radius/dictionary

   1 #
   2 # Version $Id$
   3 #
   4 #   This is derived from the FreeRADIUS dictionary
   5 #   http://www.freeradius.org
   6 #
   7 #       This file contains dictionary translations for parsing
   8 #       radius packets.  All transactions are
   9 #       composed of Attribute/Value Pairs.
  10 #
  11 #
  12 #  Valid data types are:
  13 #
  14 #       string  - 0-253 octets
  15 #       ipaddr  - 4 octets in network byte order
  16 #       integer - 32 bit value in big endian order (high byte first)
  17 #             (wireshark uses this type for non-standard 1-2-3 and 8 byte integers as well)
  18 #       date    - 32 bit value in big endian order - seconds since
  19 #                                       00:00:00 GMT,  Jan.  1,  1970
  20 #       ifid    - 8 octets in network byte order
  21 #       ipv6addr   - 16 octets in network byte order
  22 #       ipv6prefix - 18 octets in network byte order
  23 #       octets  - raw octets, printed as hex strings
  24 #
  25
  26 $INCLUDE dictionary.3com
  27 $INCLUDE dictionary.3gpp
  28 $INCLUDE dictionary.3gpp2
  29 $INCLUDE dictionary.acc
  30 $INCLUDE dictionary.alcatel
  31 $INCLUDE dictionary.alteon
  32 $INCLUDE dictionary.altiga
  33 $INCLUDE dictionary.aptis
  34 $INCLUDE dictionary.bay
  35 $INCLUDE dictionary.bintec
  36 $INCLUDE dictionary.cablelabs
  37 $INCLUDE dictionary.cabletron
  38 $INCLUDE dictionary.cisco
  39 $INCLUDE dictionary.cisco.vpn3000
  40 $INCLUDE dictionary.cisco.vpn5000
  41 $INCLUDE dictionary.cisco.bbsm
  42 $INCLUDE dictionary.cosine
  43 $INCLUDE dictionary.colubris
  44 $INCLUDE dictionary.columbia_university
  45 $INCLUDE dictionary.ericsson
  46 $INCLUDE dictionary.erx
  47 $INCLUDE dictionary.extreme
  48 $INCLUDE dictionary.freeradius
  49 $INCLUDE dictionary.foundry
  50 $INCLUDE dictionary.gandalf
  51 $INCLUDE dictionary.garderos
  52 $INCLUDE dictionary.gemtek
  53 $INCLUDE dictionary.itk
  54 $INCLUDE dictionary.juniper
  55 $INCLUDE dictionary.karlnet
  56 $INCLUDE dictionary.livingston
  57 $INCLUDE dictionary.localweb
  58 $INCLUDE dictionary.merit
  59 $INCLUDE dictionary.microsoft
  60 $INCLUDE dictionary.mikrotik
  61 $INCLUDE dictionary.navini
  62 $INCLUDE dictionary.nomadix
  63 $INCLUDE dictionary.netscreen
  64 $INCLUDE dictionary.propel
  65 $INCLUDE dictionary.quintum
  66 $INCLUDE dictionary.redback
  67 $INCLUDE dictionary.redcreek
  68 $INCLUDE dictionary.shasta
  69 $INCLUDE dictionary.shiva
  70 $INCLUDE dictionary.sonicwall
  71 $INCLUDE dictionary.springtide
  72 $INCLUDE dictionary.t_systems_nova
  73 $INCLUDE dictionary.telebit
  74 $INCLUDE dictionary.trapeze
  75 $INCLUDE dictionary.tunnel
  76 $INCLUDE dictionary.unisphere
  77 $INCLUDE dictionary.valemount
  78 $INCLUDE dictionary.versanet
  79 $INCLUDE dictionary.wispr
  80 $INCLUDE dictionary.xedia
  81
  82 # nokia an ascend use non-vendor avps
  83 # activate either one or the other as some attributes have common codes
  84 #$INCLUDE dictionary.nokia
  85 $INCLUDE dictionary.ascend
  86
  87 # we do not support 16bit attribute codes yet
  88 # $INCLUDE dictionary.usr
  89
  90
  91 #
  92 #       The following are the proper new names. Use these.
