2 # Copyright (C) 2015 The FreeRADIUS Server project and contributors
4 # Sonicwall Firewall dictionary
11 # Backwards compatibility.
12 BEGIN-VENDOR SonicWall
14 ATTRIBUTE SS3-Firewall-User-Privilege 1 integer
17 ATTRIBUTE SonicWall-User-Privilege 1 integer
18 VALUE SonicWall-User-Privilege Remote-Access 1 # deprecated
19 VALUE SonicWall-User-Privilege Bypass-Filters 2
20 VALUE SonicWall-User-Privilege VPN-Client-Access 3 # standard
21 VALUE SonicWall-User-Privilege Access-To-VPN 4 # standard
22 VALUE SonicWall-User-Privilege Limited-Management 5
23 VALUE SonicWall-User-Privilege L2TP-Client-Access 6 # standard
24 VALUE SonicWall-User-Privilege Wireless-Guest 7 # standard
25 VALUE SonicWall-User-Privilege Wireless-Add-ACL 8
26 VALUE SonicWall-User-Privilege Internet-Access 9 # standard
28 # Those values indicated as "standard" are applicable only on a SonicWall
29 # firewall running standard firmware and not on one running enhanced firmware.
32 # This attribute is to use in place of SonicWall-User-Privilege with RADIUS
33 # servers that allow only one instance of a Vendor-Specific attribute to be
34 # set (such as the ACE Server from RSA). Note that it is commented out in this
35 # file because it is not needed in any servers that support multiple VSA's.
37 # The value of this attribute is a text string giving a comma-separated list
38 # of one or more privileges, each corresponding to a value of the
39 # SonicWall-User-Privilege attribute above (and note that some are applicable
40 # only on a SonicWall firewall running standard firmware as indicated above):
41 # "BF,VC,VA,LM,LA,WG,WA,IA"
42 # "RA" for "Remote-Access" is now deprecated.
43 # ATTRIBUTE SonicWall-User-Privileges 2 string SonicWall
45 # Multiple of these can be set for a user, each specifying the name of a
46 # user group to which that user has membership. Note that this can
47 # alternatively be achieved by use of the Filter-Id attribute.
48 # This is applicable only on a SonicWall firewall running enhanced firmware.
50 ATTRIBUTE SonicWall-User-Group 3 string
52 # This attribute is to use in place of SonicWall-User-Group with RADIUS
53 # servers that allow only one instance of a Vendor-Specific attribute to be
54 # set (such as the ACE Server from RSA). Note that it is commented out in this
55 # file because it is not needed in any servers that support multiple VSA's.
57 # The value of this attribute is a text string giving a comma-separated list
58 # of the names of one or more user groups to which that user has membership.
59 # This is applicable only on a SonicWall firewall running enhanced firmware.
61 # ATTRIBUTE SonicWall-User-Groups 4 string SonicWall.