4 # DO NOT EDIT THE FILES IN THIS DIRECTORY
6 # The files in this directory are maintained and updated by
7 # the FreeRADIUS project. Newer releases of software may update
8 # or change these files.
10 # Use the main dictionary file (usually /etc/raddb/dictionary)
11 # for local system attributes and $INCLUDEs.
15 # This file contains dictionary translations for parsing
16 # requests and generating responses. All transactions are
17 # composed of Attribute/Value Pairs. The value of each attribute
18 # is specified as one of 4 data types. Valid data types are:
20 # string - 0-253 octets
21 # ipaddr - 4 octets in network byte order
22 # integer - 32 bit value in big endian order (high byte first)
23 # date - 32 bit value in big endian order - seconds since
24 # 00:00:00 GMT, Jan. 1, 1970
25 # ifid - 8 octets in network byte order
26 # ipv6addr - 16 octets in network byte order
27 # ipv6prefix - 18 octets in network byte order
29 # FreeRADIUS includes extended data types which are not defined
30 # in RFC 2865 or RFC 2866, or RFC 3162. These data types are:
32 # abinary - Ascend's binary filter format.
33 # octets - raw octets, printed and input as hex strings.
34 # e.g.: 0x123456789abcdef
37 # Enumerated values are stored in the user file with dictionary
38 # VALUE translations for easy administration.
43 # --------------- -----
44 # Framed-Protocol = PPP
45 # 7 = 1 (integer encoding)
49 # Include compatibility dictionary for older users file. Move this
50 # directive to the end of the file if you want to see the old names
51 # in the logfiles, INSTEAD OF the new names.
53 $INCLUDE dictionary.compat # compability issues
54 $INCLUDE dictionary.3gpp
55 $INCLUDE dictionary.acc
56 $INCLUDE dictionary.alcatel
57 $INCLUDE dictionary.alteon
58 $INCLUDE dictionary.ascend
59 $INCLUDE dictionary.bay
60 $INCLUDE dictionary.bintec
61 $INCLUDE dictionary.cabletron
62 $INCLUDE dictionary.cisco
64 # This is the same as the altiga dictionary.
66 #$INCLUDE dictionary.cisco.vpn3000
67 $INCLUDE dictionary.cisco.vpn5000
68 $INCLUDE dictionary.cisco.bbsm
69 $INCLUDE dictionary.colubris
70 $INCLUDE dictionary.erx
71 $INCLUDE dictionary.extreme
72 $INCLUDE dictionary.freeradius
73 $INCLUDE dictionary.gandalf
74 $INCLUDE dictionary.itk
75 $INCLUDE dictionary.juniper
76 $INCLUDE dictionary.livingston
77 $INCLUDE dictionary.microsoft
78 $INCLUDE dictionary.nomadix
79 $INCLUDE dictionary.quintum
80 $INCLUDE dictionary.redback
81 $INCLUDE dictionary.redcreek
82 $INCLUDE dictionary.shasta
83 $INCLUDE dictionary.shiva
84 $INCLUDE dictionary.springtide
85 $INCLUDE dictionary.telebit
86 $INCLUDE dictionary.tunnel
87 $INCLUDE dictionary.usr
88 $INCLUDE dictionary.versanet
89 $INCLUDE dictionary.wispr
90 $INCLUDE dictionary.xedia
93 # The following are the proper new names. Use these.
