3 # Non Protocol Attributes used by FreeRADIUS
8 # The attributes number ranges are allocates as follows:
11 # server-side attributes which can go in a reply list
13 # These attributes CAN go in the reply item list.
14 ATTRIBUTE Fall-Through 500 integer
15 ATTRIBUTE Relax-Filter 501 integer
16 ATTRIBUTE Exec-Program 502 string
17 ATTRIBUTE Exec-Program-Wait 503 string
19 # These attributes CANNOT go in the reply item list.
23 # Attributes which cannot go in a reply list.
27 # Miscellaneous server attributes.
30 # Non-Protocol Attributes
31 # These attributes are used internally by the server
33 ATTRIBUTE Auth-Type 1000 integer
34 ATTRIBUTE Menu 1001 string
35 ATTRIBUTE Termination-Menu 1002 string
36 ATTRIBUTE Prefix 1003 string
37 ATTRIBUTE Suffix 1004 string
38 ATTRIBUTE Group 1005 string
39 ATTRIBUTE Crypt-Password 1006 string
40 ATTRIBUTE Connect-Rate 1007 integer
41 ATTRIBUTE Add-Prefix 1008 string
42 ATTRIBUTE Add-Suffix 1009 string
43 ATTRIBUTE Expiration 1010 date
44 ATTRIBUTE Autz-Type 1011 integer
45 ATTRIBUTE Acct-Type 1012 integer
46 ATTRIBUTE Session-Type 1013 integer
47 ATTRIBUTE Post-Auth-Type 1014 integer
48 ATTRIBUTE Pre-Proxy-Type 1015 integer
49 ATTRIBUTE Post-Proxy-Type 1016 integer
50 ATTRIBUTE Pre-Acct-Type 1017 integer
53 # This is the EAP type of authentication, which is set
54 # by the EAP module, for informational purposes only.
56 ATTRIBUTE EAP-Type 1018 integer
57 ATTRIBUTE EAP-TLS-Require-Client-Cert 1019 integer
58 ATTRIBUTE EAP-Id 1020 integer
59 ATTRIBUTE EAP-Code 1021 integer
60 ATTRIBUTE EAP-MD5-Password 1022 string
61 ATTRIBUTE PEAP-Version 1023 integer
62 ATTRIBUTE Client-Shortname 1024 string
63 ATTRIBUTE Load-Balance-Key 1025 string
64 ATTRIBUTE Raw-Attribute 1026 octets
65 ATTRIBUTE TNC-VLAN-Access 1027 string
66 ATTRIBUTE TNC-VLAN-Isolate 1028 string
67 ATTRIBUTE User-Category 1029 string
68 ATTRIBUTE Group-Name 1030 string
69 ATTRIBUTE Huntgroup-Name 1031 string
70 ATTRIBUTE Simultaneous-Use 1034 integer
71 ATTRIBUTE Strip-User-Name 1035 integer
72 ATTRIBUTE Hint 1040 string
73 ATTRIBUTE Pam-Auth 1041 string
74 ATTRIBUTE Login-Time 1042 string
75 ATTRIBUTE Stripped-User-Name 1043 string
76 ATTRIBUTE Current-Time 1044 string
77 ATTRIBUTE Realm 1045 string
78 ATTRIBUTE No-Such-Attribute 1046 string
79 ATTRIBUTE Packet-Type 1047 integer
80 ATTRIBUTE Proxy-To-Realm 1048 string
81 ATTRIBUTE Replicate-To-Realm 1049 string
82 ATTRIBUTE Acct-Session-Start-Time 1050 date
83 ATTRIBUTE Acct-Unique-Session-Id 1051 string
84 ATTRIBUTE Client-IP-Address 1052 ipaddr
85 ATTRIBUTE Ldap-UserDn 1053 string
86 ATTRIBUTE NS-MTA-MD5-Password 1054 string
87 ATTRIBUTE SQL-User-Name 1055 string
