radius/dictionary.erx

   1 # -*- text -*-
   2 #
   3 #  dictionary.erx
   4 #
   5 #       Juniper's (was Unisphere's) broadband RAS
   6 #       From Terje Krogdahl <tekr@nextra.com>
   7 #
   8 # Version:      $Id$
   9 #
  10
  11 # This dictionary applies to access services on Juniper JUNOS (M/MX)
  12 # based platforms as well as JUNOSe, although some of the attributes
  13 # have been given new names on JUNOS:
  14 #       http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aaa-subscriber-access-radius-vsa.html
  15 #
  16 # In this file, we keep the ERX prefix and the JUNOSe attribute names
  17 # for backwards compatibility
  18 #
  19 # Juniper ERX dictionaries are available at:
  20 #       http://www.juniper.net/techpubs/software/erx/junose71/unisphere7-1.dct
  21 #       http://www.juniper.net/techpubs/software/erx/junose700/unisphere7-0.dct
  22 #       http://www.juniper.net/techpubs/software/erx/junose700/swconfig-broadband/html/radius-attributes.html
  23 #       http://www.juniper.net/techpubs/software/erx/junose52/unisphere5-2.dct
  24 #       http://www.juniper.net/techpubs/software/erx/erx50x/swconfig-broadband/html/radius-attributes.html
  25 # (The below are from when it was the Unisphere ERX)
  26 #       http://www.juniper.net/techpubs/software/erx/erx410/unisphere4-1.dct
  27 #       http://www.juniper.net/techpubs/software/erx/erx403/unisphere4-0.dct
  28 #       http://www.juniper.net/techpubs/software/erx/erx3xx/unisphere3-2.dct
  29 #       http://www.juniper.net/techpubs/software/erx/erx3xx/unisphere3-0.dct
  30 #
  31 #  As a note on ERX broken-ness, If you don't send a Framed-IP-Address
  32 #  in the Access-Accept packet, the ERX disconnects the user, and
  33 #  sends an Accounting-Request packet with Acct-Status-Type = Stop
  34 #
  35 #  It does NOT send a 'Start' packet, so this behaviour confuses the
  36 #  heck out of most admins, who do everything right, but have the ERX
  37 #  do stupid things.
  38 #
  39 #  The ERX supports Ascend "abinary" format.  See:
  40 #
  41 #       http://www.juniper.net/techpubs/software/erx/junose71/swconfig-policy/html/policy-mgmt-apply5.html
  42 #
  43 #  For this to work in FreeRADIUS, you will have to specify the attribute
  44 #  in hex, as in:
  45 #
  46 #       Ascend-Data-Filter = 0x010203...
  47 #
  48
  49 VENDOR          ERX                             4874
  50
  51 BEGIN-VENDOR    ERX
  52
  53 ATTRIBUTE       ERX-Virtual-Router-Name                 1       string
  54 ATTRIBUTE       ERX-Address-Pool-Name                   2       string
  55 ATTRIBUTE       ERX-Local-Loopback-Interface            3       string
  56 ATTRIBUTE       ERX-Primary-Dns                         4       ipaddr
  57 ATTRIBUTE       ERX-Secondary-Dns                       5       ipaddr
  58 ATTRIBUTE       ERX-Primary-Wins                        6       ipaddr
  59 ATTRIBUTE       ERX-Secondary-Wins                      7       ipaddr
  60 ATTRIBUTE       ERX-Tunnel-Virtual-Router               8       string
  61 ATTRIBUTE       ERX-Tunnel-Password                     9       string
  62 ATTRIBUTE       ERX-Ingress-Policy-Name                 10      string
  63 ATTRIBUTE       ERX-Egress-Policy-Name                  11      string
  64 ATTRIBUTE       ERX-Ingress-Statistics                  12      integer
  65 ATTRIBUTE       ERX-Egress-Statistics                   13      integer
  66 ATTRIBUTE       ERX-Atm-Service-Category                14      integer
  67 ATTRIBUTE       ERX-Atm-PCR                             15      integer
  68 ATTRIBUTE       ERX-Atm-SCR                             16      integer
  69 ATTRIBUTE       ERX-Atm-MBS                             17      integer
  70 ATTRIBUTE       ERX-Cli-Initial-Access-Level            18      string
  71 ATTRIBUTE       ERX-Cli-Allow-All-VR-Access             19      integer
