radius/dictionary.erx

   1 # -*- text -*-
   2 #
   3 #  dictionary.erx
   4 #
   5 #       Juniper's (was Unisphere's) broadband RAS
   6 #       From Terje Krogdahl <tekr@nextra.com>
   7 #
   8 # Version:      $Id$
   9 #
  10
  11 # This dictionary applies to access services on Juniper JUNOS (M/MX)
  12 # based platforms as well as JUNOSe, although some of the attributes
  13 # have been given new names on JUNOS:
  14 #       http://www.juniper.net/techpubs/software/junos/junos112/radius-dictionary/unisphereDictionary_for_JUNOS_v11-2.dct
  15 #       http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aaa-subscriber-access-radius-vsa.html
  16 #
  17 # In this file, we keep the ERX prefix and the JUNOSe attribute names
  18 # for backwards compatibility
  19 #
  20 # Juniper ERX dictionaries are available at:
  21 #       http://www.juniper.net/techpubs/software/erx/junose71/unisphere7-1.dct
  22 #       http://www.juniper.net/techpubs/software/erx/junose700/unisphere7-0.dct
  23 #       http://www.juniper.net/techpubs/software/erx/junose700/swconfig-broadband/html/radius-attributes.html
  24 #       http://www.juniper.net/techpubs/software/erx/junose52/unisphere5-2.dct
  25 #       http://www.juniper.net/techpubs/software/erx/erx50x/swconfig-broadband/html/radius-attributes.html
  26 # (The below are from when it was the Unisphere ERX)
  27 #       http://www.juniper.net/techpubs/software/erx/erx410/unisphere4-1.dct
  28 #       http://www.juniper.net/techpubs/software/erx/erx403/unisphere4-0.dct
  29 #       http://www.juniper.net/techpubs/software/erx/erx3xx/unisphere3-2.dct
  30 #       http://www.juniper.net/techpubs/software/erx/erx3xx/unisphere3-0.dct
  31 #
  32 #  As a note on ERX broken-ness, If you don't send a Framed-IP-Address
  33 #  in the Access-Accept packet, the ERX disconnects the user, and
  34 #  sends an Accounting-Request packet with Acct-Status-Type = Stop
  35 #
  36 #  It does NOT send a 'Start' packet, so this behaviour confuses the
  37 #  heck out of most admins, who do everything right, but have the ERX
  38 #  do stupid things.
  39 #
  40 #  The ERX supports Ascend "abinary" format.  See:
  41 #
  42 #       http://www.juniper.net/techpubs/software/erx/junose71/swconfig-policy/html/policy-mgmt-apply5.html
  43 #
  44 #  For this to work in FreeRADIUS, you will have to specify the attribute
  45 #  in hex, as in:
  46 #
  47 #       Ascend-Data-Filter = 0x010203...