88 ATTRIBUTE LM-Password 1057 octets
89 ATTRIBUTE NT-Password 1058 octets
90 ATTRIBUTE SMB-Account-CTRL 1059 integer
91 ATTRIBUTE SMB-Account-CTRL-TEXT 1061 string
92 ATTRIBUTE User-Profile 1062 string
93 ATTRIBUTE Digest-Realm 1063 string
94 ATTRIBUTE Digest-Nonce 1064 string
95 ATTRIBUTE Digest-Method 1065 string
96 ATTRIBUTE Digest-URI 1066 string
97 ATTRIBUTE Digest-QOP 1067 string
98 ATTRIBUTE Digest-Algorithm 1068 string
99 ATTRIBUTE Digest-Body-Digest 1069 string
100 ATTRIBUTE Digest-CNonce 1070 string
101 ATTRIBUTE Digest-Nonce-Count 1071 string
102 ATTRIBUTE Digest-User-Name 1072 string
103 ATTRIBUTE Pool-Name 1073 string
104 ATTRIBUTE Ldap-Group 1074 string
105 ATTRIBUTE Module-Success-Message 1075 string
106 ATTRIBUTE Module-Failure-Message 1076 string
107 # X99-Fast 1077 integer
108 ATTRIBUTE Rewrite-Rule 1078 string
109 ATTRIBUTE Sql-Group 1079 string
110 ATTRIBUTE Response-Packet-Type 1080 integer
111 ATTRIBUTE Digest-HA1 1081 string
112 ATTRIBUTE MS-CHAP-Use-NTLM-Auth 1082 integer
113 ATTRIBUTE NTLM-User-Name 1083 string
114 ATTRIBUTE MS-CHAP-User-Name 1083 string
115 ATTRIBUTE Packet-Src-IP-Address 1084 ipaddr
116 ATTRIBUTE Packet-Dst-IP-Address 1085 ipaddr
117 ATTRIBUTE Packet-Src-Port 1086 integer
118 ATTRIBUTE Packet-Dst-Port 1087 integer
119 ATTRIBUTE Packet-Authentication-Vector 1088 octets
120 ATTRIBUTE Time-Of-Day 1089 string
121 ATTRIBUTE Request-Processing-Stage 1090 string
122 ATTRIBUTE Cache-No-Caching 1091 string
123 ATTRIBUTE Cache-Delete-Cache 1092 string
124 ATTRIBUTE SHA-Password 1093 octets
125 ATTRIBUTE SSHA-Password 1094 octets
126 ATTRIBUTE SHA1-Password 1093 octets
127 ATTRIBUTE SSHA1-Password 1094 octets
128 ATTRIBUTE MD5-Password 1095 octets
129 ATTRIBUTE SMD5-Password 1096 octets
130 ATTRIBUTE Packet-Src-IPv6-Address 1097 ipv6addr
131 ATTRIBUTE Packet-Dst-IPv6-Address 1098 ipv6addr
132 ATTRIBUTE Virtual-Server 1099 string
133 ATTRIBUTE Cleartext-Password 1100 string
134 ATTRIBUTE Password-With-Header 1101 string
135 ATTRIBUTE Inner-Tunnel-User-Name 1102 string
137 # EAP-IKEv2 is experimental.
139 ATTRIBUTE EAP-IKEv2-IDType 1103 integer
141 VALUE EAP-IKEv2-IDType IPV4_ADDR 1
142 VALUE EAP-IKEv2-IDType FQDN 2
143 VALUE EAP-IKEv2-IDType RFC822_ADDR 3
144 VALUE EAP-IKEv2-IDType IPV6_ADDR 5
145 VALUE EAP-IKEv2-IDType DER_ASN1_DN 9
146 VALUE EAP-IKEv2-IDType DER_ASN1_GN 10
147 VALUE EAP-IKEv2-IDType KEY_ID 11
149 ATTRIBUTE EAP-IKEv2-ID 1104 string
150 ATTRIBUTE EAP-IKEv2-Secret 1105 string
151 ATTRIBUTE EAP-IKEv2-AuthType 1106 integer
153 VALUE EAP-IKEv2-AuthType none 0
154 VALUE EAP-IKEv2-AuthType secret 1
155 VALUE EAP-IKEv2-AuthType cert 2
156 VALUE EAP-IKEv2-AuthType both 3