  72 ATTRIBUTE       ERX-Alternate-Cli-Access-Level          20      string
  73 ATTRIBUTE       ERX-Alternate-Cli-Vrouter-Name          21      string
  74 ATTRIBUTE       ERX-Sa-Validate                         22      integer
  75 ATTRIBUTE       ERX-Igmp-Enable                         23      integer
  76 ATTRIBUTE       ERX-Pppoe-Description                   24      string
  77 ATTRIBUTE       ERX-Redirect-VR-Name                    25      string
  78 ATTRIBUTE       ERX-Qos-Profile-Name                    26      string
  79 ATTRIBUTE       ERX-Pppoe-Max-Sessions                  27      integer
  80 ATTRIBUTE       ERX-Pppoe-Url                           28      string
  81 ATTRIBUTE       ERX-Qos-Profile-Interface-Type          29      integer
  82 ATTRIBUTE       ERX-Tunnel-Nas-Port-Method              30      integer
  83 ATTRIBUTE       ERX-Service-Bundle                      31      string
  84 ATTRIBUTE       ERX-Tunnel-Tos                          32      integer
  85 ATTRIBUTE       ERX-Tunnel-Maximum-Sessions             33      integer
  86 ATTRIBUTE       ERX-Framed-Ip-Route-Tag                 34      string
  87 ATTRIBUTE       ERX-Dial-Out-Number                     35      string
  88 ATTRIBUTE       ERX-PPP-Username                        36      string
  89 ATTRIBUTE       ERX-PPP-Password                        37      string
  90 ATTRIBUTE       ERX-PPP-Auth-Protocol                   38      integer
  91 ATTRIBUTE       ERX-Minimum-BPS                         39      integer
  92 ATTRIBUTE       ERX-Maximum-BPS                         40      integer
  93 ATTRIBUTE       ERX-Bearer-Type                         41      integer
  94 ATTRIBUTE       ERX-Input-Gigapkts                      42      integer
  95 ATTRIBUTE       ERX-Output-Gigapkts                     43      integer
  96 ATTRIBUTE       ERX-Tunnel-Interface-Id                 44      string
  97 ATTRIBUTE       ERX-IpV6-Virtual-Router                 45      string
  98 ATTRIBUTE       ERX-IpV6-Local-Interface                46      string
  99 ATTRIBUTE       ERX-Ipv6-Primary-Dns                    47      ipv6addr
 100 ATTRIBUTE       ERX-Ipv6-Secondary-Dns                  48      ipv6addr
 101 ATTRIBUTE       Sdx-Service-Name                        49      string
 102 ATTRIBUTE       Sdx-Session-Volume-Quota                50      string
 103 ATTRIBUTE       Sdx-Tunnel-Disconnect-Cause-Info        51      string
 104 ATTRIBUTE       ERX-Radius-Client-Address               52      ipaddr
 105 ATTRIBUTE       ERX-Service-Description                 53      string
 106 ATTRIBUTE       ERX-L2tp-Recv-Window-Size               54      integer
 107 ATTRIBUTE       ERX-Dhcp-Options                        55      string
 108 ATTRIBUTE       ERX-Dhcp-Mac-Addr                       56      string
 109 ATTRIBUTE       ERX-Dhcp-Gi-Address                     57      ipaddr
 110 ATTRIBUTE       ERX-LI-Action                           58      integer encrypt=2
 111 ATTRIBUTE       ERX-Med-Dev-Handle                      59      octets  encrypt=2
 112 ATTRIBUTE       ERX-Med-Ip-Address                      60      ipaddr  encrypt=2
 113 ATTRIBUTE       ERX-Med-Port-Number                     61      integer encrypt=2
 114 ATTRIBUTE       ERX-MLPPP-Bundle-Name                   62      string
 115 ATTRIBUTE       ERX-Interface-Desc                      63      string
 116 ATTRIBUTE       ERX-Tunnel-Group                        64      string
 117 ATTRIBUTE       ERX-Service-Activate                    65      string  has_tag
 118 ATTRIBUTE       ERX-Service-Deactivate                  66      string
 119 ATTRIBUTE       ERX-Service-Volume                      67      integer has_tag
 120 ATTRIBUTE       ERX-Service-Timeout                     68      integer has_tag
 121 ATTRIBUTE       ERX-Service-Statistics                  69      integer has_tag
 122
 123 ATTRIBUTE       ERX-DF-Bit                              70      integer
