4 # DO NOT EDIT THE FILES IN THIS DIRECTORY
6 # The files in this directory are maintained and updated by
7 # the FreeRADIUS project. Newer releases of software may update
8 # or change these files.
10 # Use the main dictionary file (usually /etc/raddb/dictionary)
11 # for local system attributes and $INCLUDEs.
15 # This file contains dictionary translations for parsing
16 # requests and generating responses. All transactions are
17 # composed of Attribute/Value Pairs. The value of each attribute
18 # is specified as one of 4 data types. Valid data types are:
20 # string - 0-253 octets
21 # ipaddr - 4 octets in network byte order
22 # integer - 32 bit value in big endian order (high byte first)
23 # date - 32 bit value in big endian order - seconds since
24 # 00:00:00 GMT, Jan. 1, 1970
25 # ifid - 8 octets in network byte order
26 # ipv6addr - 16 octets in network byte order
27 # ipv6prefix - 18 octets in network byte order
29 # FreeRADIUS includes extended data types which are not defined
30 # in RFC 2865 or RFC 2866, or RFC 3162. These data types are:
32 # abinary - Ascend's binary filter format.
33 # octets - raw octets, printed and input as hex strings.
34 # e.g.: 0x123456789abcdef
37 # Enumerated values are stored in the user file with dictionary
38 # VALUE translations for easy administration.
43 # --------------- -----
44 # Framed-Protocol = PPP
45 # 7 = 1 (integer encoding)
49 # Include compatibility dictionary for older users file. Move this
50 # directive to the end of the file if you want to see the old names
51 # in the logfiles, INSTEAD OF the new names.
53 $INCLUDE dictionary.compat # compability issues
54 $INCLUDE dictionary.3com
55 $INCLUDE dictionary.3gpp
56 $INCLUDE dictionary.3gpp2
57 $INCLUDE dictionary.acc
58 $INCLUDE dictionary.alcatel
59 $INCLUDE dictionary.alteon
60 $INCLUDE dictionary.ascend
61 $INCLUDE dictionary.bay
62 $INCLUDE dictionary.bintec
63 $INCLUDE dictionary.cabletron
64 $INCLUDE dictionary.cisco
66 # This is the same as the altiga dictionary.
68 #$INCLUDE dictionary.cisco.vpn3000
69 $INCLUDE dictionary.cisco.vpn5000
70 $INCLUDE dictionary.cisco.bbsm
71 $INCLUDE dictionary.colubris
72 $INCLUDE dictionary.erx
73 $INCLUDE dictionary.extreme
74 $INCLUDE dictionary.freeradius
75 $INCLUDE dictionary.gandalf
76 $INCLUDE dictionary.itk
77 $INCLUDE dictionary.juniper
78 $INCLUDE dictionary.karlnet
79 $INCLUDE dictionary.livingston
80 $INCLUDE dictionary.microsoft
81 $INCLUDE dictionary.navini
82 $INCLUDE dictionary.nomadix
83 $INCLUDE dictionary.propel
84 $INCLUDE dictionary.quintum
85 $INCLUDE dictionary.redback
86 $INCLUDE dictionary.redcreek
87 $INCLUDE dictionary.shasta
88 $INCLUDE dictionary.shiva
89 $INCLUDE dictionary.sonicwall
90 $INCLUDE dictionary.springtide
91 $INCLUDE dictionary.telebit
92 $INCLUDE dictionary.trapeze
93 $INCLUDE dictionary.tunnel
94 $INCLUDE dictionary.usr
95 $INCLUDE dictionary.versanet
96 $INCLUDE dictionary.wispr
97 $INCLUDE dictionary.xedia
100 # The following are the proper new names. Use these.