158 ATTRIBUTE Send-Disconnect-Request 1107 integer
159 ATTRIBUTE Send-CoA-Request 1107 integer
161 VALUE Send-CoA-Request No 0
162 VALUE Send-CoA-Request Yes 1
164 ATTRIBUTE Module-Return-Code 1108 integer
166 VALUE Module-Return-Code reject 0
167 VALUE Module-Return-Code fail 1
168 VALUE Module-Return-Code ok 2
169 VALUE Module-Return-Code handled 3
170 VALUE Module-Return-Code invalid 4
171 VALUE Module-Return-Code userlock 5
172 VALUE Module-Return-Code notfound 6
173 VALUE Module-Return-Code noop 7
174 VALUE Module-Return-Code updated 8
176 ATTRIBUTE Packet-Original-Timestamp 1109 date
177 ATTRIBUTE SQL-Table-Name 1110 string
178 ATTRIBUTE Home-Server-Pool 1111 string
180 ATTRIBUTE FreeRADIUS-Client-IP-Address 1120 ipaddr
181 ATTRIBUTE FreeRADIUS-Client-IPv6-Address 1121 ipv6addr
182 ATTRIBUTE FreeRADIUS-Client-Require-MA 1122 integer
184 VALUE FreeRADIUS-Client-Require-MA no 0
185 VALUE FreeRADIUS-Client-Require-MA yes 1
187 ATTRIBUTE FreeRADIUS-Client-Secret 1123 string
188 ATTRIBUTE FreeRADIUS-Client-Shortname 1124 string
189 ATTRIBUTE FreeRADIUS-Client-NAS-Type 1125 string
190 ATTRIBUTE FreeRADIUS-Client-Virtual-Server 1126 string
192 # For session resumption
193 ATTRIBUTE Allow-Session-Resumption 1127 integer
195 VALUE Allow-Session-Resumption no 0
196 VALUE Allow-Session-Resumption yes 1
198 ATTRIBUTE EAP-Session-Resumed 1128 integer
200 VALUE EAP-Session-Resumed no 0
201 VALUE EAP-Session-Resumed yes 1
204 # Expose EAP keys in the reply.
206 ATTRIBUTE EAP-MSK 1129 octets
207 ATTRIBUTE EAP-EMSK 1130 octets
210 # For send/recv CoA packets (like Auth-Type, Acct-Type, etc.)
212 ATTRIBUTE Recv-CoA-Type 1131 integer
213 ATTRIBUTE Send-CoA-Type 1132 integer
215 ATTRIBUTE MS-CHAP-Password 1133 string
216 ATTRIBUTE Packet-Transmit-Counter 1134 integer
217 ATTRIBUTE Cached-Session-Policy 1135 string
218 ATTRIBUTE MS-CHAP-New-Cleartext-Password 1136 string
219 ATTRIBUTE MS-CHAP-New-NT-Password 1137 octets
221 # For default policies
223 ATTRIBUTE Stripped-User-Domain 1138 string
224 ATTRIBUTE Called-Station-SSID 1139 string
228 # EAP-SIM (and other EAP type) weirdness.
230 # For EAP-SIM, some attribute definitions for database interface
232 ATTRIBUTE EAP-Sim-Subtype 1200 integer
234 ATTRIBUTE EAP-Sim-Rand1 1201 octets
235 ATTRIBUTE EAP-Sim-Rand2 1202 octets
236 ATTRIBUTE EAP-Sim-Rand3 1203 octets
238 ATTRIBUTE EAP-Sim-SRES1 1204 octets
239 ATTRIBUTE EAP-Sim-SRES2 1205 octets
240 ATTRIBUTE EAP-Sim-SRES3 1206 octets
242 VALUE EAP-Sim-Subtype Start 10
243 VALUE EAP-Sim-Subtype Challenge 11
244 VALUE EAP-Sim-Subtype Notification 12
245 VALUE EAP-Sim-Subtype Re-authentication 13
247 # this attribute is used internally by the client code.
