4 # This is derived from the FreeRADIUS dictionary
5 # http://www.freeradius.org
7 # This file contains dictionary translations for parsing
8 # radius packets. All transactions are
9 # composed of Attribute/Value Pairs.
12 # Valid data types are:
14 # string - 0-253 octets
15 # ipaddr - 4 octets in network byte order
16 # integer - 32 bit value in big endian order (high byte first)
17 # (wireshark uses this type for non-standard 1-2-3 and 8 byte integers as well)
18 # date - 32 bit value in big endian order - seconds since
19 # 00:00:00 GMT, Jan. 1, 1970
20 # ifid - 8 octets in network byte order
21 # ipv6addr - 16 octets in network byte order
22 # ipv6prefix - 18 octets in network byte order
23 # octets - raw octets, printed as hex strings
26 $INCLUDE dictionary.3com
27 $INCLUDE dictionary.3gpp
28 $INCLUDE dictionary.3gpp2
29 $INCLUDE dictionary.acc
30 $INCLUDE dictionary.alcatel
31 $INCLUDE dictionary.alteon
32 $INCLUDE dictionary.altiga
33 $INCLUDE dictionary.aptis
34 $INCLUDE dictionary.bay
35 $INCLUDE dictionary.bintec
36 $INCLUDE dictionary.cablelabs
37 $INCLUDE dictionary.cabletron
38 $INCLUDE dictionary.cisco
39 $INCLUDE dictionary.cisco.vpn3000
40 $INCLUDE dictionary.cisco.vpn5000
41 $INCLUDE dictionary.cisco.bbsm
42 $INCLUDE dictionary.cosine
43 $INCLUDE dictionary.colubris
44 $INCLUDE dictionary.columbia_university
45 $INCLUDE dictionary.ericsson
46 $INCLUDE dictionary.erx
47 $INCLUDE dictionary.extreme
48 $INCLUDE dictionary.freeradius
49 $INCLUDE dictionary.foundry
50 $INCLUDE dictionary.gandalf
51 $INCLUDE dictionary.garderos
52 $INCLUDE dictionary.gemtek
53 $INCLUDE dictionary.itk
54 $INCLUDE dictionary.juniper
55 $INCLUDE dictionary.karlnet
56 $INCLUDE dictionary.livingston
57 $INCLUDE dictionary.localweb
58 $INCLUDE dictionary.merit
59 $INCLUDE dictionary.microsoft
60 $INCLUDE dictionary.mikrotik
61 $INCLUDE dictionary.navini
62 $INCLUDE dictionary.nomadix
63 $INCLUDE dictionary.netscreen
64 $INCLUDE dictionary.propel
65 $INCLUDE dictionary.quintum
66 $INCLUDE dictionary.redback
67 $INCLUDE dictionary.redcreek
68 $INCLUDE dictionary.shasta
69 $INCLUDE dictionary.shiva
70 $INCLUDE dictionary.sonicwall
71 $INCLUDE dictionary.springtide
72 $INCLUDE dictionary.t_systems_nova
73 $INCLUDE dictionary.telebit
74 $INCLUDE dictionary.trapeze
75 $INCLUDE dictionary.tunnel
76 $INCLUDE dictionary.unisphere
77 $INCLUDE dictionary.valemount
78 $INCLUDE dictionary.versanet
79 $INCLUDE dictionary.wispr
80 $INCLUDE dictionary.xedia
82 # nokia an ascend use non-vendor avps
83 # activate either one or the other as some attributes have common codes
84 #$INCLUDE dictionary.nokia
85 $INCLUDE dictionary.ascend
87 # we do not support 16bit attribute codes yet
88 # $INCLUDE dictionary.usr
92 # The following are the proper new names. Use these.