95 # http://www.iana.org/assignments/radius-types
97 ATTRIBUTE User-Name 1 string
98 ATTRIBUTE User-Password 2 string encrypt=1
99 ATTRIBUTE CHAP-Password 3 octets
100 ATTRIBUTE NAS-IP-Address 4 ipaddr
101 ATTRIBUTE NAS-Port 5 integer
102 ATTRIBUTE Service-Type 6 integer
103 ATTRIBUTE Framed-Protocol 7 integer
104 ATTRIBUTE Framed-IP-Address 8 ipaddr
105 ATTRIBUTE Framed-IP-Netmask 9 ipaddr
106 ATTRIBUTE Framed-Routing 10 integer
107 ATTRIBUTE Filter-Id 11 string
108 ATTRIBUTE Framed-MTU 12 integer
109 ATTRIBUTE Framed-Compression 13 integer
110 ATTRIBUTE Login-IP-Host 14 ipaddr
111 ATTRIBUTE Login-Service 15 integer
112 ATTRIBUTE Login-TCP-Port 16 integer
113 ATTRIBUTE Reply-Message 18 string
114 ATTRIBUTE Callback-Number 19 string
115 ATTRIBUTE Callback-Id 20 string
116 ATTRIBUTE Framed-Route 22 string
117 ATTRIBUTE Framed-IPX-Network 23 ipaddr
118 ATTRIBUTE State 24 octets
119 ATTRIBUTE Class 25 octets
120 ATTRIBUTE Vendor-Specific 26 octets
121 ATTRIBUTE Session-Timeout 27 integer
122 ATTRIBUTE Idle-Timeout 28 integer
123 ATTRIBUTE Termination-Action 29 integer
124 ATTRIBUTE Called-Station-Id 30 string
125 ATTRIBUTE Calling-Station-Id 31 string
126 ATTRIBUTE NAS-Identifier 32 string
127 ATTRIBUTE Proxy-State 33 octets
128 ATTRIBUTE Login-LAT-Service 34 string
129 ATTRIBUTE Login-LAT-Node 35 string
130 ATTRIBUTE Login-LAT-Group 36 octets
131 ATTRIBUTE Framed-AppleTalk-Link 37 integer
132 ATTRIBUTE Framed-AppleTalk-Network 38 integer
133 ATTRIBUTE Framed-AppleTalk-Zone 39 string
135 ATTRIBUTE Acct-Status-Type 40 integer
136 ATTRIBUTE Acct-Delay-Time 41 integer
137 ATTRIBUTE Acct-Input-Octets 42 integer
138 ATTRIBUTE Acct-Output-Octets 43 integer
139 ATTRIBUTE Acct-Session-Id 44 string
140 ATTRIBUTE Acct-Authentic 45 integer
141 ATTRIBUTE Acct-Session-Time 46 integer
142 ATTRIBUTE Acct-Input-Packets 47 integer
143 ATTRIBUTE Acct-Output-Packets 48 integer
144 ATTRIBUTE Acct-Terminate-Cause 49 integer
145 ATTRIBUTE Acct-Multi-Session-Id 50 string
146 ATTRIBUTE Acct-Link-Count 51 integer
147 ATTRIBUTE Acct-Input-Gigawords 52 integer
148 ATTRIBUTE Acct-Output-Gigawords 53 integer
149 ATTRIBUTE Event-Timestamp 55 date
151 ATTRIBUTE CHAP-Challenge 60 octets
152 ATTRIBUTE NAS-Port-Type 61 integer
153 ATTRIBUTE Port-Limit 62 integer
154 ATTRIBUTE Login-LAT-Port 63 integer
156 ATTRIBUTE Acct-Tunnel-Connection 68 string
158 ATTRIBUTE ARAP-Password 70 string
159 ATTRIBUTE ARAP-Features 71 string
160 ATTRIBUTE ARAP-Zone-Access 72 integer
161 ATTRIBUTE ARAP-Security 73 integer
162 ATTRIBUTE ARAP-Security-Data 74 string
163 ATTRIBUTE Password-Retry 75 integer
164 ATTRIBUTE Prompt 76 integer
165 ATTRIBUTE Connect-Info 77 string
166 ATTRIBUTE Configuration-Token 78 string
167 ATTRIBUTE EAP-Message 79 octets
168 ATTRIBUTE Message-Authenticator 80 octets
169 ATTRIBUTE ARAP-Challenge-Response 84 string # 10 octets
170 ATTRIBUTE Acct-Interim-Interval 85 integer
171 ATTRIBUTE NAS-Port-Id 87 string
172 ATTRIBUTE Framed-Pool 88 string
173 ATTRIBUTE NAS-IPv6-Address 95 ipv6addr
174 ATTRIBUTE Framed-Interface-Id 96 ifid
175 ATTRIBUTE Framed-IPv6-Prefix 97 octets # ipv6prefix
176 ATTRIBUTE Login-IPv6-Host 98 ipv6addr
177 ATTRIBUTE Framed-IPv6-Route 99 string
178 ATTRIBUTE Framed-IPv6-Pool 100 string
180 ATTRIBUTE Digest-Response 206 string
181 ATTRIBUTE Digest-Attributes 207 octets # stupid format
184 # Experimental Non Protocol Attributes used by FreeRADIUS
187 # These attributes CAN go in the reply item list.