 124
 125 ATTRIBUTE       ERX-IGMP-Access-Name                    71      string
 126 ATTRIBUTE       ERX-IGMP-Access-Src-Name                72      string
 127 ATTRIBUTE       ERX-IGMP-OIF-Map-Name                   73      string
 128
 129 ATTRIBUTE       ERX-MLD-Access-Name                     74      string
 130 ATTRIBUTE       ERX-MLD-Access-Src-Name                 75      string
 131 ATTRIBUTE       ERX-MLD-OIF-Map-Name                    76      string
 132 ATTRIBUTE       ERX-MLD-Version                         77      integer
 133 ATTRIBUTE       ERX-IGMP-Version                        78      integer
 134 ATTRIBUTE       ERX-IP-Mcast-Adm-Bw-Limit               79      integer
 135 ATTRIBUTE       ERX-IPv6-Mcast-Adm-Bw-Limit             80      integer
 136 ATTRIBUTE       ERX-Qos-Parameters                      82      string
 137 ATTRIBUTE       ERX-Service-Session                     83      string
 138
 139 ATTRIBUTE       ERX-Mobile-IP-Algorithm                 84      integer
 140 ATTRIBUTE       ERX-Mobile-IP-SPI                       85      integer
 141 ATTRIBUTE       ERX-Mobile-IP-Key                       86      string
 142 ATTRIBUTE       ERX-Mobile-IP-Replay                    87      integer
 143 ATTRIBUTE       ERX-Mobile-IP-Access-Control            88      string
 144 ATTRIBUTE       ERX-Mobile-IP-Lifetime                  89      integer
 145
 146 ATTRIBUTE       ERX-L2TP-Resynch-Method                 90      integer
 147
 148 ATTRIBUTE       ERX-Tunnel-Switch-Profile               91      string
 149
 150 ATTRIBUTE       ERX-L2c-Up-Stream-Data                  92      string
 151 ATTRIBUTE       ERX-L2c-Down-Stream-Data                93      string
 152
 153 ATTRIBUTE       ERX-Tunnel-Tx-Speed-Method              94      integer
 154
 155 ATTRIBUTE       ERX-IGMP-Query-Interval                 95      integer
 156 ATTRIBUTE       ERX-IGMP-Max-Resp-Time                  96      integer
 157 ATTRIBUTE       ERX-IGMP-Immediate-Leave                97      integer
 158 ATTRIBUTE       ERX-MLD-Query-Interval                  98      integer
 159 ATTRIBUTE       ERX-MLD-Max-Resp-Time                   99      integer
 160 ATTRIBUTE       ERX-MLD-Immediate-Leave                 100     integer
 161 ATTRIBUTE       ERX-IP-Block-Multicast                  101     integer
 162
 163 ATTRIBUTE       ERX-IGMP-Explicit-Tracking              102     integer
 164 ATTRIBUTE       ERX-IGMP-No-Tracking-V2-Grps            103     integer
 165 ATTRIBUTE       ERX-MLD-Explicit-Tracking               104     integer
 166 ATTRIBUTE       ERX-MLD-No-Tracking-V1-Grps             105     integer
 167
 168 ATTRIBUTE       ERX-IPv6-Ingress-Policy-Name            106     string
 169 ATTRIBUTE       ERX-IPv6-Egress-Policy-Name             107     string
 170 ATTRIBUTE       ERX-CoS-Shaping-Pmt-Type                108     string
 171
 172 ATTRIBUTE       ERX-Acc-Loop-Cir-Id                     110     string
 173 ATTRIBUTE       ERX-Acc-Aggr-Cir-Id-Bin                 111     octets
 174 ATTRIBUTE       ERX-Acc-Aggr-Cir-Id-Asc                 112     string
 175 ATTRIBUTE       ERX-Act-Data-Rate-Up                    113     integer
 176 ATTRIBUTE       ERX-Act-Data-Rate-Dn                    114     integer
 177 ATTRIBUTE       ERX-Min-Data-Rate-Up                    115     integer
 178 ATTRIBUTE       ERX-Min-Data-Rate-Dn                    116     integer
 179 ATTRIBUTE       ERX-Att-Data-Rate-Up                    117     integer
 180 ATTRIBUTE       ERX-Att-Data-Rate-Dn                    118     integer
 181 ATTRIBUTE       ERX-Max-Data-Rate-Up                    119     integer
 182 ATTRIBUTE       ERX-Max-Data-Rate-Dn                    120     integer
 183 ATTRIBUTE       ERX-Min-LP-Data-Rate-Up                 121     integer
 184 ATTRIBUTE       ERX-Min-LP-Data-Rate-Dn                 122     integer