248 ATTRIBUTE EAP-Sim-State 1207 integer
250 ATTRIBUTE EAP-Sim-IMSI 1208 string
251 ATTRIBUTE EAP-Sim-HMAC 1209 string
252 ATTRIBUTE EAP-Sim-KEY 1210 octets
253 ATTRIBUTE EAP-Sim-EXTRA 1211 octets
255 ATTRIBUTE EAP-Sim-KC1 1212 octets
256 ATTRIBUTE EAP-Sim-KC2 1213 octets
257 ATTRIBUTE EAP-Sim-KC3 1214 octets
261 # EAP-type specific attributes
264 # these are PW_EAP_X + 1280
265 ATTRIBUTE EAP-Type-Identity 1281 string
266 ATTRIBUTE EAP-Type-Notification 1282 string
267 ATTRIBUTE EAP-Type-NAK 1283 string
268 ATTRIBUTE EAP-Type-MD5 1284 octets
269 ATTRIBUTE EAP-Type-OTP 1285 string
270 ATTRIBUTE EAP-Type-GTC 1286 string
271 ATTRIBUTE EAP-Type-TLS 1297 octets
272 ATTRIBUTE EAP-Type-SIM 1298 octets
273 ATTRIBUTE EAP-Type-LEAP 1301 octets
274 ATTRIBUTE EAP-Type-SIM2 1302 octets
275 ATTRIBUTE EAP-Type-TTLS 1305 octets
276 ATTRIBUTE EAP-Type-PEAP 1309 octets
283 # these are PW_EAP_SIM_X + 1536
284 ATTRIBUTE EAP-Sim-RAND 1537 octets
285 ATTRIBUTE EAP-Sim-PADDING 1542 octets
286 ATTRIBUTE EAP-Sim-NONCE_MT 1543 octets
287 ATTRIBUTE EAP-Sim-PERMANENT_ID_REQ 1546 octets
288 ATTRIBUTE EAP-Sim-MAC 1547 octets
289 ATTRIBUTE EAP-Sim-NOTIFICATION 1548 octets
290 ATTRIBUTE EAP-Sim-ANY_ID_REQ 1549 octets
291 ATTRIBUTE EAP-Sim-IDENTITY 1550 octets
292 ATTRIBUTE EAP-Sim-VERSION_LIST 1551 octets
293 ATTRIBUTE EAP-Sim-SELECTED_VERSION 1552 octets
294 ATTRIBUTE EAP-Sim-FULLAUTH_ID_REQ 1553 octets
295 ATTRIBUTE EAP-Sim-COUNTER 1555 octets
296 ATTRIBUTE EAP-Sim-COUNTER_TOO_SMALL 1556 octets
297 ATTRIBUTE EAP-Sim-NONCE_S 1557 octets
298 ATTRIBUTE EAP-Sim-IV 1665 octets
299 ATTRIBUTE EAP-Sim-ENCR_DATA 1666 octets
300 ATTRIBUTE EAP-Sim-NEXT_PSEUDONUM 1668 octets
301 ATTRIBUTE EAP-Sim-NEXT_REAUTH_ID 1669 octets
302 ATTRIBUTE EAP-Sim-CHECKCODE 1670 octets
306 # Temporary attributes, for local storage.
308 ATTRIBUTE Tmp-String-0 1800 string
309 ATTRIBUTE Tmp-String-1 1801 string
310 ATTRIBUTE Tmp-String-2 1802 string
311 ATTRIBUTE Tmp-String-3 1803 string
312 ATTRIBUTE Tmp-String-4 1804 string
313 ATTRIBUTE Tmp-String-5 1805 string
314 ATTRIBUTE Tmp-String-6 1806 string
315 ATTRIBUTE Tmp-String-7 1807 string
316 ATTRIBUTE Tmp-String-8 1808 string
317 ATTRIBUTE Tmp-String-9 1809 string
319 ATTRIBUTE Tmp-Integer-0 1810 integer
320 ATTRIBUTE Tmp-Integer-1 1811 integer
321 ATTRIBUTE Tmp-Integer-2 1812 integer
322 ATTRIBUTE Tmp-Integer-3 1813 integer
323 ATTRIBUTE Tmp-Integer-4 1814 integer
324 ATTRIBUTE Tmp-Integer-5 1815 integer
325 ATTRIBUTE Tmp-Integer-6 1816 integer
326 ATTRIBUTE Tmp-Integer-7 1817 integer
327 ATTRIBUTE Tmp-Integer-8 1818 integer
328 ATTRIBUTE Tmp-Integer-9 1819 integer
330 ATTRIBUTE Tmp-IP-Address-0 1820 ipaddr
331 ATTRIBUTE Tmp-IP-Address-1 1821 ipaddr
332 ATTRIBUTE Tmp-IP-Address-2 1822 ipaddr
333 ATTRIBUTE Tmp-IP-Address-3 1823 ipaddr
334 ATTRIBUTE Tmp-IP-Address-4 1824 ipaddr
335 ATTRIBUTE Tmp-IP-Address-5 1825 ipaddr
336 ATTRIBUTE Tmp-IP-Address-6 1826 ipaddr
337 ATTRIBUTE Tmp-IP-Address-7 1827 ipaddr
338 ATTRIBUTE Tmp-IP-Address-8 1828 ipaddr
339 ATTRIBUTE Tmp-IP-Address-9 1829 ipaddr
342 # WiMAX server-side attributes.