102 # http://www.iana.org/assignments/radius-types
104 ATTRIBUTE User-Name 1 string
105 ATTRIBUTE User-Password 2 string encrypt=1
106 ATTRIBUTE CHAP-Password 3 octets
107 ATTRIBUTE NAS-IP-Address 4 ipaddr
108 ATTRIBUTE NAS-Port 5 integer
109 ATTRIBUTE Service-Type 6 integer
110 ATTRIBUTE Framed-Protocol 7 integer
111 ATTRIBUTE Framed-IP-Address 8 ipaddr
112 ATTRIBUTE Framed-IP-Netmask 9 ipaddr
113 ATTRIBUTE Framed-Routing 10 integer
114 ATTRIBUTE Filter-Id 11 string
115 ATTRIBUTE Framed-MTU 12 integer
116 ATTRIBUTE Framed-Compression 13 integer
117 ATTRIBUTE Login-IP-Host 14 ipaddr
118 ATTRIBUTE Login-Service 15 integer
119 ATTRIBUTE Login-TCP-Port 16 integer
120 ATTRIBUTE Reply-Message 18 string
121 ATTRIBUTE Callback-Number 19 string
122 ATTRIBUTE Callback-Id 20 string
123 ATTRIBUTE Framed-Route 22 string
124 ATTRIBUTE Framed-IPX-Network 23 ipaddr
125 ATTRIBUTE State 24 octets
126 ATTRIBUTE Class 25 octets
127 ATTRIBUTE Vendor-Specific 26 octets
128 ATTRIBUTE Session-Timeout 27 integer
129 ATTRIBUTE Idle-Timeout 28 integer
130 ATTRIBUTE Termination-Action 29 integer
131 ATTRIBUTE Called-Station-Id 30 string
132 ATTRIBUTE Calling-Station-Id 31 string
133 ATTRIBUTE NAS-Identifier 32 string
134 ATTRIBUTE Proxy-State 33 octets
135 ATTRIBUTE Login-LAT-Service 34 string
136 ATTRIBUTE Login-LAT-Node 35 string
137 ATTRIBUTE Login-LAT-Group 36 octets
138 ATTRIBUTE Framed-AppleTalk-Link 37 integer
139 ATTRIBUTE Framed-AppleTalk-Network 38 integer
140 ATTRIBUTE Framed-AppleTalk-Zone 39 string
142 ATTRIBUTE Acct-Status-Type 40 integer
143 ATTRIBUTE Acct-Delay-Time 41 integer
144 ATTRIBUTE Acct-Input-Octets 42 integer
145 ATTRIBUTE Acct-Output-Octets 43 integer
146 ATTRIBUTE Acct-Session-Id 44 string
147 ATTRIBUTE Acct-Authentic 45 integer
148 ATTRIBUTE Acct-Session-Time 46 integer
149 ATTRIBUTE Acct-Input-Packets 47 integer
150 ATTRIBUTE Acct-Output-Packets 48 integer
151 ATTRIBUTE Acct-Terminate-Cause 49 integer
152 ATTRIBUTE Acct-Multi-Session-Id 50 string
153 ATTRIBUTE Acct-Link-Count 51 integer
154 ATTRIBUTE Acct-Input-Gigawords 52 integer
155 ATTRIBUTE Acct-Output-Gigawords 53 integer
156 ATTRIBUTE Event-Timestamp 55 date
158 ATTRIBUTE CHAP-Challenge 60 octets
159 ATTRIBUTE NAS-Port-Type 61 integer
160 ATTRIBUTE Port-Limit 62 integer
161 ATTRIBUTE Login-LAT-Port 63 integer
163 ATTRIBUTE Acct-Tunnel-Connection 68 string
165 ATTRIBUTE ARAP-Password 70 string
166 ATTRIBUTE ARAP-Features 71 string
167 ATTRIBUTE ARAP-Zone-Access 72 integer
168 ATTRIBUTE ARAP-Security 73 integer
169 ATTRIBUTE ARAP-Security-Data 74 string
170 ATTRIBUTE Password-Retry 75 integer
171 ATTRIBUTE Prompt 76 integer
172 ATTRIBUTE Connect-Info 77 string
173 ATTRIBUTE Configuration-Token 78 string
174 ATTRIBUTE EAP-Message 79 octets
175 ATTRIBUTE Message-Authenticator 80 octets
176 ATTRIBUTE ARAP-Challenge-Response 84 string # 10 octets
177 ATTRIBUTE Acct-Interim-Interval 85 integer
178 ATTRIBUTE NAS-Port-Id 87 string
179 ATTRIBUTE Framed-Pool 88 string
180 ATTRIBUTE NAS-IPv6-Address 95 ipv6addr
181 ATTRIBUTE Framed-Interface-Id 96 ifid
182 ATTRIBUTE Framed-IPv6-Prefix 97 octets # ipv6prefix
183 ATTRIBUTE Login-IPv6-Host 98 ipv6addr
184 ATTRIBUTE Framed-IPv6-Route 99 string
185 ATTRIBUTE Framed-IPv6-Pool 100 string
187 # As defined in RFC 3576
188 ATTRIBUTE Error-Cause 101 integer
190 # As defined in draft-sterman-aaa-sip-00.txt
191 ATTRIBUTE Digest-Response 206 string
192 ATTRIBUTE Digest-Attributes 207 octets # stupid format
195 # Experimental Non Protocol Attributes used by FreeRADIUS
198 # These attributes CAN go in the reply item list.
