Acct-Tunnel-Packets-Lost 86 integer
186 ATTRIBUTE NAS-Port-Id 87 string
187 ATTRIBUTE Framed-Pool 88 string
188 ATTRIBUTE Chargeable-User-Identity 89 string
189 ATTRIBUTE Tunnel-Server-Auth-Id 91 string
190 ATTRIBUTE NAS-Filter-Rule 92 string
191 ATTRIBUTE NAS-IPv6-Address 95 ipv6addr
192 ATTRIBUTE Framed-Interface-Id 96 ifid
193 ATTRIBUTE Framed-IPv6-Prefix 97 ipv6prefix
194 ATTRIBUTE Login-IPv6-Host 98 ipv6addr
195 ATTRIBUTE Framed-IPv6-Route 99 string
196 ATTRIBUTE Framed-IPv6-Pool 100 string
198 # As defined in RFC 3576
199 ATTRIBUTE Error-Cause 101 integer
201 ATTRIBUTE EAP-Key-Name 102 string
203 # As defined in RFC 4590
204 ATTRIBUTE Digest-Response 103 string
205 ATTRIBUTE Digest-Realm 104 string
206 ATTRIBUTE Digest-Nonce 105 string
207 ATTRIBUTE Digest-Nextnonce 106 string
208 ATTRIBUTE Digest-Response-Auth 107 string
209 ATTRIBUTE Digest-Method 108 string
210 ATTRIBUTE Digest-URI 109 string
211 ATTRIBUTE Digest-Qop 110 string
212 ATTRIBUTE Digest-Algorithm 111 string
213 ATTRIBUTE Digest-Entity-Body-Hash 112 string
214 ATTRIBUTE Digest-CNonce 113 string
215 ATTRIBUTE Digest-Nonce-Count 114 string
216 ATTRIBUTE Digest-Username 115 string
217 ATTRIBUTE Digest-Opaque 116 string
218 ATTRIBUTE Digest-Auth-Param 117 string
219 ATTRIBUTE Digest-AKA-Auts 118 string
220 ATTRIBUTE Digest-Domain 119 string
221 ATTRIBUTE Digest-Stale 120 string
222 ATTRIBUTE Digest-HA1 121 string
223 ATTRIBUTE SIP-AOR 122 string
224 # http://www.iana.org/assignments/radius-types 2009-04-24
225 #123 Delegated-IPv6-Prefix [RFC4818]
226 #124 MIP6-Feature-Vector [RFC5447]
227 #125 MIP6-Home-Link-Prefix [RFC5447]
229 #192-223 Experimental Use [RFC3575]
230 #224-240 Implementation Specific [RFC3575]
231 #241-255 Reserved [RFC3575]
233 # As defined in RFC 4818
234 ATTRIBUTE Delegated-IPv6-Prefix 123 ipv6prefix
236 # As defined in draft-sterman-aaa-sip-00.txt
237 ATTRIBUTE Digest-Response 206 string
238 ATTRIBUTE Digest-Attributes 207 octets # stupid format
242 # Integer Translations
247 VALUE Service-Type Login-User 1
248 VALUE Service-Type Framed-User 2
249 VALUE Service-Type Callback-Login-User 3
250 VALUE Service-Type Callback-Framed-User 4
251 VALUE Service-Type Outbound-User 5
252 VALUE Service-Type Administrative-User 6
253 VALUE Service-Type NAS-Prompt-User 7
254 VALUE Service-Type Authenticate-Only 8
255 VALUE Service-Type Callback-NAS-Prompt 9
256 VALUE Service-Type Call-Check 10
257 VALUE Service-Type Callback-Administrative 11
258 VALUE Service-Type Voice 12
259 VALUE Service-Type Fax 13
260 VALUE Service-Type Modem-Relay 14
261 VALUE Service-Type IAPP-Register 15
262 VALUE Service-Type IAPP-AP-Check 16
263 VALUE Service-Type Authorize-Only 17
268 VALUE Framed-Protocol PPP 1
269 VALUE Framed-Protocol SLIP 2
270 VALUE Framed-Protocol ARAP 3
271 VALUE Framed-Protocol Gandalf-SLML 4
272 VALUE Framed-Protocol Xylogics-IPX-SLIP 5
273 VALUE Framed-Protocol X.75-Synchronous 6