188 ATTRIBUTE Fall-Through 500 integer
189 ATTRIBUTE Exec-Program 502 string
190 ATTRIBUTE Exec-Program-Wait 503 string
192 # These attributes CANNOT go in the reply item list.
193 ATTRIBUTE User-Category 1029 string
194 ATTRIBUTE Group-Name 1030 string
195 ATTRIBUTE Huntgroup-Name 1031 string
196 ATTRIBUTE Simultaneous-Use 1034 integer
197 ATTRIBUTE Strip-User-Name 1035 integer
198 ATTRIBUTE Hint 1040 string
199 ATTRIBUTE Pam-Auth 1041 string
200 ATTRIBUTE Login-Time 1042 string
201 ATTRIBUTE Stripped-User-Name 1043 string
202 ATTRIBUTE Current-Time 1044 string
203 ATTRIBUTE Realm 1045 string
204 ATTRIBUTE No-Such-Attribute 1046 string
205 ATTRIBUTE Packet-Type 1047 integer
206 ATTRIBUTE Proxy-To-Realm 1048 string
207 ATTRIBUTE Replicate-To-Realm 1049 string
208 ATTRIBUTE Acct-Session-Start-Time 1050 date
209 ATTRIBUTE Acct-Unique-Session-Id 1051 string
210 ATTRIBUTE Client-IP-Address 1052 ipaddr
211 ATTRIBUTE Ldap-UserDn 1053 string
212 ATTRIBUTE NS-MTA-MD5-Password 1054 string
213 ATTRIBUTE SQL-User-Name 1055 string
214 ATTRIBUTE LM-Password 1057 octets
215 ATTRIBUTE NT-Password 1058 octets
216 ATTRIBUTE SMB-Account-CTRL 1059 integer
217 ATTRIBUTE SMB-Account-CTRL-TEXT 1061 string
218 ATTRIBUTE User-Profile 1062 string
219 ATTRIBUTE Digest-Realm 1063 string
220 ATTRIBUTE Digest-Nonce 1064 string
221 ATTRIBUTE Digest-Method 1065 string
222 ATTRIBUTE Digest-URI 1066 string
223 ATTRIBUTE Digest-QOP 1067 string
224 ATTRIBUTE Digest-Algorithm 1068 string
225 ATTRIBUTE Digest-Body-Digest 1069 string
226 ATTRIBUTE Digest-CNonce 1070 string
227 ATTRIBUTE Digest-Nonce-Count 1071 string
228 ATTRIBUTE Digest-User-Name 1072 string
229 ATTRIBUTE Pool-Name 1073 string
230 ATTRIBUTE Ldap-Group 1074 string
231 ATTRIBUTE Module-Success-Message 1075 string
232 ATTRIBUTE Module-Failure-Message 1076 string
233 # X99-Fast 1077 integer
234 ATTRIBUTE Rewrite-Rule 1078 string
235 ATTRIBUTE Sql-Group 1079 string
236 ATTRIBUTE Response-Packet-Type 1080 integer
239 # Non-Protocol Attributes
240 # These attributes are used internally by the server
242 ATTRIBUTE Auth-Type 1000 integer
243 ATTRIBUTE Menu 1001 string
244 ATTRIBUTE Termination-Menu 1002 string
245 ATTRIBUTE Prefix 1003 string
246 ATTRIBUTE Suffix 1004 string
247 ATTRIBUTE Group 1005 string
248 ATTRIBUTE Crypt-Password 1006 string
249 ATTRIBUTE Connect-Rate 1007 integer
250 ATTRIBUTE Add-Prefix 1008 string
251 ATTRIBUTE Add-Suffix 1009 string
252 ATTRIBUTE Expiration 1010 date
253 ATTRIBUTE Autz-Type 1011 integer
254 ATTRIBUTE Acct-Type 1012 integer
255 ATTRIBUTE Session-Type 1013 integer
256 ATTRIBUTE Post-Auth-Type 1014 integer
257 ATTRIBUTE Pre-Proxy-Type 1015 integer
258 ATTRIBUTE Post-Proxy-Type 1016 integer
259 ATTRIBUTE Pre-Acct-Type 1017 integer
262 # This is the EAP type of authentication, which is set
263 # by the EAP module, for informational purposed only.