344 # These are NOT sent in a packet, but are otherwise
345 # available for testing and validation. The various
346 # things that *are* sent in a packet are derived from
349 ATTRIBUTE WiMAX-MN-NAI 1900 string
351 ATTRIBUTE TLS-Cert-Serial 1910 string
352 ATTRIBUTE TLS-Cert-Expiration 1911 string
353 ATTRIBUTE TLS-Cert-Issuer 1912 string
354 ATTRIBUTE TLS-Cert-Subject 1913 string
355 ATTRIBUTE TLS-Cert-Common-Name 1914 string
356 # 1915 - 1919: reserved for future cert attributes
357 ATTRIBUTE TLS-Client-Cert-Serial 1920 string
358 ATTRIBUTE TLS-Client-Cert-Expiration 1921 string
359 ATTRIBUTE TLS-Client-Cert-Issuer 1922 string
360 ATTRIBUTE TLS-Client-Cert-Subject 1923 string
361 ATTRIBUTE TLS-Client-Cert-Common-Name 1924 string
362 ATTRIBUTE TLS-Client-Cert-Filename 1925 string
369 # SoH attributes; FIXME: these should really be protocol attributes
370 # so that the SoH radius request can be proxied, but from which
373 ATTRIBUTE SoH-MS-Machine-OS-vendor 2100 integer
374 VALUE SoH-MS-Machine-OS-vendor Microsoft 311
376 ATTRIBUTE SoH-MS-Machine-OS-version 2101 integer
377 ATTRIBUTE SoH-MS-Machine-OS-release 2102 integer
378 ATTRIBUTE SoH-MS-Machine-OS-build 2103 integer
379 ATTRIBUTE SoH-MS-Machine-SP-version 2104 integer
380 ATTRIBUTE SoH-MS-Machine-SP-release 2105 integer
382 ATTRIBUTE SoH-MS-Machine-Processor 2106 integer
383 VALUE SoH-MS-Machine-Processor x86 0
384 VALUE SoH-MS-Machine-Processor i64 6
385 VALUE SoH-MS-Machine-Processor x86_64 9
387 ATTRIBUTE SoH-MS-Machine-Name 2107 string
388 ATTRIBUTE SoH-MS-Correlation-Id 2108 octets
389 ATTRIBUTE SoH-MS-Machine-Role 2109 integer
390 VALUE SoH-MS-Machine-Role client 1
391 VALUE SoH-MS-Machine-Role dc 2
392 VALUE SoH-MS-Machine-Role server 3
395 ATTRIBUTE SoH-Supported 2119 integer
396 VALUE SoH-Supported no 0
397 VALUE SoH-Supported yes 1
399 ATTRIBUTE SoH-MS-Windows-Health-Status 2120 string
400 ATTRIBUTE SoH-MS-Health-Other 2129 string
407 # Site-local attributes (see raddb/dictionary.in)
408 # Do NOT define attributes in this range!
414 # Invalid. Don't use.