94 # http://www.iana.org/assignments/radius-types
96 ATTRIBUTE User-Name 1 string
97 ATTRIBUTE User-Password 2 string encrypt=1
98 ATTRIBUTE CHAP-Password 3 octets
99 ATTRIBUTE NAS-IP-Address 4 ipaddr
100 ATTRIBUTE NAS-Port 5 integer
101 ATTRIBUTE Service-Type 6 integer
102 ATTRIBUTE Framed-Protocol 7 integer
103 ATTRIBUTE Framed-IP-Address 8 ipaddr
104 ATTRIBUTE Framed-IP-Netmask 9 ipaddr
105 ATTRIBUTE Framed-Routing 10 integer
106 ATTRIBUTE Filter-Id 11 string
107 ATTRIBUTE Framed-MTU 12 integer
108 ATTRIBUTE Framed-Compression 13 integer
109 ATTRIBUTE Login-IP-Host 14 ipaddr
110 ATTRIBUTE Login-Service 15 integer
111 ATTRIBUTE Login-TCP-Port 16 integer
112 ATTRIBUTE Reply-Message 18 string
113 ATTRIBUTE Callback-Number 19 string
114 ATTRIBUTE Callback-Id 20 string
115 ATTRIBUTE Framed-Route 22 string
116 ATTRIBUTE Framed-IPX-Network 23 ipaddr
117 ATTRIBUTE State 24 octets
118 ATTRIBUTE Class 25 octets
119 ATTRIBUTE Vendor-Specific 26 octets
120 ATTRIBUTE Session-Timeout 27 integer
121 ATTRIBUTE Idle-Timeout 28 integer
122 ATTRIBUTE Termination-Action 29 integer
123 ATTRIBUTE Called-Station-Id 30 string
124 ATTRIBUTE Calling-Station-Id 31 string
125 ATTRIBUTE NAS-Identifier 32 string
126 ATTRIBUTE Proxy-State 33 octets
127 ATTRIBUTE Login-LAT-Service 34 string
128 ATTRIBUTE Login-LAT-Node 35 string
129 ATTRIBUTE Login-LAT-Group 36 octets
130 ATTRIBUTE Framed-AppleTalk-Link 37 integer
131 ATTRIBUTE Framed-AppleTalk-Network 38 integer
132 ATTRIBUTE Framed-AppleTalk-Zone 39 string
134 ATTRIBUTE Acct-Status-Type 40 integer
135 ATTRIBUTE Acct-Delay-Time 41 integer
136 ATTRIBUTE Acct-Input-Octets 42 integer
137 ATTRIBUTE Acct-Output-Octets 43 integer
138 ATTRIBUTE Acct-Session-Id 44 string
139 ATTRIBUTE Acct-Authentic 45 integer
140 ATTRIBUTE Acct-Session-Time 46 integer
141 ATTRIBUTE Acct-Input-Packets 47 integer
142 ATTRIBUTE Acct-Output-Packets 48 integer
143 ATTRIBUTE Acct-Terminate-Cause 49 integer
144 ATTRIBUTE Acct-Multi-Session-Id 50 string
145 ATTRIBUTE Acct-Link-Count 51 integer
146 ATTRIBUTE Acct-Input-Gigawords 52 integer
147 ATTRIBUTE Acct-Output-Gigawords 53 integer
148 ATTRIBUTE Event-Timestamp 55 date
150 ATTRIBUTE CHAP-Challenge 60 octets
151 ATTRIBUTE NAS-Port-Type 61 integer
152 ATTRIBUTE Port-Limit 62 integer
153 ATTRIBUTE Login-LAT-Port 63 integer
155 ATTRIBUTE Acct-Tunnel-Connection 68 string
157 ATTRIBUTE ARAP-Password 70 string
158 ATTRIBUTE ARAP-Features 71 string
159 ATTRIBUTE ARAP-Zone-Access 72 integer
160 ATTRIBUTE ARAP-Security 73 integer
161 ATTRIBUTE ARAP-Security-Data 74 string
162 ATTRIBUTE Password-Retry 75 integer
163 ATTRIBUTE Prompt 76 integer
164 ATTRIBUTE Connect-Info 77 string
165 ATTRIBUTE Configuration-Token 78 string
166 ATTRIBUTE EAP-Message 79 octets
167 ATTRIBUTE Message-Authenticator 80 octets
168 ATTRIBUTE ARAP-Challenge-Response 84 string # 10 octets
169 ATTRIBUTE Acct-Interim-Interval 85 integer
170 ATTRIBUTE NAS-Port-Id 87 string
171 ATTRIBUTE Framed-Pool 88 string
172 ATTRIBUTE NAS-IPv6-Address 95 ipv6addr
173 ATTRIBUTE Framed-Interface-Id 96 ifid
174 ATTRIBUTE Framed-IPv6-Prefix 97 octets # ipv6prefix
175 ATTRIBUTE Login-IPv6-Host 98 ipv6addr
176 ATTRIBUTE Framed-IPv6-Route 99 string
177 ATTRIBUTE Framed-IPv6-Pool 100 string
179 # As defined in RFC 3576