274 VALUE Framed-Protocol GPRS-PDP-Context 7
276 # Framed Routing Values
278 VALUE Framed-Routing None 0
279 VALUE Framed-Routing Broadcast 1
280 VALUE Framed-Routing Listen 2
281 VALUE Framed-Routing Broadcast-Listen 3
283 # Framed Compression Types
285 VALUE Framed-Compression None 0
286 VALUE Framed-Compression Van-Jacobson-TCP-IP 1
287 VALUE Framed-Compression IPX-Header-Compression 2
288 VALUE Framed-Compression Stac-LZS 3
292 VALUE Login-Service Telnet 0
293 VALUE Login-Service Rlogin 1
294 VALUE Login-Service TCP-Clear 2
295 VALUE Login-Service PortMaster 3
296 VALUE Login-Service LAT 4
297 VALUE Login-Service X25-PAD 5
298 VALUE Login-Service X25-T3POS 6
299 VALUE Login-Service TCP-Clear-Quiet 7
301 # Login-TCP-Port (see /etc/services for more examples)
303 VALUE Login-TCP-Port Telnet 23
304 VALUE Login-TCP-Port Rlogin 513
305 VALUE Login-TCP-Port Rsh 514
309 VALUE Acct-Status-Type Start 1
310 VALUE Acct-Status-Type Stop 2
311 VALUE Acct-Status-Type Interim-Update 3
312 VALUE Acct-Status-Type Alive 3
313 VALUE Acct-Status-Type Accounting-On 7
314 VALUE Acct-Status-Type Accounting-Off 8
315 # RFC 2867 Additional Status-Type Values
316 VALUE Acct-Status-Type Tunnel-Start 9
317 VALUE Acct-Status-Type Tunnel-Stop 10
318 VALUE Acct-Status-Type Tunnel-Reject 11
319 VALUE Acct-Status-Type Tunnel-Link-Start 12
320 VALUE Acct-Status-Type Tunnel-Link-Stop 13
321 VALUE Acct-Status-Type Tunnel-Link-Reject 14
322 VALUE Acct-Status-Type Failed 15
324 # Authentication Types
326 VALUE Acct-Authentic RADIUS 1
327 VALUE Acct-Authentic Local 2
328 VALUE Acct-Authentic Remote 3
329 VALUE Acct-Authentic Diameter 4
331 VALUE Ingress-Filters Enabled 1
332 VALUE Ingress-Filters Disabled 2
336 VALUE Tunnel-Type PPTP 1
337 VALUE Tunnel-Type L2F 2
338 VALUE Tunnel-Type L2TP 3
339 VALUE Tunnel-Type ATMP 4
340 VALUE Tunnel-Type VTP 5
341 VALUE Tunnel-Type AH 6
342 VALUE Tunnel-Type IP 7
343 VALUE Tunnel-Type MIN-IP 8
344 VALUE Tunnel-Type ESP 9
345 VALUE Tunnel-Type GRE 10
346 VALUE Tunnel-Type DVS 11
347 VALUE Tunnel-Type IP-in-IP 12
348 VALUE Tunnel-Type VLAN 13
351 VALUE Tunnel-Medium-Type IPv4 1
352 VALUE Tunnel-Medium-Type IPv6 2
353 VALUE Tunnel-Medium-Type NSAP 3
354 VALUE Tunnel-Medium-Type HDLC 4
355 VALUE Tunnel-Medium-Type BBN-1822 5
356 VALUE Tunnel-Medium-Type IEEE-802 6
357 VALUE Tunnel-Medium-Type E.163 7
358 VALUE Tunnel-Medium-Type E.164 8
359 VALUE Tunnel-Medium-Type F.69 9
360 VALUE Tunnel-Medium-Type X.121 10
361 VALUE Tunnel-Medium-Type IPX 11
362 VALUE Tunnel-Medium-Type Appletalk 12
363 VALUE Tunnel-Medium-Type DecNet-IV 13
364 VALUE Tunnel-Medium-Type Banyan-Vines 14
365 VALUE Tunnel-Medium-Type E.164-NSAP 15
369 VALUE ARAP-Zone-Access Default-Zone 1
370 VALUE ARAP-Zone-Access Zone-Filter-Inclusive 2
371 VALUE ARAP-Zone-Access Zone-Filter-Exclusive 4
374 VALUE Prompt No-Echo 0
377 # Termination Options
379 VALUE Termination-Action Default 0
380 VALUE Termination-Action RADIUS-Request 1