265 ATTRIBUTE EAP-Type 1018 integer
266 ATTRIBUTE EAP-TLS-Require-Client-Cert 1019 integer
269 # Integer Translations
274 VALUE Service-Type Login-User 1
275 VALUE Service-Type Framed-User 2
276 VALUE Service-Type Callback-Login-User 3
277 VALUE Service-Type Callback-Framed-User 4
278 VALUE Service-Type Outbound-User 5
279 VALUE Service-Type Administrative-User 6
280 VALUE Service-Type NAS-Prompt-User 7
281 VALUE Service-Type Authenticate-Only 8
282 VALUE Service-Type Callback-NAS-Prompt 9
283 VALUE Service-Type Call-Check 10
284 VALUE Service-Type Callback-Administrative 11
285 VALUE Service-Type Voice 12
286 VALUE Service-Type Fax 13
287 VALUE Service-Type Modem-Relay 14
288 VALUE Service-Type IAPP-Register 15
289 VALUE Service-Type IAPP-AP-Check 16
293 VALUE Framed-Protocol PPP 1
294 VALUE Framed-Protocol SLIP 2
295 VALUE Framed-Protocol ARAP 3
296 VALUE Framed-Protocol Gandalf-SLML 4
297 VALUE Framed-Protocol Xylogics-IPX-SLIP 5
298 VALUE Framed-Protocol X.75-Synchronous 6
299 VALUE Framed-Protocol GPRS-PDP-Context 7
301 # Framed Routing Values
303 VALUE Framed-Routing None 0
304 VALUE Framed-Routing Broadcast 1
305 VALUE Framed-Routing Listen 2
306 VALUE Framed-Routing Broadcast-Listen 3
308 # Framed Compression Types
310 VALUE Framed-Compression None 0
311 VALUE Framed-Compression Van-Jacobson-TCP-IP 1
312 VALUE Framed-Compression IPX-Header-Compression 2
313 VALUE Framed-Compression Stac-LZS 3
317 VALUE Login-Service Telnet 0
318 VALUE Login-Service Rlogin 1
319 VALUE Login-Service TCP-Clear 2
320 VALUE Login-Service PortMaster 3
321 VALUE Login-Service LAT 4
322 VALUE Login-Service X25-PAD 5
323 VALUE Login-Service X25-T3POS 6
324 VALUE Login-Service TCP-Clear-Quiet 7
326 # Login-TCP-Port (see /etc/services for more examples)
328 VALUE Login-TCP-Port Telnet 23
329 VALUE Login-TCP-Port Rlogin 513
330 VALUE Login-TCP-Port Rsh 514
334 VALUE Acct-Status-Type Start 1
335 VALUE Acct-Status-Type Stop 2
336 VALUE Acct-Status-Type Interim-Update 3
337 VALUE Acct-Status-Type Alive 3
338 VALUE Acct-Status-Type Accounting-On 7
339 VALUE Acct-Status-Type Accounting-Off 8
340 # RFC 2867 Additional Status-Type Values
341 VALUE Acct-Status-Type Tunnel-Start 9
342 VALUE Acct-Status-Type Tunnel-Stop 10
343 VALUE Acct-Status-Type Tunnel-Reject 11
344 VALUE Acct-Status-Type Tunnel-Link-Start 12
345 VALUE Acct-Status-Type Tunnel-Link-Stop 13
346 VALUE Acct-Status-Type Tunnel-Link-Reject 14
347 VALUE Acct-Status-Type Failed 15
349 # Authentication Types
351 VALUE Acct-Authentic RADIUS 1
352 VALUE Acct-Authentic Local 2
353 VALUE Acct-Authentic Remote 3