199 ATTRIBUTE Fall-Through 500 integer
200 ATTRIBUTE Exec-Program 502 string
201 ATTRIBUTE Exec-Program-Wait 503 string
203 # These attributes CANNOT go in the reply item list.
204 ATTRIBUTE User-Category 1029 string
205 ATTRIBUTE Group-Name 1030 string
206 ATTRIBUTE Huntgroup-Name 1031 string
207 ATTRIBUTE Simultaneous-Use 1034 integer
208 ATTRIBUTE Strip-User-Name 1035 integer
209 ATTRIBUTE Hint 1040 string
210 ATTRIBUTE Pam-Auth 1041 string
211 ATTRIBUTE Login-Time 1042 string
212 ATTRIBUTE Stripped-User-Name 1043 string
213 ATTRIBUTE Current-Time 1044 string
214 ATTRIBUTE Realm 1045 string
215 ATTRIBUTE No-Such-Attribute 1046 string
216 ATTRIBUTE Packet-Type 1047 integer
217 ATTRIBUTE Proxy-To-Realm 1048 string
218 ATTRIBUTE Replicate-To-Realm 1049 string
219 ATTRIBUTE Acct-Session-Start-Time 1050 date
220 ATTRIBUTE Acct-Unique-Session-Id 1051 string
221 ATTRIBUTE Client-IP-Address 1052 ipaddr
222 ATTRIBUTE Ldap-UserDn 1053 string
223 ATTRIBUTE NS-MTA-MD5-Password 1054 string
224 ATTRIBUTE SQL-User-Name 1055 string
225 ATTRIBUTE LM-Password 1057 octets
226 ATTRIBUTE NT-Password 1058 octets
227 ATTRIBUTE SMB-Account-CTRL 1059 integer
228 ATTRIBUTE SMB-Account-CTRL-TEXT 1061 string
229 ATTRIBUTE User-Profile 1062 string
230 ATTRIBUTE Digest-Realm 1063 string
231 ATTRIBUTE Digest-Nonce 1064 string
232 ATTRIBUTE Digest-Method 1065 string
233 ATTRIBUTE Digest-URI 1066 string
234 ATTRIBUTE Digest-QOP 1067 string
235 ATTRIBUTE Digest-Algorithm 1068 string
236 ATTRIBUTE Digest-Body-Digest 1069 string
237 ATTRIBUTE Digest-CNonce 1070 string
238 ATTRIBUTE Digest-Nonce-Count 1071 string
239 ATTRIBUTE Digest-User-Name 1072 string
240 ATTRIBUTE Pool-Name 1073 string
241 ATTRIBUTE Ldap-Group 1074 string
242 ATTRIBUTE Module-Success-Message 1075 string
243 ATTRIBUTE Module-Failure-Message 1076 string
244 # X99-Fast 1077 integer
245 ATTRIBUTE Rewrite-Rule 1078 string
246 ATTRIBUTE Sql-Group 1079 string
247 ATTRIBUTE Response-Packet-Type 1080 integer
248 ATTRIBUTE Packet-Dst-Port 1081 integer
251 # Non-Protocol Attributes
252 # These attributes are used internally by the server
254 ATTRIBUTE Auth-Type 1000 integer
255 ATTRIBUTE Menu 1001 string
256 ATTRIBUTE Termination-Menu 1002 string
257 ATTRIBUTE Prefix 1003 string
258 ATTRIBUTE Suffix 1004 string
259 ATTRIBUTE Group 1005 string
260 ATTRIBUTE Crypt-Password 1006 string
261 ATTRIBUTE Connect-Rate 1007 integer
262 ATTRIBUTE Add-Prefix 1008 string
263 ATTRIBUTE Add-Suffix 1009 string
264 ATTRIBUTE Expiration 1010 date
265 ATTRIBUTE Autz-Type 1011 integer
266 ATTRIBUTE Acct-Type 1012 integer
267 ATTRIBUTE Session-Type 1013 integer
268 ATTRIBUTE Post-Auth-Type 1014 integer
269 ATTRIBUTE Pre-Proxy-Type 1015 integer
270 ATTRIBUTE Post-Proxy-Type 1016 integer
271 ATTRIBUTE Pre-Acct-Type 1017 integer
274 # This is the EAP type of authentication, which is set
275 # by the EAP module, for informational purposes only.