180 ATTRIBUTE Error-Cause 101 integer
182 # As defined in RFC 4590
183 ATTRIBUTE Digest-Realm 104 string
184 ATTRIBUTE Digest-Nonce 105 string
185 ATTRIBUTE Digest-Response 106 string
186 ATTRIBUTE Digest-Nextonce 107 string
187 ATTRIBUTE Digest-Method 108 string
188 ATTRIBUTE Digest-URI 109 string
189 ATTRIBUTE Digest-QOP 110 string
190 ATTRIBUTE Digest-Algorithm 111 string
191 ATTRIBUTE Digest-Body-Digest 112 string
192 ATTRIBUTE Digest-CNonce 113 string
193 ATTRIBUTE Digest-Nonce-Count 114 string
194 ATTRIBUTE Digest-User-Name 115 string
195 ATTRIBUTE Digest-Opaque 116 string
196 ATTRIBUTE Digest-Auth-Param 117 string
197 ATTRIBUTE Digest-AKA-Auts 118 string
198 ATTRIBUTE Digest-Domain 119 string
199 ATTRIBUTE Digest-Stale 120 string
200 ATTRIBUTE Digest-HA1 121 string
201 ATTRIBUTE SIP-AOR 122 string
203 # As defined in draft-sterman-aaa-sip-00.txt
204 ATTRIBUTE Digest-Response 206 string
205 ATTRIBUTE Digest-Attributes 207 octets # stupid format
209 # Integer Translations
214 VALUE Service-Type Login-User 1
215 VALUE Service-Type Framed-User 2
216 VALUE Service-Type Callback-Login-User 3
217 VALUE Service-Type Callback-Framed-User 4
218 VALUE Service-Type Outbound-User 5
219 VALUE Service-Type Administrative-User 6
220 VALUE Service-Type NAS-Prompt-User 7
221 VALUE Service-Type Authenticate-Only 8
222 VALUE Service-Type Callback-NAS-Prompt 9
223 VALUE Service-Type Call-Check 10
224 VALUE Service-Type Callback-Administrative 11
225 VALUE Service-Type Voice 12
226 VALUE Service-Type Fax 13
227 VALUE Service-Type Modem-Relay 14
228 VALUE Service-Type IAPP-Register 15
229 VALUE Service-Type IAPP-AP-Check 16
230 VALUE Service-Type Authorize-Only 17
235 VALUE Framed-Protocol PPP 1
236 VALUE Framed-Protocol SLIP 2
237 VALUE Framed-Protocol ARAP 3
238 VALUE Framed-Protocol Gandalf-SLML 4
239 VALUE Framed-Protocol Xylogics-IPX-SLIP 5
240 VALUE Framed-Protocol X.75-Synchronous 6
241 VALUE Framed-Protocol GPRS-PDP-Context 7
243 # Framed Routing Values
245 VALUE Framed-Routing None 0
246 VALUE Framed-Routing Broadcast 1
247 VALUE Framed-Routing Listen 2
248 VALUE Framed-Routing Broadcast-Listen 3
250 # Framed Compression Types
252 VALUE Framed-Compression None 0
253 VALUE Framed-Compression Van-Jacobson-TCP-IP 1
254 VALUE Framed-Compression IPX-Header-Compression 2
255 VALUE Framed-Compression Stac-LZS 3
259 VALUE Login-Service Telnet 0
260 VALUE Login-Service Rlogin 1
261 VALUE Login-Service TCP-Clear 2
262 VALUE Login-Service PortMaster 3
263 VALUE Login-Service LAT 4
264 VALUE Login-Service X25-PAD 5
265 VALUE Login-Service X25-T3POS 6
266 VALUE Login-Service TCP-Clear-Quiet 7
268 # Login-TCP-Port (see /etc/services for more examples)
270 VALUE Login-TCP-Port Telnet 23
271 VALUE Login-TCP-Port Rlogin 513
272 VALUE Login-TCP-Port Rsh 514
276 VALUE Acct-Status-Type Start 1
277 VALUE Acct-Status-Type Stop 2
278 VALUE Acct-Status-Type Interim-Update 3
279 VALUE Acct-Status-Type Alive 3
280 VALUE Acct-Status-Type Accounting-On 7
281 VALUE Acct-Status-Type Accounting-Off 8
282 # RFC 2867 Additional Status-Type Values
283 VALUE Acct-Status-Type Tunnel-Start 9
284 VALUE Acct-Status-Type Tunnel-Stop 10
285 VALUE Acct-Status-Type Tunnel-Reject 11
286 VALUE Acct-Status-Type Tunnel-Link-Start 12