384 VALUE NAS-Port-Type Async 0
385 VALUE NAS-Port-Type Sync 1
386 VALUE NAS-Port-Type ISDN 2
387 VALUE NAS-Port-Type ISDN-V120 3
388 VALUE NAS-Port-Type ISDN-V110 4
389 VALUE NAS-Port-Type Virtual 5
390 VALUE NAS-Port-Type PIAFS 6
391 VALUE NAS-Port-Type HDLC-Clear-Channel 7
392 VALUE NAS-Port-Type X.25 8
393 VALUE NAS-Port-Type X.75 9
394 VALUE NAS-Port-Type G.3-Fax 10
395 VALUE NAS-Port-Type SDSL 11
396 VALUE NAS-Port-Type ADSL-CAP 12
397 VALUE NAS-Port-Type ADSL-DMT 13
398 VALUE NAS-Port-Type IDSL 14
399 VALUE NAS-Port-Type Ethernet 15
400 VALUE NAS-Port-Type xDSL 16
401 VALUE NAS-Port-Type Cable 17
402 VALUE NAS-Port-Type Wireless-Other 18
403 VALUE NAS-Port-Type Wireless-802.11 19
404 VALUE NAS-Port-Type Token-Ring 20
405 VALUE NAS-Port-Type FDDI 21
406 VALUE NAS-Port-Type Wireless-CDMA2000 22
407 VALUE NAS-Port-Type Wireless-UMTS 23
408 VALUE NAS-Port-Type Wireless-1X-EV 24
409 VALUE NAS-Port-Type IAPP 25
410 VALUE NAS-Port-Type FTTP 26
412 # Acct Terminate Causes
414 VALUE Acct-Terminate-Cause User-Request 1
415 VALUE Acct-Terminate-Cause Lost-Carrier 2
416 VALUE Acct-Terminate-Cause Lost-Service 3
417 VALUE Acct-Terminate-Cause Idle-Timeout 4
418 VALUE Acct-Terminate-Cause Session-Timeout 5
419 VALUE Acct-Terminate-Cause Admin-Reset 6
420 VALUE Acct-Terminate-Cause Admin-Reboot 7
421 VALUE Acct-Terminate-Cause Port-Error 8
422 VALUE Acct-Terminate-Cause NAS-Error 9
423 VALUE Acct-Terminate-Cause NAS-Request 10
424 VALUE Acct-Terminate-Cause NAS-Reboot 11
425 VALUE Acct-Terminate-Cause Port-Unneeded 12
426 VALUE Acct-Terminate-Cause Port-Preempted 13
427 VALUE Acct-Terminate-Cause Port-Suspended 14
428 VALUE Acct-Terminate-Cause Service-Unavailable 15
429 VALUE Acct-Terminate-Cause Callback 16
430 VALUE Acct-Terminate-Cause User-Error 17
431 VALUE Acct-Terminate-Cause Host-Request 18
432 VALUE Acct-Terminate-Cause Supplicant-Restart 19
433 VALUE Acct-Terminate-Cause Reauthentication-Failure 20
434 VALUE Acct-Terminate-Cause Port-Reinit 21
435 VALUE Acct-Terminate-Cause Port-Disabled 22
437 VALUE Prompt No-Echo 0
443 VALUE Error-Cause Residual-Context-Removed 201
444 VALUE Error-Cause Invalid-EAP-Packet 202
445 VALUE Error-Cause Unsupported-Attribute 401
446 VALUE Error-Cause Missing-Attribute 402
447 VALUE Error-Cause NAS-Identification-Mismatch 403
448 VALUE Error-Cause Invalid-Request 404
449 VALUE Error-Cause Unsupported-Service 405
450 VALUE Error-Cause Unsupported-Extension 406
451 VALUE Error-Cause Invalid-Attribute-Value 407
452 VALUE Error-Cause Administratively-Prohibited 501
453 VALUE Error-Cause Proxy-Request-Not-Routable 502
454 VALUE Error-Cause Session-Context-Not-Found 503
455 VALUE Error-Cause Session-Context-Not-Removable 504
456 VALUE Error-Cause Proxy-Processing-Error 505
457 VALUE Error-Cause Resources-Unavailable 506
458 VALUE Error-Cause Request-Initiated 507
459 VALUE Error-Cause Multiple-Session-Selection-Unsupported 508