  93 #
  94 #       http://www.iana.org/assignments/radius-types
  95 #
  96 ATTRIBUTE       User-Name               1       string
  97 ATTRIBUTE       User-Password           2       string encrypt=1
  98 ATTRIBUTE       CHAP-Password           3       octets
  99 ATTRIBUTE       NAS-IP-Address          4       ipaddr
 100 ATTRIBUTE       NAS-Port                5       integer
 101 ATTRIBUTE       Service-Type            6       integer
 102 ATTRIBUTE       Framed-Protocol         7       integer
 103 ATTRIBUTE       Framed-IP-Address       8       ipaddr
 104 ATTRIBUTE       Framed-IP-Netmask       9       ipaddr
 105 ATTRIBUTE       Framed-Routing          10      integer
 106 ATTRIBUTE       Filter-Id               11      string
 107 ATTRIBUTE       Framed-MTU              12      integer
 108 ATTRIBUTE       Framed-Compression      13      integer
 109 ATTRIBUTE       Login-IP-Host           14      ipaddr
 110 ATTRIBUTE       Login-Service           15      integer
 111 ATTRIBUTE       Login-TCP-Port          16      integer
 112 ATTRIBUTE       Reply-Message           18      string
 113 ATTRIBUTE       Callback-Number         19      string
 114 ATTRIBUTE       Callback-Id             20      string
 115 ATTRIBUTE       Framed-Route            22      string
 116 ATTRIBUTE       Framed-IPX-Network      23      ipaddr
 117 ATTRIBUTE       State                   24      octets
 118 ATTRIBUTE       Class                   25      octets
 119 ATTRIBUTE       Vendor-Specific         26      octets
 120 ATTRIBUTE       Session-Timeout         27      integer
 121 ATTRIBUTE       Idle-Timeout            28      integer
 122 ATTRIBUTE       Termination-Action      29      integer
 123 ATTRIBUTE       Called-Station-Id       30      string
 124 ATTRIBUTE       Calling-Station-Id      31      string
 125 ATTRIBUTE       NAS-Identifier          32      string
 126 ATTRIBUTE       Proxy-State             33      octets
 127 ATTRIBUTE       Login-LAT-Service       34      string
 128 ATTRIBUTE       Login-LAT-Node          35      string
 129 ATTRIBUTE       Login-LAT-Group         36      octets
 130 ATTRIBUTE       Framed-AppleTalk-Link   37      integer
 131 ATTRIBUTE       Framed-AppleTalk-Network 38     integer
 132 ATTRIBUTE       Framed-AppleTalk-Zone   39      string
 133
 134 ATTRIBUTE       Acct-Status-Type        40      integer
 135 ATTRIBUTE       Acct-Delay-Time         41      integer
 136 ATTRIBUTE       Acct-Input-Octets       42      integer
 137 ATTRIBUTE       Acct-Output-Octets      43      integer
 138 ATTRIBUTE       Acct-Session-Id         44      string
 139 ATTRIBUTE       Acct-Authentic          45      integer
 140 ATTRIBUTE       Acct-Session-Time       46      integer
 141 ATTRIBUTE       Acct-Input-Packets      47      integer
 142 ATTRIBUTE       Acct-Output-Packets     48      integer
 143 ATTRIBUTE       Acct-Terminate-Cause    49      integer
 144 ATTRIBUTE       Acct-Multi-Session-Id   50      string
 145 ATTRIBUTE       Acct-Link-Count         51      integer
 146 ATTRIBUTE       Acct-Input-Gigawords    52      integer
 147 ATTRIBUTE       Acct-Output-Gigawords   53      integer
 148 ATTRIBUTE       Event-Timestamp         55      date
 149
 150 ATTRIBUTE       CHAP-Challenge          60      octets
 151 ATTRIBUTE       NAS-Port-Type           61      integer
 152 ATTRIBUTE       Port-Limit              62      integer
 153 ATTRIBUTE       Login-LAT-Port          63      integer
 154
 155 ATTRIBUTE       Acct-Tunnel-Connection  68      string
 156
 157 ATTRIBUTE       ARAP-Password           70      string
 158 ATTRIBUTE       ARAP-Features           71      string
 159 ATTRIBUTE       ARAP-Zone-Access        72      integer
 160 ATTRIBUTE       ARAP-Security           73      integer
 161 ATTRIBUTE       ARAP-Security-Data      74      string
 162 ATTRIBUTE       Password-Retry          75      integer
 163 ATTRIBUTE       Prompt                  76      integer
 164 ATTRIBUTE       Connect-Info            77      string
 165 ATTRIBUTE       Configuration-Token     78      string