354 VALUE Acct-Authentic Diameter 4
356 # Termination Options
358 VALUE Termination-Action Default 0
359 VALUE Termination-Action RADIUS-Request 1
363 VALUE NAS-Port-Type Async 0
364 VALUE NAS-Port-Type Sync 1
365 VALUE NAS-Port-Type ISDN 2
366 VALUE NAS-Port-Type ISDN-V120 3
367 VALUE NAS-Port-Type ISDN-V110 4
368 VALUE NAS-Port-Type Virtual 5
369 VALUE NAS-Port-Type PIAFS 6
370 VALUE NAS-Port-Type HDLC-Clear-Channel 7
371 VALUE NAS-Port-Type X.25 8
372 VALUE NAS-Port-Type X.75 9
373 VALUE NAS-Port-Type G.3-Fax 10
374 VALUE NAS-Port-Type SDSL 11
375 VALUE NAS-Port-Type ADSL-CAP 12
376 VALUE NAS-Port-Type ADSL-DMT 13
377 VALUE NAS-Port-Type IDSL 14
378 VALUE NAS-Port-Type Ethernet 15
379 VALUE NAS-Port-Type xDSL 16
380 VALUE NAS-Port-Type Cable 17
381 VALUE NAS-Port-Type Wireless-Other 18
382 VALUE NAS-Port-Type Wireless-802.11 19
383 VALUE NAS-Port-Type Token-Ring 20
384 VALUE NAS-Port-Type FDDI 21
385 VALUE NAS-Port-Type Wireless-CDMA2000 22
386 VALUE NAS-Port-Type Wireless-UMTS 23
387 VALUE NAS-Port-Type Wireless-1X-EV 24
388 VALUE NAS-Port-Type IAPP 25
390 # Acct Terminate Causes, available in 3.3.2 and later
392 VALUE Acct-Terminate-Cause User-Request 1
393 VALUE Acct-Terminate-Cause Lost-Carrier 2
394 VALUE Acct-Terminate-Cause Lost-Service 3
395 VALUE Acct-Terminate-Cause Idle-Timeout 4
396 VALUE Acct-Terminate-Cause Session-Timeout 5
397 VALUE Acct-Terminate-Cause Admin-Reset 6
398 VALUE Acct-Terminate-Cause Admin-Reboot 7
399 VALUE Acct-Terminate-Cause Port-Error 8
400 VALUE Acct-Terminate-Cause NAS-Error 9
401 VALUE Acct-Terminate-Cause NAS-Request 10
402 VALUE Acct-Terminate-Cause NAS-Reboot 11
403 VALUE Acct-Terminate-Cause Port-Unneeded 12
404 VALUE Acct-Terminate-Cause Port-Preempted 13
405 VALUE Acct-Terminate-Cause Port-Suspended 14
406 VALUE Acct-Terminate-Cause Service-Unavailable 15
407 VALUE Acct-Terminate-Cause Callback 16
408 VALUE Acct-Terminate-Cause User-Error 17
409 VALUE Acct-Terminate-Cause Host-Request 18
410 VALUE Acct-Terminate-Cause Supplicant-Restart 19
411 VALUE Acct-Terminate-Cause Reauthentication-Failure 20
412 VALUE Acct-Terminate-Cause Port-Reinit 21
413 VALUE Acct-Terminate-Cause Port-Disabled 22
415 #VALUE Tunnel-Type L2TP 3
416 #VALUE Tunnel-Medium-Type IP 1
418 VALUE Prompt No-Echo 0
422 # Non-Protocol Integer Translations
425 VALUE Auth-Type Local 0
426 VALUE Auth-Type System 1
427 VALUE Auth-Type SecurID 2
428 VALUE Auth-Type Crypt-Local 3
429 VALUE Auth-Type Reject 4
430 VALUE Auth-Type ActivCard 5
431 VALUE Auth-Type EAP 6
432 VALUE Auth-Type ARAP 7