  48 #
  49
  50 VENDOR          ERX                             4874
  51
  52 BEGIN-VENDOR    ERX
  53
  54 ATTRIBUTE       ERX-Virtual-Router-Name                 1       string
  55 ATTRIBUTE       ERX-Address-Pool-Name                   2       string
  56 ATTRIBUTE       ERX-Local-Loopback-Interface            3       string
  57 ATTRIBUTE       ERX-Primary-Dns                         4       ipaddr
  58 ATTRIBUTE       ERX-Secondary-Dns                       5       ipaddr
  59 ATTRIBUTE       ERX-Primary-Wins                        6       ipaddr
  60 ATTRIBUTE       ERX-Secondary-Wins                      7       ipaddr
  61 ATTRIBUTE       ERX-Tunnel-Virtual-Router               8       string
  62 ATTRIBUTE       ERX-Tunnel-Password                     9       string
  63 ATTRIBUTE       ERX-Ingress-Policy-Name                 10      string
  64 ATTRIBUTE       ERX-Egress-Policy-Name                  11      string
  65 ATTRIBUTE       ERX-Ingress-Statistics                  12      integer
  66 ATTRIBUTE       ERX-Egress-Statistics                   13      integer
  67 ATTRIBUTE       ERX-Atm-Service-Category                14      integer
  68 ATTRIBUTE       ERX-Atm-PCR                             15      integer
  69 ATTRIBUTE       ERX-Atm-SCR                             16      integer
  70 ATTRIBUTE       ERX-Atm-MBS                             17      integer
  71 ATTRIBUTE       ERX-Cli-Initial-Access-Level            18      string
  72 ATTRIBUTE       ERX-Cli-Allow-All-VR-Access             19      integer
  73 ATTRIBUTE       ERX-Alternate-Cli-Access-Level          20      string
  74 ATTRIBUTE       ERX-Alternate-Cli-Vrouter-Name          21      string
  75 ATTRIBUTE       ERX-Sa-Validate                         22      integer
  76 ATTRIBUTE       ERX-Igmp-Enable                         23      integer
  77 ATTRIBUTE       ERX-Pppoe-Description                   24      string
  78 ATTRIBUTE       ERX-Redirect-VR-Name                    25      string
  79 ATTRIBUTE       ERX-Qos-Profile-Name                    26      string
  80 ATTRIBUTE       ERX-Pppoe-Max-Sessions                  27      integer
  81 ATTRIBUTE       ERX-Pppoe-Url                           28      string
  82 ATTRIBUTE       ERX-Qos-Profile-Interface-Type          29      integer
  83 ATTRIBUTE       ERX-Tunnel-Nas-Port-Method              30      integer
  84 ATTRIBUTE       ERX-Service-Bundle                      31      string
  85 ATTRIBUTE       ERX-Tunnel-Tos                          32      integer
  86 ATTRIBUTE       ERX-Tunnel-Maximum-Sessions             33      integer
  87 ATTRIBUTE       ERX-Framed-Ip-Route-Tag                 34      string
  88 ATTRIBUTE       ERX-Dial-Out-Number                     35      string
  89 ATTRIBUTE       ERX-PPP-Username                        36      string
  90 ATTRIBUTE       ERX-PPP-Password                        37      string
  91 ATTRIBUTE       ERX-PPP-Auth-Protocol                   38      integer
  92 ATTRIBUTE       ERX-Minimum-BPS                         39      integer
  93 ATTRIBUTE       ERX-Maximum-BPS                         40      integer
  94 ATTRIBUTE       ERX-Bearer-Type                         41      integer
  95 ATTRIBUTE       ERX-Input-Gigapkts                      42      integer
  96 ATTRIBUTE       ERX-Output-Gigapkts                     43      integer
  97 ATTRIBUTE       ERX-Tunnel-Interface-Id                 44      string
  98 ATTRIBUTE       ERX-IpV6-Virtual-Router                 45      string
  99 ATTRIBUTE       ERX-IpV6-Local-Interface                46      string