418 # Non-Protocol Integer Translations
421 VALUE Auth-Type Local 0
422 VALUE Auth-Type System 1
423 VALUE Auth-Type SecurID 2
424 VALUE Auth-Type Crypt-Local 3
425 VALUE Auth-Type Reject 4
426 VALUE Auth-Type ActivCard 5
427 VALUE Auth-Type EAP 6
428 VALUE Auth-Type ARAP 7
431 # FreeRADIUS extensions (most originally from Cistron)
433 VALUE Auth-Type Accept 254
435 VALUE Auth-Type PAP 1024
436 VALUE Auth-Type CHAP 1025
437 # 1026 was LDAP, but we deleted it. Adding it back will break the
439 VALUE Auth-Type PAM 1027
440 VALUE Auth-Type MS-CHAP 1028
441 VALUE Auth-Type MSCHAP 1028
442 VALUE Auth-Type Kerberos 1029
443 VALUE Auth-Type CRAM 1030
444 VALUE Auth-Type NS-MTA-MD5 1031
445 # 1032 is unused (was a duplicate of CRAM)
446 VALUE Auth-Type SMB 1033
447 VALUE Auth-Type MS-CHAP-V2 1034
450 # Authorization type, too.
452 VALUE Autz-Type Local 0
457 VALUE Acct-Type Local 0
460 # And Session handling
462 VALUE Session-Type Local 0
466 VALUE Post-Auth-Type Local 0
467 VALUE Post-Auth-Type Reject 1
470 # Experimental Non-Protocol Integer Translations for FreeRADIUS
472 VALUE Fall-Through No 0
473 VALUE Fall-Through Yes 1
475 VALUE Relax-Filter No 0
476 VALUE Relax-Filter Yes 1
478 VALUE Strip-User-Name No 0
479 VALUE Strip-User-Name Yes 1
481 VALUE Packet-Type Access-Request 1
482 VALUE Packet-Type Access-Accept 2
483 VALUE Packet-Type Access-Reject 3
484 VALUE Packet-Type Accounting-Request 4
485 VALUE Packet-Type Accounting-Response 5
486 VALUE Packet-Type Accounting-Status 6
487 VALUE Packet-Type Password-Request 7
488 VALUE Packet-Type Password-Accept 8
489 VALUE Packet-Type Password-Reject 9
490 VALUE Packet-Type Accounting-Message 10
491 VALUE Packet-Type Access-Challenge 11
492 VALUE Packet-Type Status-Server 12
493 VALUE Packet-Type Status-Client 13
496 # The following packet types are described in RFC 2882,
497 # but they are NOT part of the RADIUS standard. Instead,
498 # they are informational about vendor-specific extensions
499 # to the RADIUS standard.
501 VALUE Packet-Type Resource-Free-Request 21
502 VALUE Packet-Type Resource-Free-Response 22
503 VALUE Packet-Type Resource-Query-Request 23
504 VALUE Packet-Type Resource-Query-Response 24
505 VALUE Packet-Type Alternate-Resource-Reclaim-Request 25
506 VALUE Packet-Type NAS-Reboot-Request 26
507 VALUE Packet-Type NAS-Reboot-Response 27
508 VALUE Packet-Type Next-Passcode 29
509 VALUE Packet-Type New-Pin 30
510 VALUE Packet-Type Terminate-Session 31
511 VALUE Packet-Type Password-Expired 32
512 VALUE Packet-Type Event-Request 33
513 VALUE Packet-Type Event-Response 34
515 # RFC 3576 allocates packet types 40-45
517 VALUE Packet-Type Disconnect-Request 40
518 VALUE Packet-Type Disconnect-ACK 41
519 VALUE Packet-Type Disconnect-NAK 42
520 VALUE Packet-Type CoA-Request 43
521 VALUE Packet-Type CoA-ACK 44
522 VALUE Packet-Type CoA-NAK 45
524 VALUE Packet-Type IP-Address-Allocate 50
525 VALUE Packet-Type IP-Address-Release 51
527 VALUE Response-Packet-Type Access-Request 1
528 VALUE Response-Packet-Type Access-Accept 2
529 VALUE Response-Packet-Type Access-Reject 3
530 VALUE Response-Packet-Type Accounting-Request 4