435 # FreeRADIUS extensions (most originally from Cistron)
437 VALUE Auth-Type Ldap 252
438 VALUE Auth-Type Pam 253
439 VALUE Auth-Type Accept 254
441 VALUE Auth-Type PAP 1024
442 VALUE Auth-Type CHAP 1025
443 VALUE Auth-Type LDAP 1026
444 VALUE Auth-Type PAM 1027
445 VALUE Auth-Type MS-CHAP 1028
446 VALUE Auth-Type Kerberos 1029
447 VALUE Auth-Type CRAM 1030
448 VALUE Auth-Type NS-MTA-MD5 1031
449 VALUE Auth-Type CRAM 1032
450 VALUE Auth-Type SMB 1033
453 # Authorization type, too.
455 VALUE Autz-Type Local 0
460 VALUE Acct-Type Local 0
463 # And Session handling
465 VALUE Session-Type Local 0
469 VALUE Post-Auth-Type Local 0
472 # Experimental Non-Protocol Integer Translations for FreeRADIUS
474 VALUE Fall-Through No 0
475 VALUE Fall-Through Yes 1
477 VALUE Packet-Type Access-Request 1
478 VALUE Packet-Type Access-Accept 2
479 VALUE Packet-Type Access-Reject 3
480 VALUE Packet-Type Accounting-Request 4
481 VALUE Packet-Type Accounting-Response 5
482 VALUE Packet-Type Accounting-Status 6
483 VALUE Packet-Type Password-Request 7
484 VALUE Packet-Type Password-Accept 8
485 VALUE Packet-Type Password-Reject 9
486 VALUE Packet-Type Accounting-Message 10
487 VALUE Packet-Type Access-Challenge 11
488 VALUE Packet-Type Status-Server 12
489 VALUE Packet-Type Status-Client 13
492 # The following packet types are described in RFC 2882,
493 # but they are NOT part of the RADIUS standard. Instead,
494 # they are informational about vendor-specific extensions
495 # to the RADIUS standard.
497 VALUE Packet-Type Resource-Free-Request 21
498 VALUE Packet-Type Resource-Free-Response 22
499 VALUE Packet-Type Resource-Query-Request 23
500 VALUE Packet-Type Resource-Query-Response 24
501 VALUE Packet-Type Alternate-Resource-Reclaim-Request 25
502 VALUE Packet-Type NAS-Reboot-Request 26
503 VALUE Packet-Type NAS-Reboot-Response 27
504 VALUE Packet-Type Next-Passcode 29
505 VALUE Packet-Type New-Pin 30
506 VALUE Packet-Type Terminate-Session 31
507 VALUE Packet-Type Password-Expired 32
508 VALUE Packet-Type Event-Request 33
509 VALUE Packet-Type Event-Response 34
510 VALUE Packet-Type Disconnect-Request 40
511 VALUE Packet-Type Disconnect-ACK 41
512 VALUE Packet-Type Disconnect-NAK 42
513 VALUE Packet-Type CoF-Request 43
514 VALUE Packet-Type CoF-ACK 44
515 VALUE Packet-Type CoF-NAK 45
516 VALUE Packet-Type IP-Address-Allocate 50
517 VALUE Packet-Type IP-Address-Release 51
519 VALUE Response-Packet-Type Access-Request 1
520 VALUE Response-Packet-Type Access-Accept 2
521 VALUE Response-Packet-Type Access-Reject 3
522 VALUE Response-Packet-Type Accounting-Request 4