 100 ATTRIBUTE       ERX-Ipv6-Primary-Dns                    47      ipv6addr
 101 ATTRIBUTE       ERX-Ipv6-Secondary-Dns                  48      ipv6addr
 102 ATTRIBUTE       Sdx-Service-Name                        49      string
 103 ATTRIBUTE       Sdx-Session-Volume-Quota                50      string
 104 ATTRIBUTE       Sdx-Tunnel-Disconnect-Cause-Info        51      string
 105 ATTRIBUTE       ERX-Radius-Client-Address               52      ipaddr
 106 ATTRIBUTE       ERX-Service-Description                 53      string
 107 ATTRIBUTE       ERX-L2tp-Recv-Window-Size               54      integer
 108 ATTRIBUTE       ERX-Dhcp-Options                        55      string
 109 ATTRIBUTE       ERX-Dhcp-Mac-Addr                       56      string
 110 ATTRIBUTE       ERX-Dhcp-Gi-Address                     57      ipaddr
 111 ATTRIBUTE       ERX-LI-Action                           58      integer encrypt=2
 112 ATTRIBUTE       ERX-Med-Dev-Handle                      59      octets  encrypt=2
 113 ATTRIBUTE       ERX-Med-Ip-Address                      60      ipaddr  encrypt=2
 114 ATTRIBUTE       ERX-Med-Port-Number                     61      integer encrypt=2
 115 ATTRIBUTE       ERX-MLPPP-Bundle-Name                   62      string
 116 ATTRIBUTE       ERX-Interface-Desc                      63      string
 117 ATTRIBUTE       ERX-Tunnel-Group                        64      string
 118 ATTRIBUTE       ERX-Service-Activate                    65      string  has_tag
 119 ATTRIBUTE       ERX-Service-Deactivate                  66      string
 120 ATTRIBUTE       ERX-Service-Volume                      67      integer has_tag
 121 ATTRIBUTE       ERX-Service-Timeout                     68      integer has_tag
 122 ATTRIBUTE       ERX-Service-Statistics                  69      integer has_tag
 123
 124 ATTRIBUTE       ERX-DF-Bit                              70      integer
 125
 126 ATTRIBUTE       ERX-IGMP-Access-Name                    71      string
 127 ATTRIBUTE       ERX-IGMP-Access-Src-Name                72      string
 128 ATTRIBUTE       ERX-IGMP-OIF-Map-Name                   73      string
 129
 130 ATTRIBUTE       ERX-MLD-Access-Name                     74      string
 131 ATTRIBUTE       ERX-MLD-Access-Src-Name                 75      string
 132 ATTRIBUTE       ERX-MLD-OIF-Map-Name                    76      string
 133 ATTRIBUTE       ERX-MLD-Version                         77      integer
 134 ATTRIBUTE       ERX-IGMP-Version                        78      integer
 135 ATTRIBUTE       ERX-IP-Mcast-Adm-Bw-Limit               79      integer
 136 ATTRIBUTE       ERX-IPv6-Mcast-Adm-Bw-Limit             80      integer
 137 ATTRIBUTE       ERX-Qos-Parameters                      82      string
 138 ATTRIBUTE       ERX-Service-Session                     83      string
 139
 140 ATTRIBUTE       ERX-Mobile-IP-Algorithm                 84      integer
 141 ATTRIBUTE       ERX-Mobile-IP-SPI                       85      integer
 142 ATTRIBUTE       ERX-Mobile-IP-Key                       86      string
 143 ATTRIBUTE       ERX-Mobile-IP-Replay                    87      integer
 144 ATTRIBUTE       ERX-Mobile-IP-Access-Control            88      string
 145 ATTRIBUTE       ERX-Mobile-IP-Lifetime                  89      integer
 146
 147 ATTRIBUTE       ERX-L2TP-Resynch-Method                 90      integer
 148
 149 ATTRIBUTE       ERX-Tunnel-Switch-Profile               91      string
 150
 151 ATTRIBUTE       ERX-L2c-Up-Stream-Data                  92      string
 152 ATTRIBUTE       ERX-L2c-Down-Stream-Data                93      string
 153