 166 ATTRIBUTE       EAP-Message             79      octets
 167 ATTRIBUTE       Message-Authenticator   80      octets
 168 ATTRIBUTE       ARAP-Challenge-Response 84      string  # 10 octets
 169 ATTRIBUTE       Acct-Interim-Interval   85      integer
 170 ATTRIBUTE       NAS-Port-Id             87      string
 171 ATTRIBUTE       Framed-Pool             88      string
 172 ATTRIBUTE       NAS-IPv6-Address        95      ipv6addr
 173 ATTRIBUTE       Framed-Interface-Id     96      ifid
 174 ATTRIBUTE       Framed-IPv6-Prefix      97      octets # ipv6prefix
 175 ATTRIBUTE       Login-IPv6-Host         98      ipv6addr
 176 ATTRIBUTE       Framed-IPv6-Route       99      string
 177 ATTRIBUTE       Framed-IPv6-Pool        100     string
 178
 179 #  As defined in RFC 3576
 180 ATTRIBUTE       Error-Cause             101     integer
 181
 182 #  As defined in RFC 4590
 183 ATTRIBUTE       Digest-Response         103     string
 184 ATTRIBUTE       Digest-Realm            104     string
 185 ATTRIBUTE       Digest-Nonce            105     string
 186 ATTRIBUTE       Digest-Nextnonce        106     string
 187 ATTRIBUTE       Digest-Response-Auth    107     string
 188 ATTRIBUTE       Digest-Method           108     string
 189 ATTRIBUTE       Digest-URI              109     string
 190 ATTRIBUTE       Digest-Qop              110     string
 191 ATTRIBUTE       Digest-Algorithm        111     string
 192 ATTRIBUTE       Digest-Entity-Body-Hash 112     string
 193 ATTRIBUTE       Digest-CNonce           113     string
 194 ATTRIBUTE       Digest-Nonce-Count      114     string
 195 ATTRIBUTE       Digest-Username         115     string
 196 ATTRIBUTE       Digest-Opaque           116     string
 197 ATTRIBUTE       Digest-Auth-Param       117     string
 198 ATTRIBUTE       Digest-AKA-Auts         118     string
 199 ATTRIBUTE       Digest-Domain           119     string
 200 ATTRIBUTE       Digest-Stale            120     string
 201 ATTRIBUTE       Digest-HA1              121     string
 202 ATTRIBUTE       SIP-AOR                 122     string
 203
 204 #  As defined in draft-sterman-aaa-sip-00.txt
 205 ATTRIBUTE       Digest-Response         206     string
 206 ATTRIBUTE       Digest-Attributes       207     octets  # stupid format
 207
 208
 209 #
 210 #       Integer Translations
 211 #
 212
 213 #       User Types
 214
 215 VALUE           Service-Type            Login-User              1
 216 VALUE           Service-Type            Framed-User             2
 217 VALUE           Service-Type            Callback-Login-User     3
 218 VALUE           Service-Type            Callback-Framed-User    4
 219 VALUE           Service-Type            Outbound-User           5
 220 VALUE           Service-Type            Administrative-User     6
 221 VALUE           Service-Type            NAS-Prompt-User         7
 222 VALUE           Service-Type            Authenticate-Only       8
 223 VALUE           Service-Type            Callback-NAS-Prompt     9
 224 VALUE           Service-Type            Call-Check              10
 225 VALUE           Service-Type            Callback-Administrative 11
 226 VALUE           Service-Type            Voice                   12
 227 VALUE           Service-Type            Fax                     13
 228 VALUE           Service-Type            Modem-Relay             14
 229 VALUE           Service-Type            IAPP-Register           15
 230 VALUE           Service-Type            IAPP-AP-Check           16
 231 VALUE           Service-Type            Authorize-Only          17
 232
 233
 234 #       Framed Protocols
 235
 236 VALUE           Framed-Protocol         PPP                     1
 237 VALUE           Framed-Protocol         SLIP                    2
 238 VALUE           Framed-Protocol         ARAP                    3
 239 VALUE           Framed-Protocol         Gandalf-SLML            4
 240 VALUE           Framed-Protocol         Xylogics-IPX-SLIP       5
 241 VALUE           Framed-Protocol         X.75-Synchronous        6
 242 VALUE           Framed-Protocol         GPRS-PDP-Context        7
 243