531 VALUE Response-Packet-Type Accounting-Response 5
532 VALUE Response-Packet-Type Accounting-Status 6
533 VALUE Response-Packet-Type Password-Request 7
534 VALUE Response-Packet-Type Password-Accept 8
535 VALUE Response-Packet-Type Password-Reject 9
536 VALUE Response-Packet-Type Accounting-Message 10
537 VALUE Response-Packet-Type Access-Challenge 11
538 VALUE Response-Packet-Type Status-Server 12
539 VALUE Response-Packet-Type Status-Client 13
541 VALUE Response-Packet-Type Disconnect-Request 40
542 VALUE Response-Packet-Type Disconnect-ACK 41
543 VALUE Response-Packet-Type Disconnect-NAK 42
544 VALUE Response-Packet-Type CoA-Request 43
545 VALUE Response-Packet-Type CoA-ACK 44
546 VALUE Response-Packet-Type CoA-NAK 45
550 VALUE Response-Packet-Type Do-Not-Respond 256
553 # EAP Sub-types, inside of Request and Response packets
555 # http://www.iana.org/assignments/ppp-numbers
556 # "PPP EAP REQUEST/RESPONSE TYPES"
559 # See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
561 VALUE EAP-Type None 0
562 VALUE EAP-Type Identity 1
563 VALUE EAP-Type Notification 2
565 VALUE EAP-Type MD5-Challenge 4
566 VALUE EAP-Type One-Time-Password 5
567 VALUE EAP-Type Generic-Token-Card 6
568 VALUE EAP-Type RSA-Public-Key 9
569 VALUE EAP-Type DSS-Unilateral 10
570 VALUE EAP-Type KEA 11
571 VALUE EAP-Type KEA-Validate 12
572 VALUE EAP-Type EAP-TLS 13
573 VALUE EAP-Type Defender-Token 14
574 VALUE EAP-Type RSA-SecurID-EAP 15
575 VALUE EAP-Type Arcot-Systems-EAP 16
576 VALUE EAP-Type Cisco-LEAP 17
577 VALUE EAP-Type Nokia-IP-Smart-Card 18
578 VALUE EAP-Type SIM 18
579 VALUE EAP-Type SRP-SHA1-Part-1 19
580 VALUE EAP-Type SRP-SHA1-Part-2 20
581 VALUE EAP-Type EAP-TTLS 21
582 VALUE EAP-Type Remote-Access-Service 22
583 VALUE EAP-Type UMTS 23
584 VALUE EAP-Type EAP-3Com-Wireless 24
585 VALUE EAP-Type PEAP 25
586 VALUE EAP-Type MS-EAP-Authentication 26
587 VALUE EAP-Type MAKE 27
588 VALUE EAP-Type CRYPTOCard 28
589 VALUE EAP-Type EAP-MSCHAP-V2 29
590 VALUE EAP-Type DynamID 30
591 VALUE EAP-Type Rob-EAP 31
592 VALUE EAP-Type SecurID-EAP 32
593 VALUE EAP-Type MS-Authentication-TLV 33
594 VALUE EAP-Type SentriNET 34
595 VALUE EAP-Type EAP-Actiontec-Wireless 35
596 VALUE EAP-Type Cogent-Biomentric-EAP 36
597 VALUE EAP-Type AirFortress-EAP 37
598 VALUE EAP-Type EAP-HTTP-Digest 38
599 VALUE EAP-Type SecuriSuite-EAP 39
600 VALUE EAP-Type DeviceConnect-EAP 40
601 VALUE EAP-Type EAP-SPEKE 41
602 VALUE EAP-Type EAP-MOBAC 42
605 # These are duplicate values, to get around the problem of
606 # having two MS-CHAPv2 EAP types.
608 VALUE EAP-Type Microsoft-MS-CHAPv2 26
609 VALUE EAP-Type Cisco-MS-CHAPv2 29
612 # And this is what most people mean by MS-CHAPv2
614 VALUE EAP-Type MS-CHAP-V2 26
617 # This says TLS, but it's only valid for TTLS & PEAP.
618 # EAP-TLS *always* requires a client certificate.
620 VALUE EAP-TLS-Require-Client-Cert No 0
621 VALUE EAP-TLS-Require-Client-Cert Yes 1
624 # These are the EAP-Code values.
626 VALUE EAP-Code Request 1
627 VALUE EAP-Code Response 2
628 VALUE EAP-Code Success 3
629 VALUE EAP-Code Failure 4
632 # For MS-CHAP, do we run ntlm_auth, or not.
634 VALUE MS-CHAP-Use-NTLM-Auth No 0
635 VALUE MS-CHAP-Use-NTLM-Auth Yes 1