 154 ATTRIBUTE       ERX-Tunnel-Tx-Speed-Method              94      integer
 155
 156 ATTRIBUTE       ERX-IGMP-Query-Interval                 95      integer
 157 ATTRIBUTE       ERX-IGMP-Max-Resp-Time                  96      integer
 158 ATTRIBUTE       ERX-IGMP-Immediate-Leave                97      integer
 159 ATTRIBUTE       ERX-MLD-Query-Interval                  98      integer
 160 ATTRIBUTE       ERX-MLD-Max-Resp-Time                   99      integer
 161 ATTRIBUTE       ERX-MLD-Immediate-Leave                 100     integer
 162 ATTRIBUTE       ERX-IP-Block-Multicast                  101     integer
 163
 164 ATTRIBUTE       ERX-IGMP-Explicit-Tracking              102     integer
 165 ATTRIBUTE       ERX-IGMP-No-Tracking-V2-Grps            103     integer
 166 ATTRIBUTE       ERX-MLD-Explicit-Tracking               104     integer
 167 ATTRIBUTE       ERX-MLD-No-Tracking-V1-Grps             105     integer
 168
 169 ATTRIBUTE       ERX-IPv6-Ingress-Policy-Name            106     string
 170 ATTRIBUTE       ERX-IPv6-Egress-Policy-Name             107     string
 171 ATTRIBUTE       ERX-CoS-Shaping-Pmt-Type                108     string
 172 ATTRIBUTE       ERX-DHCP-Guided-Relay-Server            109     ipaddr
 173
 174 ATTRIBUTE       ERX-Acc-Loop-Cir-Id                     110     string
 175 ATTRIBUTE       ERX-Acc-Aggr-Cir-Id-Bin                 111     octets
 176 ATTRIBUTE       ERX-Acc-Aggr-Cir-Id-Asc                 112     string
 177 ATTRIBUTE       ERX-Act-Data-Rate-Up                    113     integer
 178 ATTRIBUTE       ERX-Act-Data-Rate-Dn                    114     integer
 179 ATTRIBUTE       ERX-Min-Data-Rate-Up                    115     integer
 180 ATTRIBUTE       ERX-Min-Data-Rate-Dn                    116     integer
 181 ATTRIBUTE       ERX-Att-Data-Rate-Up                    117     integer
 182 ATTRIBUTE       ERX-Att-Data-Rate-Dn                    118     integer
 183 ATTRIBUTE       ERX-Max-Data-Rate-Up                    119     integer
 184 ATTRIBUTE       ERX-Max-Data-Rate-Dn                    120     integer
 185 ATTRIBUTE       ERX-Min-LP-Data-Rate-Up                 121     integer
 186 ATTRIBUTE       ERX-Min-LP-Data-Rate-Dn                 122     integer
 187 ATTRIBUTE       ERX-Max-Interlv-Delay-Up                123     integer
 188 ATTRIBUTE       ERX-Act-Interlv-Delay-Up                124     integer
 189 ATTRIBUTE       ERX-Max-Interlv-Delay-Dn                125     integer
 190 ATTRIBUTE       ERX-Act-Interlv-Delay-Dn                126     integer
 191 ATTRIBUTE       ERX-DSL-Line-State                      127     integer
 192 ATTRIBUTE       ERX-DSL-Type                            128     integer
 193
 194 ATTRIBUTE       ERX-IPv6-NdRa-Prefix                    129     ipv6prefix
 195 ATTRIBUTE       ERX-Qos-Set-Name                        130     string
 196
 197 ATTRIBUTE       ERX-Service-Acct-Interval               140     integer has_tag
 198
 199 ATTRIBUTE       ERX-DownStream-Calc-Rate                141     integer
 200 ATTRIBUTE       ERX-UpStream-Calc-Rate                  142     integer
 201 ATTRIBUTE       ERX-Max-Clients-Per-Interface           143     integer
 202
 203 ATTRIBUTE       ERX-PPP-Monitor-Ingress-Only            144     integer
 204
 205 ATTRIBUTE       ERX-CoS-Scheduler-Pmt-Type              146     string
 206 ATTRIBUTE       ERX-Backup-Address-Pool                 147     string
 207
 208 ATTRIBUTE       ERX-ICR-Partition-Id                    150     string
 209 ATTRIBUTE       ERX-IPv6-Acct-Input-Octets              151     integer
 210 ATTRIBUTE       ERX-IPv6-Acct-Output-Octets             152     integer