277 ATTRIBUTE EAP-Type 1018 integer
278 ATTRIBUTE EAP-TLS-Require-Client-Cert 1019 integer
279 ATTRIBUTE EAP-Id 1020 integer
280 ATTRIBUTE EAP-Code 1021 integer
281 ATTRIBUTE EAP-MD5-Password 1022 string
283 ATTRIBUTE MS-CHAP-Use-NTLM-Auth 1023 integer
285 # these are PW_EAP_X + 1280
286 ATTRIBUTE EAP-Type-Identity 1281 string
287 ATTRIBUTE EAP-Type-Notification 1282 string
288 ATTRIBUTE EAP-Type-NAK 1283 string
289 ATTRIBUTE EAP-Type-MD5 1284 octets
290 ATTRIBUTE EAP-Type-OTP 1285 string
291 ATTRIBUTE EAP-Type-GTC 1286 string
292 ATTRIBUTE EAP-Type-TLS 1297 octets
293 ATTRIBUTE EAP-Type-SIM 1298 octets
294 ATTRIBUTE EAP-Type-LEAP 1301 octets
295 ATTRIBUTE EAP-Type-SIM2 1302 octets
296 ATTRIBUTE EAP-Type-TTLS 1305 octets
297 ATTRIBUTE EAP-Type-PEAP 1309 octets
299 # these are PW_EAP_SIM_X + 1536
300 ATTRIBUTE EAP-Sim-RAND 1537 octets
301 ATTRIBUTE EAP-Sim-PADDING 1542 octets
302 ATTRIBUTE EAP-Sim-NONCE_MT 1543 octets
303 ATTRIBUTE EAP-Sim-PERMANENT_ID_REQ 1546 octets
304 ATTRIBUTE EAP-Sim-MAC 1547 octets
305 ATTRIBUTE EAP-Sim-NOTIFICATION 1548 octets
306 ATTRIBUTE EAP-Sim-ANY_ID_REQ 1549 octets
307 ATTRIBUTE EAP-Sim-IDENTITY 1550 octets
308 ATTRIBUTE EAP-Sim-VERSION_LIST 1551 octets
309 ATTRIBUTE EAP-Sim-SELECTED_VERSION 1552 octets
310 ATTRIBUTE EAP-Sim-FULLAUTH_ID_REQ 1553 octets
311 ATTRIBUTE EAP-Sim-COUNTER 1555 octets
312 ATTRIBUTE EAP-Sim-COUNTER_TOO_SMALL 1556 octets
313 ATTRIBUTE EAP-Sim-NONCE_S 1557 octets
314 ATTRIBUTE EAP-Sim-IV 1665 octets
315 ATTRIBUTE EAP-Sim-ENCR_DATA 1666 octets
316 ATTRIBUTE EAP-Sim-NEXT_PSEUDONUM 1668 octets
317 ATTRIBUTE EAP-Sim-NEXT_REAUTH_ID 1669 octets
318 ATTRIBUTE EAP-Sim-CHECKCODE 1670 octets
321 # For EAP-SIM, some attribute definitions for database interface
323 ATTRIBUTE EAP-Sim-Rand1 1024 octets
324 ATTRIBUTE EAP-Sim-Rand2 1025 octets
325 ATTRIBUTE EAP-Sim-Rand3 1026 octets
327 ATTRIBUTE EAP-Sim-SRES1 1027 octets
328 ATTRIBUTE EAP-Sim-SRES2 1028 octets
329 ATTRIBUTE EAP-Sim-SRES3 1029 octets
331 ATTRIBUTE EAP-Sim-Subtype 1023 integer
333 VALUE EAP-Sim-Subtype Start 10
334 VALUE EAP-Sim-Subtype Challenge 11
335 VALUE EAP-Sim-Subtype Notification 12
336 VALUE EAP-Sim-Subtype Re-authentication 13
338 # this attribute is used internally by the client code.