 244 #       Framed Routing Values
 245
 246 VALUE           Framed-Routing          None                    0
 247 VALUE           Framed-Routing          Broadcast               1
 248 VALUE           Framed-Routing          Listen                  2
 249 VALUE           Framed-Routing          Broadcast-Listen        3
 250
 251 #       Framed Compression Types
 252
 253 VALUE           Framed-Compression      None                    0
 254 VALUE           Framed-Compression      Van-Jacobson-TCP-IP     1
 255 VALUE           Framed-Compression      IPX-Header-Compression  2
 256 VALUE           Framed-Compression      Stac-LZS                3
 257
 258 #       Login Services
 259
 260 VALUE           Login-Service           Telnet                  0
 261 VALUE           Login-Service           Rlogin                  1
 262 VALUE           Login-Service           TCP-Clear               2
 263 VALUE           Login-Service           PortMaster              3
 264 VALUE           Login-Service           LAT                     4
 265 VALUE           Login-Service           X25-PAD                 5
 266 VALUE           Login-Service           X25-T3POS               6
 267 VALUE           Login-Service           TCP-Clear-Quiet         7
 268
 269 #       Login-TCP-Port          (see /etc/services for more examples)
 270
 271 VALUE           Login-TCP-Port          Telnet                  23
 272 VALUE           Login-TCP-Port          Rlogin                  513
 273 VALUE           Login-TCP-Port          Rsh                     514
 274
 275 #       Status Types
 276
 277 VALUE           Acct-Status-Type        Start                   1
 278 VALUE           Acct-Status-Type        Stop                    2
 279 VALUE           Acct-Status-Type        Interim-Update          3
 280 VALUE           Acct-Status-Type        Alive                   3
 281 VALUE           Acct-Status-Type        Accounting-On           7
 282 VALUE           Acct-Status-Type        Accounting-Off          8
 283 #       RFC 2867 Additional Status-Type Values
 284 VALUE           Acct-Status-Type        Tunnel-Start            9
 285 VALUE           Acct-Status-Type        Tunnel-Stop             10
 286 VALUE           Acct-Status-Type        Tunnel-Reject           11
 287 VALUE           Acct-Status-Type        Tunnel-Link-Start       12
 288 VALUE           Acct-Status-Type        Tunnel-Link-Stop        13
 289 VALUE           Acct-Status-Type        Tunnel-Link-Reject      14
 290 VALUE           Acct-Status-Type        Failed                  15
 291
 292 #       Authentication Types
 293
 294 VALUE           Acct-Authentic          RADIUS                  1
 295 VALUE           Acct-Authentic          Local                   2
 296 VALUE           Acct-Authentic          Remote                  3
 297 VALUE           Acct-Authentic          Diameter                4
 298
 299 #       Termination Options
 300
 301 VALUE           Termination-Action      Default                 0
 302 VALUE           Termination-Action      RADIUS-Request          1
 303
 304 #       NAS Port Types
 305
 306 VALUE           NAS-Port-Type           Async                   0
 307 VALUE           NAS-Port-Type           Sync                    1
 308 VALUE           NAS-Port-Type           ISDN                    2
 309 VALUE           NAS-Port-Type           ISDN-V120               3
 310 VALUE           NAS-Port-Type           ISDN-V110               4
 311 VALUE           NAS-Port-Type           Virtual                 5
 312 VALUE           NAS-Port-Type           PIAFS                   6
 313 VALUE           NAS-Port-Type           HDLC-Clear-Channel      7
 314 VALUE           NAS-Port-Type           X.25                    8
 315 VALUE           NAS-Port-Type           X.75                    9
 316 VALUE           NAS-Port-Type           G.3-Fax                 10
 317 VALUE           NAS-Port-Type           SDSL                    11
 318 VALUE           NAS-Port-Type           ADSL-CAP                12
 319 VALUE           NAS-Port-Type           ADSL-DMT                13