 185 ATTRIBUTE       ERX-Max-Interlv-Delay-Up                123     integer
 186 ATTRIBUTE       ERX-Act-Interlv-Delay-Up                124     integer
 187 ATTRIBUTE       ERX-Max-Interlv-Delay-Dn                125     integer
 188 ATTRIBUTE       ERX-Act-Interlv-Delay-Dn                126     integer
 189 ATTRIBUTE       ERX-DSL-Line-State                      127     integer
 190 ATTRIBUTE       ERX-DSL-Type                            128     integer
 191
 192 ATTRIBUTE       ERX-IPv6-NdRa-Prefix                    129     ipv6prefix
 193 ATTRIBUTE       ERX-Qos-Set-Name                        130     string
 194
 195 ATTRIBUTE       ERX-Service-Acct-Interval               140     integer has_tag
 196
 197 ATTRIBUTE       ERX-DownStream-Calc-Rate                141     integer
 198 ATTRIBUTE       ERX-UpStream-Calc-Rate                  142     integer
 199 ATTRIBUTE       ERX-Max-Clients-Per-Interface           143     integer
 200
 201 ATTRIBUTE       ERX-PPP-Monitor-Ingress-Only            144     integer
 202
 203 ATTRIBUTE       ERX-CoS-Scheduler-Pmt-Type              146     string
 204
 205 ATTRIBUTE       ERX-IPv6-Acct-Input-Octets              151     integer
 206 ATTRIBUTE       ERX-IPv6-Acct-Output-Octets             152     integer
 207 ATTRIBUTE       ERX-IPv6-Acct-Input-Packets             153     integer
 208 ATTRIBUTE       ERX-IPv6-Acct-Output-Packets            154     integer
 209 ATTRIBUTE       ERX-IPv6-Acct-Input-Gigawords           155     integer
 210 ATTRIBUTE       ERX-IPv6-Acct-Output-Gigawords          156     integer
 211 ATTRIBUTE       ERX-IPv6-NdRa-Pool-Name                 157     string
 212
 213
 214 #
 215 #  Values       Attribute               Name                    Number
 216 #
 217 VALUE   ERX-Ingress-Statistics          disable                 0
 218 VALUE   ERX-Ingress-Statistics          enable                  1
 219
 220 VALUE   ERX-Egress-Statistics           disable                 0
 221 VALUE   ERX-Egress-Statistics           enable                  1
 222
 223 VALUE   ERX-Atm-Service-Category        UBR                     1
 224 VALUE   ERX-Atm-Service-Category        UBRPCR                  2
 225 VALUE   ERX-Atm-Service-Category        nrtVBR                  3
 226 VALUE   ERX-Atm-Service-Category        CBR                     4
 227
 228 VALUE   ERX-Cli-Allow-All-VR-Access     disable                 0
 229 VALUE   ERX-Cli-Allow-All-VR-Access     enable                  1
 230
 231 VALUE   ERX-Sa-Validate                 disable                 0
 232 VALUE   ERX-Sa-Validate                 enable                  1
 233
 234 VALUE   ERX-Igmp-Enable                 disable                 0
 235 VALUE   ERX-Igmp-Enable                 enable                  1
 236
 237 VALUE   ERX-Qos-Profile-Interface-Type  IP                      1
 238 VALUE   ERX-Qos-Profile-Interface-Type  ATM                     2
 239 VALUE   ERX-Qos-Profile-Interface-Type  HDLC                    3
 240 VALUE   ERX-Qos-Profile-Interface-Type  ETHERNET                4
 241 VALUE   ERX-Qos-Profile-Interface-Type  SERVER-PORT             5
 242 VALUE   ERX-Qos-Profile-Interface-Type  ATM-1483                6
 243 VALUE   ERX-Qos-Profile-Interface-Type  FRAME-RELAY             7
 244 VALUE   ERX-Qos-Profile-Interface-Type  MPLS-MINOR              8
 245 VALUE   ERX-Qos-Profile-Interface-Type  CBF                     9
 246 VALUE   ERX-Qos-Profile-Interface-Type  IP-TUNNEL               10
 247 VALUE   ERX-Qos-Profile-Interface-Type  VLAN-SUB                11
 248 VALUE   ERX-Qos-Profile-Interface-Type  PPPOE-SUB               12
 249
 250 VALUE   ERX-Tunnel-Nas-Port-Method      None                    0
 251 VALUE   ERX-Tunnel-Nas-Port-Method      CISCO-CLID              1
 252
 253 VALUE   ERX-PPP-Auth-Protocol           None                    0
 254 VALUE   ERX-PPP-Auth-Protocol           PAP                     1