339 ATTRIBUTE EAP-Sim-State 1030 integer
341 ATTRIBUTE EAP-Sim-IMSI 1031 string
342 ATTRIBUTE EAP-Sim-HMAC 1032 string
343 ATTRIBUTE EAP-Sim-KEY 1033 octets
344 ATTRIBUTE EAP-Sim-EXTRA 1034 octets
346 ATTRIBUTE EAP-Sim-KC1 1035 octets
347 ATTRIBUTE EAP-Sim-KC2 1036 octets
348 ATTRIBUTE EAP-Sim-KC3 1037 octets
351 # Integer Translations
356 VALUE Service-Type Login-User 1
357 VALUE Service-Type Framed-User 2
358 VALUE Service-Type Callback-Login-User 3
359 VALUE Service-Type Callback-Framed-User 4
360 VALUE Service-Type Outbound-User 5
361 VALUE Service-Type Administrative-User 6
362 VALUE Service-Type NAS-Prompt-User 7
363 VALUE Service-Type Authenticate-Only 8
364 VALUE Service-Type Callback-NAS-Prompt 9
365 VALUE Service-Type Call-Check 10
366 VALUE Service-Type Callback-Administrative 11
367 VALUE Service-Type Voice 12
368 VALUE Service-Type Fax 13
369 VALUE Service-Type Modem-Relay 14
370 VALUE Service-Type IAPP-Register 15
371 VALUE Service-Type IAPP-AP-Check 16
375 VALUE Framed-Protocol PPP 1
376 VALUE Framed-Protocol SLIP 2
377 VALUE Framed-Protocol ARAP 3
378 VALUE Framed-Protocol Gandalf-SLML 4
379 VALUE Framed-Protocol Xylogics-IPX-SLIP 5
380 VALUE Framed-Protocol X.75-Synchronous 6
381 VALUE Framed-Protocol GPRS-PDP-Context 7
383 # Framed Routing Values
385 VALUE Framed-Routing None 0
386 VALUE Framed-Routing Broadcast 1
387 VALUE Framed-Routing Listen 2
388 VALUE Framed-Routing Broadcast-Listen 3
390 # Framed Compression Types
392 VALUE Framed-Compression None 0
393 VALUE Framed-Compression Van-Jacobson-TCP-IP 1
394 VALUE Framed-Compression IPX-Header-Compression 2
395 VALUE Framed-Compression Stac-LZS 3
399 VALUE Login-Service Telnet 0
400 VALUE Login-Service Rlogin 1
401 VALUE Login-Service TCP-Clear 2
402 VALUE Login-Service PortMaster 3
403 VALUE Login-Service LAT 4
404 VALUE Login-Service X25-PAD 5
405 VALUE Login-Service X25-T3POS 6
406 VALUE Login-Service TCP-Clear-Quiet 7
408 # Login-TCP-Port (see /etc/services for more examples)
410 VALUE Login-TCP-Port Telnet 23
411 VALUE Login-TCP-Port Rlogin 513
412 VALUE Login-TCP-Port Rsh 514
416 VALUE Acct-Status-Type Start 1
417 VALUE Acct-Status-Type Stop 2
418 VALUE Acct-Status-Type Interim-Update 3
419 VALUE Acct-Status-Type Alive 3
420 VALUE Acct-Status-Type Accounting-On 7
421 VALUE Acct-Status-Type Accounting-Off 8
422 # RFC 2867 Additional Status-Type Values
423 VALUE Acct-Status-Type Tunnel-Start 9
424 VALUE Acct-Status-Type Tunnel-Stop 10
425 VALUE Acct-Status-Type Tunnel-Reject 11
426 VALUE Acct-Status-Type Tunnel-Link-Start 12
427 VALUE Acct-Status-Type Tunnel-Link-Stop 13
428 VALUE Acct-Status-Type Tunnel-Link-Reject 14
429 VALUE Acct-Status-Type Failed 15
431 # Authentication Types
433 VALUE Acct-Authentic RADIUS 1
434 VALUE Acct-Authentic Local 2
435 VALUE Acct-Authentic Remote 3
436 VALUE Acct-Authentic Diameter 4
438 # Termination Options
440 VALUE Termination-Action Default 0
441 VALUE Termination-Action RADIUS-Request 1
445 VALUE NAS-Port-Type Async 0
446 VALUE NAS-Port-Type Sync 1
447 VALUE NAS-Port-Type ISDN 2
448 VALUE NAS-Port-Type ISDN-V120 3
449 VALUE NAS-Port-Type ISDN-V110 4
450 VALUE NAS-Port-Type Virtual 5
451 VALUE NAS-Port-Type PIAFS 6
452 VALUE NAS-Port-Type HDLC-Clear-Channel 7
453 VALUE NAS-Port-Type X.25 8