 211 ATTRIBUTE       ERX-IPv6-Acct-Input-Packets             153     integer
 212 ATTRIBUTE       ERX-IPv6-Acct-Output-Packets            154     integer
 213 ATTRIBUTE       ERX-IPv6-Acct-Input-Gigawords           155     integer
 214 ATTRIBUTE       ERX-IPv6-Acct-Output-Gigawords          156     integer
 215 ATTRIBUTE       ERX-IPv6-NdRa-Pool-Name                 157     string
 216 ATTRIBUTE       ERX-PppoE-Padn                          158     string
 217 ATTRIBUTE       ERX-Dhcp-Option-82                      159     octets
 218 ATTRIBUTE       ERX-Vlan-Map-Id                         160     integer
 219 ATTRIBUTE       ERX-IPv6-Delegated-Pool-Name            161     string
 220
 221 ATTRIBUTE       Juniper-Tx-Connect-Speed        162     integer
 222 ATTRIBUTE       Juniper-Rx-Connect-Speed        163 integer
 223
 224 # ATTRIBUTE 164 - 173 RESERVED
 225
 226 ATTRIBUTE       Unisphere-Client-Profile-Name   174 string
 227 ATTRIBUTE       Juniper-Redirect-GW-Address             175     ipaddr
 228 ATTRIBUTE       Juniper-APN-Name                        176     string
 229
 230 #
 231 #  Values       Attribute               Name                    Number
 232 #
 233 VALUE   ERX-Ingress-Statistics          disable                 0
 234 VALUE   ERX-Ingress-Statistics          enable                  1
 235
 236 VALUE   ERX-Egress-Statistics           disable                 0
 237 VALUE   ERX-Egress-Statistics           enable                  1
 238
 239 VALUE   ERX-Atm-Service-Category        UBR                     1
 240 VALUE   ERX-Atm-Service-Category        UBRPCR                  2
 241 VALUE   ERX-Atm-Service-Category        nrtVBR                  3
 242 VALUE   ERX-Atm-Service-Category        CBR                     4
 243
 244 VALUE   ERX-Cli-Allow-All-VR-Access     disable                 0
 245 VALUE   ERX-Cli-Allow-All-VR-Access     enable                  1
 246
 247 VALUE   ERX-Sa-Validate                 disable                 0
 248 VALUE   ERX-Sa-Validate                 enable                  1
 249
 250 VALUE   ERX-Igmp-Enable                 disable                 0
 251 VALUE   ERX-Igmp-Enable                 enable                  1
 252
 253 VALUE   ERX-Qos-Profile-Interface-Type  IP                      1
 254 VALUE   ERX-Qos-Profile-Interface-Type  ATM                     2
 255 VALUE   ERX-Qos-Profile-Interface-Type  HDLC                    3
 256 VALUE   ERX-Qos-Profile-Interface-Type  ETHERNET                4
 257 VALUE   ERX-Qos-Profile-Interface-Type  SERVER-PORT             5
 258 VALUE   ERX-Qos-Profile-Interface-Type  ATM-1483                6
 259 VALUE   ERX-Qos-Profile-Interface-Type  FRAME-RELAY             7
 260 VALUE   ERX-Qos-Profile-Interface-Type  MPLS-MINOR              8
 261 VALUE   ERX-Qos-Profile-Interface-Type  CBF                     9
 262 VALUE   ERX-Qos-Profile-Interface-Type  IP-TUNNEL               10
 263 VALUE   ERX-Qos-Profile-Interface-Type  VLAN-SUB                11
 264 VALUE   ERX-Qos-Profile-Interface-Type  PPPOE-SUB               12
 265
 266 VALUE   ERX-Tunnel-Nas-Port-Method      None                    0
 267 VALUE   ERX-Tunnel-Nas-Port-Method      CISCO-CLID              1
 268
 269 VALUE   ERX-PPP-Auth-Protocol           None                    0
 270 VALUE   ERX-PPP-Auth-Protocol           PAP                     1
 271 VALUE   ERX-PPP-Auth-Protocol           CHAP                    2
 272 VALUE   ERX-PPP-Auth-Protocol           PAP-CHAP                3
 273 VALUE   ERX-PPP-Auth-Protocol           CHAP-PAP                4
 274
 275 VALUE   ERX-Bearer-Type                 None                    0