 255 VALUE   ERX-PPP-Auth-Protocol           CHAP                    2
 256 VALUE   ERX-PPP-Auth-Protocol           PAP-CHAP                3
 257 VALUE   ERX-PPP-Auth-Protocol           CHAP-PAP                4
 258
 259 VALUE   ERX-Bearer-Type                 None                    0
 260 VALUE   ERX-Bearer-Type                 Analog                  1
 261 VALUE   ERX-Bearer-Type                 Digital                 2
 262
 263 VALUE   ERX-LI-Action                   off                     0
 264 VALUE   ERX-LI-Action                   on                      1
 265 VALUE   ERX-LI-Action                   noop                    2
 266
 267 VALUE   ERX-DF-Bit                      dont-ignore-df-bit      0
 268 VALUE   ERX-DF-Bit                      ignore-df-bit           1
 269
 270 VALUE   ERX-MLD-Version                 v1                      1
 271 VALUE   ERX-MLD-Version                 v2                      2
 272
 273 VALUE   ERX-IGMP-Version                v1                      1
 274 VALUE   ERX-IGMP-Version                v2                      2
 275 VALUE   ERX-IGMP-Version                v3                      3
 276
 277 VALUE   ERX-Service-Statistics          disabled                0
 278 VALUE   ERX-Service-Statistics          time                    1
 279 VALUE   ERX-Service-Statistics          time-volume             2
 280
 281 VALUE   ERX-L2TP-Resynch-Method         disable                 0
 282 VALUE   ERX-L2TP-Resynch-Method         failover                1
 283 VALUE   ERX-L2TP-Resynch-Method         silent-failover         2
 284 VALUE   ERX-L2TP-Resynch-Method         failover-with-silent-backup     3
 285
 286 VALUE   ERX-Tunnel-Tx-Speed-Method      static-layer2           1
 287 VALUE   ERX-Tunnel-Tx-Speed-Method      dynamic-layer2          2
 288 VALUE   ERX-Tunnel-Tx-Speed-Method      qos                     3
 289 VALUE   ERX-Tunnel-Tx-Speed-Method      actual                  4
 290
 291 VALUE   ERX-IGMP-Immediate-Leave        disabled                0
 292 VALUE   ERX-IGMP-Immediate-Leave        enabled                 1
 293
 294 VALUE   ERX-MLD-Immediate-Leave         disabled                0
 295 VALUE   ERX-MLD-Immediate-Leave         enabled                 1
 296
 297 VALUE   ERX-IP-Block-Multicast          disabled                0
 298 VALUE   ERX-IP-Block-Multicast          enabled                 1
 299
 300 VALUE   ERX-IGMP-Explicit-Tracking      disabled                0
 301 VALUE   ERX-IGMP-Explicit-Tracking      enabled                 1
 302
 303 VALUE   ERX-IGMP-No-Tracking-V2-Grps    disabled                0
 304 VALUE   ERX-IGMP-No-Tracking-V2-Grps    enabled                 1
 305
 306 VALUE   ERX-MLD-Explicit-Tracking       disabled                0
 307 VALUE   ERX-MLD-Explicit-Tracking       enabled                 1
 308
 309 VALUE   ERX-MLD-No-Tracking-V1-Grps     disabled                0
 310 VALUE   ERX-MLD-No-Tracking-V1-Grps     enabled                 1
 311
 312 VALUE   ERX-DSL-Line-State              SHOWTIME                1
 313 VALUE   ERX-DSL-Line-State              IDLE                    2
 314 VALUE   ERX-DSL-Line-State              SILENT                  3
 315
 316 VALUE   ERX-DSL-Type                    ADSL1                   1
 317 VALUE   ERX-DSL-Type                    ADSL2                   2
 318 VALUE   ERX-DSL-Type                    ADSL2PLUS               3
 319 VALUE   ERX-DSL-Type                    VDSL1                   4
 320 VALUE   ERX-DSL-Type                    VDSL2                   5
 321 VALUE   ERX-DSL-Type                    SDSL                    6
 322 VALUE   ERX-DSL-Type                    UNKNOWN                 7
 323
 324 VALUE   ERX-PPP-Monitor-Ingress-Only    disabled                0
 325 VALUE   ERX-PPP-Monitor-Ingress-Only    enabled                 1
 326
 327 END-VENDOR      ERX