454 VALUE NAS-Port-Type X.75 9
455 VALUE NAS-Port-Type G.3-Fax 10
456 VALUE NAS-Port-Type SDSL 11
457 VALUE NAS-Port-Type ADSL-CAP 12
458 VALUE NAS-Port-Type ADSL-DMT 13
459 VALUE NAS-Port-Type IDSL 14
460 VALUE NAS-Port-Type Ethernet 15
461 VALUE NAS-Port-Type xDSL 16
462 VALUE NAS-Port-Type Cable 17
463 VALUE NAS-Port-Type Wireless-Other 18
464 VALUE NAS-Port-Type Wireless-802.11 19
465 VALUE NAS-Port-Type Token-Ring 20
466 VALUE NAS-Port-Type FDDI 21
467 VALUE NAS-Port-Type Wireless-CDMA2000 22
468 VALUE NAS-Port-Type Wireless-UMTS 23
469 VALUE NAS-Port-Type Wireless-1X-EV 24
470 VALUE NAS-Port-Type IAPP 25
472 # Acct Terminate Causes
474 VALUE Acct-Terminate-Cause User-Request 1
475 VALUE Acct-Terminate-Cause Lost-Carrier 2
476 VALUE Acct-Terminate-Cause Lost-Service 3
477 VALUE Acct-Terminate-Cause Idle-Timeout 4
478 VALUE Acct-Terminate-Cause Session-Timeout 5
479 VALUE Acct-Terminate-Cause Admin-Reset 6
480 VALUE Acct-Terminate-Cause Admin-Reboot 7
481 VALUE Acct-Terminate-Cause Port-Error 8
482 VALUE Acct-Terminate-Cause NAS-Error 9
483 VALUE Acct-Terminate-Cause NAS-Request 10
484 VALUE Acct-Terminate-Cause NAS-Reboot 11
485 VALUE Acct-Terminate-Cause Port-Unneeded 12
486 VALUE Acct-Terminate-Cause Port-Preempted 13
487 VALUE Acct-Terminate-Cause Port-Suspended 14
488 VALUE Acct-Terminate-Cause Service-Unavailable 15
489 VALUE Acct-Terminate-Cause Callback 16
490 VALUE Acct-Terminate-Cause User-Error 17
491 VALUE Acct-Terminate-Cause Host-Request 18
492 VALUE Acct-Terminate-Cause Supplicant-Restart 19
493 VALUE Acct-Terminate-Cause Reauthentication-Failure 20
494 VALUE Acct-Terminate-Cause Port-Reinit 21
495 VALUE Acct-Terminate-Cause Port-Disabled 22
497 #VALUE Tunnel-Type L2TP 3
498 #VALUE Tunnel-Medium-Type IP 1
500 VALUE Prompt No-Echo 0
506 VALUE Error-Cause Residual-Context-Removed 201
507 VALUE Error-Cause Invalid-EAP-Packet 202
508 VALUE Error-Cause Unsupported-Attribute 401
509 VALUE Error-Cause Missing-Attribute 402
510 VALUE Error-Cause NAS-Identification-Mismatch 403
511 VALUE Error-Cause Invalid-Request 404
512 VALUE Error-Cause Unsupported-Service 405
513 VALUE Error-Cause Unsupported-Extension 406
514 VALUE Error-Cause Administratively-Prohibited 501
515 VALUE Error-Cause Proxy-Request-Not-Routable 502
516 VALUE Error-Cause Session-Context-Not-Found 503
517 VALUE Error-Cause Session-Context-Not-Removable 504
518 VALUE Error-Cause Proxy-Processing-Error 505
519 VALUE Error-Cause Resources-Unavailable 506
520 VALUE Error-Cause Request-Initiated 507
523 # Non-Protocol Integer Translations
526 VALUE Auth-Type Local 0
527 VALUE Auth-Type System 1
528 VALUE Auth-Type SecurID 2
529 VALUE Auth-Type Crypt-Local 3
530 VALUE Auth-Type Reject 4
531 VALUE Auth-Type ActivCard 5
532 VALUE Auth-Type EAP 6
533 VALUE Auth-Type ARAP 7
536 # FreeRADIUS extensions (most originally from Cistron)
538 VALUE Auth-Type Ldap 252
539 VALUE Auth-Type Pam 253
540 VALUE Auth-Type Accept 254
542 VALUE Auth-Type PAP 1024
543 VALUE Auth-Type CHAP 1025
544 VALUE Auth-Type LDAP 1026
545 VALUE Auth-Type PAM 1027
546 VALUE Auth-Type MS-CHAP 1028
547 VALUE Auth-Type Kerberos 1029
548 VALUE Auth-Type CRAM 1030
549 VALUE Auth-Type NS-MTA-MD5 1031
550 VALUE Auth-Type CRAM 1032
551 VALUE Auth-Type SMB 1033
554 # Authorization type, too.