 276 VALUE   ERX-Bearer-Type                 Analog                  1
 277 VALUE   ERX-Bearer-Type                 Digital                 2
 278
 279 VALUE   ERX-LI-Action                   off                     0
 280 VALUE   ERX-LI-Action                   on                      1
 281 VALUE   ERX-LI-Action                   noop                    2
 282
 283 VALUE   ERX-DF-Bit                      dont-ignore-df-bit      0
 284 VALUE   ERX-DF-Bit                      ignore-df-bit           1
 285
 286 VALUE   ERX-MLD-Version                 v1                      1
 287 VALUE   ERX-MLD-Version                 v2                      2
 288
 289 VALUE   ERX-IGMP-Version                v1                      1
 290 VALUE   ERX-IGMP-Version                v2                      2
 291 VALUE   ERX-IGMP-Version                v3                      3
 292
 293 VALUE   ERX-Service-Statistics          disabled                0
 294 VALUE   ERX-Service-Statistics          time                    1
 295 VALUE   ERX-Service-Statistics          time-volume             2
 296
 297 VALUE   ERX-L2TP-Resynch-Method         disable                 0
 298 VALUE   ERX-L2TP-Resynch-Method         failover                1
 299 VALUE   ERX-L2TP-Resynch-Method         silent-failover         2
 300 VALUE   ERX-L2TP-Resynch-Method         failover-with-silent-backup     3
 301
 302 VALUE   ERX-Tunnel-Tx-Speed-Method      static-layer2           1
 303 VALUE   ERX-Tunnel-Tx-Speed-Method      dynamic-layer2          2
 304 VALUE   ERX-Tunnel-Tx-Speed-Method      qos                     3
 305 VALUE   ERX-Tunnel-Tx-Speed-Method      actual                  4
 306
 307 VALUE   ERX-IGMP-Immediate-Leave        disabled                0
 308 VALUE   ERX-IGMP-Immediate-Leave        enabled                 1
 309
 310 VALUE   ERX-MLD-Immediate-Leave         disabled                0
 311 VALUE   ERX-MLD-Immediate-Leave         enabled                 1
 312
 313 VALUE   ERX-IP-Block-Multicast          disabled                0
 314 VALUE   ERX-IP-Block-Multicast          enabled                 1
 315
 316 VALUE   ERX-IGMP-Explicit-Tracking      disabled                0
 317 VALUE   ERX-IGMP-Explicit-Tracking      enabled                 1
 318
 319 VALUE   ERX-IGMP-No-Tracking-V2-Grps    disabled                0
 320 VALUE   ERX-IGMP-No-Tracking-V2-Grps    enabled                 1
 321
 322 VALUE   ERX-MLD-Explicit-Tracking       disabled                0
 323 VALUE   ERX-MLD-Explicit-Tracking       enabled                 1
 324
 325 VALUE   ERX-MLD-No-Tracking-V1-Grps     disabled                0
 326 VALUE   ERX-MLD-No-Tracking-V1-Grps     enabled                 1
 327
 328 VALUE   ERX-DSL-Line-State              SHOWTIME                1
 329 VALUE   ERX-DSL-Line-State              IDLE                    2
 330 VALUE   ERX-DSL-Line-State              SILENT                  3
 331
 332 VALUE   ERX-DSL-Type                    ADSL1                   1
 333 VALUE   ERX-DSL-Type                    ADSL2                   2
 334 VALUE   ERX-DSL-Type                    ADSL2PLUS               3
 335 VALUE   ERX-DSL-Type                    VDSL1                   4
 336 VALUE   ERX-DSL-Type                    VDSL2                   5
 337 VALUE   ERX-DSL-Type                    SDSL                    6
 338 VALUE   ERX-DSL-Type                    UNKNOWN                 7
 339
 340 VALUE   ERX-PPP-Monitor-Ingress-Only    disabled                0
 341 VALUE   ERX-PPP-Monitor-Ingress-Only    enabled                 1
 342
 343 END-VENDOR      ERX