 320 VALUE           NAS-Port-Type           IDSL                    14
 321 VALUE           NAS-Port-Type           Ethernet                15
 322 VALUE           NAS-Port-Type           xDSL                    16
 323 VALUE           NAS-Port-Type           Cable                   17
 324 VALUE           NAS-Port-Type           Wireless-Other          18
 325 VALUE           NAS-Port-Type           Wireless-802.11         19
 326 VALUE           NAS-Port-Type           Token-Ring              20
 327 VALUE           NAS-Port-Type           FDDI                    21
 328 VALUE           NAS-Port-Type           Wireless-CDMA2000       22
 329 VALUE           NAS-Port-Type           Wireless-UMTS           23
 330 VALUE           NAS-Port-Type           Wireless-1X-EV          24
 331 VALUE           NAS-Port-Type           IAPP                    25
 332 VALUE           NAS-Port-Type           FTTP                    26
 333
 334 #       Acct Terminate Causes
 335
 336 VALUE           Acct-Terminate-Cause    User-Request            1
 337 VALUE           Acct-Terminate-Cause    Lost-Carrier            2
 338 VALUE           Acct-Terminate-Cause    Lost-Service            3
 339 VALUE           Acct-Terminate-Cause    Idle-Timeout            4
 340 VALUE           Acct-Terminate-Cause    Session-Timeout         5
 341 VALUE           Acct-Terminate-Cause    Admin-Reset             6
 342 VALUE           Acct-Terminate-Cause    Admin-Reboot            7
 343 VALUE           Acct-Terminate-Cause    Port-Error              8
 344 VALUE           Acct-Terminate-Cause    NAS-Error               9
 345 VALUE           Acct-Terminate-Cause    NAS-Request             10
 346 VALUE           Acct-Terminate-Cause    NAS-Reboot              11
 347 VALUE           Acct-Terminate-Cause    Port-Unneeded           12
 348 VALUE           Acct-Terminate-Cause    Port-Preempted          13
 349 VALUE           Acct-Terminate-Cause    Port-Suspended          14
 350 VALUE           Acct-Terminate-Cause    Service-Unavailable     15
 351 VALUE           Acct-Terminate-Cause    Callback                16
 352 VALUE           Acct-Terminate-Cause    User-Error              17
 353 VALUE           Acct-Terminate-Cause    Host-Request            18
 354 VALUE           Acct-Terminate-Cause    Supplicant-Restart      19
 355 VALUE           Acct-Terminate-Cause    Reauthentication-Failure 20
 356 VALUE           Acct-Terminate-Cause    Port-Reinit             21
 357 VALUE           Acct-Terminate-Cause    Port-Disabled           22
 358
 359 #VALUE          Tunnel-Type             L2TP                    3
 360 #VALUE          Tunnel-Medium-Type      IP                      1
 361
 362 VALUE           Prompt                  No-Echo                 0
 363 VALUE           Prompt                  Echo                    1
 364
 365 #
 366 #       Error causes
 367 #
 368 VALUE           Error-Cause             Residual-Context-Removed        201
 369 VALUE           Error-Cause             Invalid-EAP-Packet              202
 370 VALUE           Error-Cause             Unsupported-Attribute           401
 371 VALUE           Error-Cause             Missing-Attribute               402
 372 VALUE           Error-Cause             NAS-Identification-Mismatch     403
 373 VALUE           Error-Cause             Invalid-Request                 404
 374 VALUE           Error-Cause             Unsupported-Service             405
 375 VALUE           Error-Cause             Unsupported-Extension           406
 376 VALUE           Error-Cause             Administratively-Prohibited     501
 377 VALUE           Error-Cause             Proxy-Request-Not-Routable      502
 378 VALUE           Error-Cause             Session-Context-Not-Found       503
 379 VALUE           Error-Cause             Session-Context-Not-Removable   504
 380 VALUE           Error-Cause             Proxy-Processing-Error          505
 381 VALUE           Error-Cause             Resources-Unavailable           506
 382 VALUE           Error-Cause             Request-Initiated               507