556 VALUE Autz-Type Local 0
561 VALUE Acct-Type Local 0
564 # And Session handling
566 VALUE Session-Type Local 0
570 VALUE Post-Auth-Type Local 0
573 # Experimental Non-Protocol Integer Translations for FreeRADIUS
575 VALUE Fall-Through No 0
576 VALUE Fall-Through Yes 1
578 VALUE Packet-Type Access-Request 1
579 VALUE Packet-Type Access-Accept 2
580 VALUE Packet-Type Access-Reject 3
581 VALUE Packet-Type Accounting-Request 4
582 VALUE Packet-Type Accounting-Response 5
583 VALUE Packet-Type Accounting-Status 6
584 VALUE Packet-Type Password-Request 7
585 VALUE Packet-Type Password-Accept 8
586 VALUE Packet-Type Password-Reject 9
587 VALUE Packet-Type Accounting-Message 10
588 VALUE Packet-Type Access-Challenge 11
589 VALUE Packet-Type Status-Server 12
590 VALUE Packet-Type Status-Client 13
593 # Defined in RFC 2882
595 VALUE Packet-Type Disconnect-Request 40
596 VALUE Packet-Type Disconnect-ACK 41
597 VALUE Packet-Type Disconnect-NAK 42
598 VALUE Packet-Type CoA-Request 43
599 VALUE Packet-Type CoA-ACK 44
600 VALUE Packet-Type CoA-NAK 45
603 # The following packet types are described in RFC 2882,
604 # but they are NOT part of the RADIUS standard. Instead,
605 # they are informational about vendor-specific extensions
606 # to the RADIUS standard.
608 VALUE Packet-Type Resource-Free-Request 21
609 VALUE Packet-Type Resource-Free-Response 22
610 VALUE Packet-Type Resource-Query-Request 23
611 VALUE Packet-Type Resource-Query-Response 24
612 VALUE Packet-Type Alternate-Resource-Reclaim-Request 25
613 VALUE Packet-Type NAS-Reboot-Request 26
614 VALUE Packet-Type NAS-Reboot-Response 27
615 VALUE Packet-Type Next-Passcode 29
616 VALUE Packet-Type New-Pin 30
617 VALUE Packet-Type Terminate-Session 31
618 VALUE Packet-Type Password-Expired 32
619 VALUE Packet-Type Event-Request 33
620 VALUE Packet-Type Event-Response 34
621 VALUE Packet-Type Disconnect-Request 40
622 VALUE Packet-Type Disconnect-ACK 41
623 VALUE Packet-Type Disconnect-NAK 42
624 VALUE Packet-Type CoF-Request 43
625 VALUE Packet-Type CoF-ACK 44
626 VALUE Packet-Type CoF-NAK 45
627 VALUE Packet-Type IP-Address-Allocate 50
628 VALUE Packet-Type IP-Address-Release 51
630 VALUE Response-Packet-Type Access-Request 1
631 VALUE Response-Packet-Type Access-Accept 2
632 VALUE Response-Packet-Type Access-Reject 3
633 VALUE Response-Packet-Type Accounting-Request 4
634 VALUE Response-Packet-Type Accounting-Response 5
635 VALUE Response-Packet-Type Accounting-Status 6
636 VALUE Response-Packet-Type Password-Request 7
637 VALUE Response-Packet-Type Password-Accept 8
638 VALUE Response-Packet-Type Password-Reject 9