523 VALUE Response-Packet-Type Accounting-Response 5
524 VALUE Response-Packet-Type Accounting-Status 6
525 VALUE Response-Packet-Type Password-Request 7
526 VALUE Response-Packet-Type Password-Accept 8
527 VALUE Response-Packet-Type Password-Reject 9
528 VALUE Response-Packet-Type Accounting-Message 10
529 VALUE Response-Packet-Type Access-Challenge 11
530 VALUE Response-Packet-Type Status-Server 12
531 VALUE Response-Packet-Type Status-Client 13
534 # EAP Sub-types, inside of Request and Response packets
536 # http://www.iana.org/assignments/ppp-numbers
537 # "PPP EAP REQUEST/RESPONSE TYPES"
540 # See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
542 VALUE EAP-Type None 0
543 VALUE EAP-Type Identity 1
544 VALUE EAP-Type Notification 2
546 VALUE EAP-Type MD5-Challenge 4
547 VALUE EAP-Type One-Time-Password 5
548 VALUE EAP-Type Generic-Token-Card 6
549 VALUE EAP-Type RSA-Public-Key 9
550 VALUE EAP-Type DSS-Unilateral 10
551 VALUE EAP-Type KEA 11
552 VALUE EAP-Type KEA-Validate 12
553 VALUE EAP-Type KEA 11
554 VALUE EAP-Type EAP-TLS 13
555 VALUE EAP-Type Defender-Token 14
556 VALUE EAP-Type RSA-SecurID-EAP 15
557 VALUE EAP-Type Arcot-Systems-EAP 16
558 VALUE EAP-Type Cisco-LEAP 17
559 VALUE EAP-Type Nokia-IP-Smart-Card 18
560 VALUE EAP-Type SRP-SHA1-Part-1 19
561 VALUE EAP-Type SRP-SHA1-Part-2 20
562 VALUE EAP-Type EAP-TTLS 21
563 VALUE EAP-Type Remote-Access-Service 22
564 VALUE EAP-Type UMTS 23
565 VALUE EAP-Type EAP-3Com-Wireless 24
566 VALUE EAP-Type PEAP 25
567 VALUE EAP-Type MS-EAP-Authentication 26
568 VALUE EAP-Type MAKE 27
569 VALUE EAP-Type CRYPTOCard 28
570 VALUE EAP-Type EAP-MSCHAP-V2 29
571 VALUE EAP-Type DynamID 30
572 VALUE EAP-Type Rob-EAP 31
573 VALUE EAP-Type SecurID-EAP 32
574 VALUE EAP-Type MS-Authentication-TLV 33
575 VALUE EAP-Type SentriNET 34
576 VALUE EAP-Type EAP-Actiontec-Wireless 35
577 VALUE EAP-Type Cogent-Biomentric-EAP 36
578 VALUE EAP-Type AirFortress-EAP 37
579 VALUE EAP-Type EAP-HTTP-Digest 38
580 VALUE EAP-Type SecuriSuite-EAP 39
581 VALUE EAP-Type DeviceConnect-EAP 40
582 VALUE EAP-Type EAP-SPEKE 41
583 VALUE EAP-Type EAP-MOBAC 42
586 # These are duplicate values, to get around the problem of
587 # having two MS-CHAPv2 EAP types.
589 VALUE EAP-Type Microsoft-MS-CHAPv2 26
590 VALUE EAP-Type Cisco-MS-CHAPv2 29
593 # And this is what most people mean by MS-CHAPv2
595 VALUE EAP-Type MS-CHAP-V2 26
599 # This says TLS, but it's only valid for TTLS & PEAP.
600 # EAP-TLS *always* requires a client certificate.
602 VALUE EAP-TLS-Require-Client-Cert No 0
603 VALUE EAP-TLS-Require-Client-Cert Yes 1