287 VALUE Acct-Status-Type Tunnel-Link-Stop 13
288 VALUE Acct-Status-Type Tunnel-Link-Reject 14
289 VALUE Acct-Status-Type Failed 15
291 # Authentication Types
293 VALUE Acct-Authentic RADIUS 1
294 VALUE Acct-Authentic Local 2
295 VALUE Acct-Authentic Remote 3
296 VALUE Acct-Authentic Diameter 4
298 # Termination Options
300 VALUE Termination-Action Default 0
301 VALUE Termination-Action RADIUS-Request 1
305 VALUE NAS-Port-Type Async 0
306 VALUE NAS-Port-Type Sync 1
307 VALUE NAS-Port-Type ISDN 2
308 VALUE NAS-Port-Type ISDN-V120 3
309 VALUE NAS-Port-Type ISDN-V110 4
310 VALUE NAS-Port-Type Virtual 5
311 VALUE NAS-Port-Type PIAFS 6
312 VALUE NAS-Port-Type HDLC-Clear-Channel 7
313 VALUE NAS-Port-Type X.25 8
314 VALUE NAS-Port-Type X.75 9
315 VALUE NAS-Port-Type G.3-Fax 10
316 VALUE NAS-Port-Type SDSL 11
317 VALUE NAS-Port-Type ADSL-CAP 12
318 VALUE NAS-Port-Type ADSL-DMT 13
319 VALUE NAS-Port-Type IDSL 14
320 VALUE NAS-Port-Type Ethernet 15
321 VALUE NAS-Port-Type xDSL 16
322 VALUE NAS-Port-Type Cable 17
323 VALUE NAS-Port-Type Wireless-Other 18
324 VALUE NAS-Port-Type Wireless-802.11 19
325 VALUE NAS-Port-Type Token-Ring 20
326 VALUE NAS-Port-Type FDDI 21
327 VALUE NAS-Port-Type Wireless-CDMA2000 22
328 VALUE NAS-Port-Type Wireless-UMTS 23
329 VALUE NAS-Port-Type Wireless-1X-EV 24
330 VALUE NAS-Port-Type IAPP 25
331 VALUE NAS-Port-Type FTTP 26
333 # Acct Terminate Causes
335 VALUE Acct-Terminate-Cause User-Request 1
336 VALUE Acct-Terminate-Cause Lost-Carrier 2
337 VALUE Acct-Terminate-Cause Lost-Service 3
338 VALUE Acct-Terminate-Cause Idle-Timeout 4
339 VALUE Acct-Terminate-Cause Session-Timeout 5
340 VALUE Acct-Terminate-Cause Admin-Reset 6
341 VALUE Acct-Terminate-Cause Admin-Reboot 7
342 VALUE Acct-Terminate-Cause Port-Error 8
343 VALUE Acct-Terminate-Cause NAS-Error 9
344 VALUE Acct-Terminate-Cause NAS-Request 10
345 VALUE Acct-Terminate-Cause NAS-Reboot 11
346 VALUE Acct-Terminate-Cause Port-Unneeded 12
347 VALUE Acct-Terminate-Cause Port-Preempted 13
348 VALUE Acct-Terminate-Cause Port-Suspended 14
349 VALUE Acct-Terminate-Cause Service-Unavailable 15
350 VALUE Acct-Terminate-Cause Callback 16
351 VALUE Acct-Terminate-Cause User-Error 17
352 VALUE Acct-Terminate-Cause Host-Request 18
353 VALUE Acct-Terminate-Cause Supplicant-Restart 19
354 VALUE Acct-Terminate-Cause Reauthentication-Failure 20
355 VALUE Acct-Terminate-Cause Port-Reinit 21
356 VALUE Acct-Terminate-Cause Port-Disabled 22
358 #VALUE Tunnel-Type L2TP 3
359 #VALUE Tunnel-Medium-Type IP 1
361 VALUE Prompt No-Echo 0
367 VALUE Error-Cause Residual-Context-Removed 201
368 VALUE Error-Cause Invalid-EAP-Packet 202
369 VALUE Error-Cause Unsupported-Attribute 401
370 VALUE Error-Cause Missing-Attribute 402
371 VALUE Error-Cause NAS-Identification-Mismatch 403
372 VALUE Error-Cause Invalid-Request 404
373 VALUE Error-Cause Unsupported-Service 405
374 VALUE Error-Cause Unsupported-Extension 406
375 VALUE Error-Cause Administratively-Prohibited 501
376 VALUE Error-Cause Proxy-Request-Not-Routable 502
377 VALUE Error-Cause Session-Context-Not-Found 503
378 VALUE Error-Cause Session-Context-Not-Removable 504
379 VALUE Error-Cause Proxy-Processing-Error 505
380 VALUE Error-Cause Resources-Unavailable 506
381 VALUE Error-Cause Request-Initiated 507