639 VALUE Response-Packet-Type Accounting-Message 10
640 VALUE Response-Packet-Type Access-Challenge 11
641 VALUE Response-Packet-Type Status-Server 12
642 VALUE Response-Packet-Type Status-Client 13
645 # EAP Sub-types, inside of Request and Response packets
647 # http://www.iana.org/assignments/ppp-numbers
648 # "PPP EAP REQUEST/RESPONSE TYPES"
651 # See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
653 VALUE EAP-Type None 0
654 VALUE EAP-Type Identity 1
655 VALUE EAP-Type Notification 2
657 VALUE EAP-Type MD5-Challenge 4
658 VALUE EAP-Type One-Time-Password 5
659 VALUE EAP-Type Generic-Token-Card 6
660 VALUE EAP-Type RSA-Public-Key 9
661 VALUE EAP-Type DSS-Unilateral 10
662 VALUE EAP-Type KEA 11
663 VALUE EAP-Type KEA-Validate 12
664 VALUE EAP-Type KEA 11
665 VALUE EAP-Type EAP-TLS 13
666 VALUE EAP-Type Defender-Token 14
667 VALUE EAP-Type RSA-SecurID-EAP 15
668 VALUE EAP-Type Arcot-Systems-EAP 16
669 VALUE EAP-Type Cisco-LEAP 17
670 VALUE EAP-Type Nokia-IP-Smart-Card 18
671 VALUE EAP-Type SIM 18
672 VALUE EAP-Type SRP-SHA1-Part-1 19
673 VALUE EAP-Type SRP-SHA1-Part-2 20
674 VALUE EAP-Type EAP-TTLS 21
675 VALUE EAP-Type Remote-Access-Service 22
676 VALUE EAP-Type UMTS 23
677 VALUE EAP-Type EAP-3Com-Wireless 24
678 VALUE EAP-Type PEAP 25
679 VALUE EAP-Type MS-EAP-Authentication 26
680 VALUE EAP-Type MAKE 27
681 VALUE EAP-Type CRYPTOCard 28
682 VALUE EAP-Type EAP-MSCHAP-V2 29
683 VALUE EAP-Type DynamID 30
684 VALUE EAP-Type Rob-EAP 31
685 VALUE EAP-Type SecurID-EAP 32
686 VALUE EAP-Type MS-Authentication-TLV 33
687 VALUE EAP-Type SentriNET 34
688 VALUE EAP-Type EAP-Actiontec-Wireless 35
689 VALUE EAP-Type Cogent-Biomentric-EAP 36
690 VALUE EAP-Type AirFortress-EAP 37
691 VALUE EAP-Type EAP-HTTP-Digest 38
692 VALUE EAP-Type SecuriSuite-EAP 39
693 VALUE EAP-Type DeviceConnect-EAP 40
694 VALUE EAP-Type EAP-SPEKE 41
695 VALUE EAP-Type EAP-MOBAC 42
698 # These are duplicate values, to get around the problem of
699 # having two MS-CHAPv2 EAP types.
701 VALUE EAP-Type Microsoft-MS-CHAPv2 26
702 VALUE EAP-Type Cisco-MS-CHAPv2 29
705 # And this is what most people mean by MS-CHAPv2
707 VALUE EAP-Type MS-CHAP-V2 26
711 # This says TLS, but it's only valid for TTLS & PEAP.
712 # EAP-TLS *always* requires a client certificate.
714 VALUE EAP-TLS-Require-Client-Cert No 0
715 VALUE EAP-TLS-Require-Client-Cert Yes 1
718 # These are the EAP-Code values.
720 VALUE EAP-Code Request 1
721 VALUE EAP-Code Response 2
722 VALUE EAP-Code Success 3
723 VALUE EAP-Code Failure 4
726 # For MS-CHAP, do we run ntlm_auth, or not.
728 VALUE MS-CHAP-Use-NTLM-Auth No 0
729 VALUE MS-CHAP-Use-NTLM-Auth Yes 1