share/dictionary

   1 #
   2 # Version $Id$
   3 #
   4 #       DO NOT EDIT THE FILES IN THIS DIRECTORY
   5 #
   6 #       The files in this directory are maintained and updated by
   7 #       the FreeRADIUS project.  Newer releases of software may update
   8 #       or change these files.
   9 #
  10 #       Use the main dictionary file (usually /etc/raddb/dictionary)
  11 #       for local system attributes and $INCLUDEs.
  12 #
  13 #
  14 #
  15 #       This file contains dictionary translations for parsing
  16 #       requests and generating responses.  All transactions are
  17 #       composed of Attribute/Value Pairs.  The value of each attribute
  18 #       is specified as one of 4 data types.  Valid data types are:
  19 #
  20 #       string  - 0-253 octets
  21 #       ipaddr  - 4 octets in network byte order
  22 #       integer - 32 bit value in big endian order (high byte first)
  23 #       date    - 32 bit value in big endian order - seconds since
  24 #                                       00:00:00 GMT,  Jan.  1,  1970
  25 #       ifid    - 8 octets in network byte order
  26 #       ipv6addr   - 16 octets in network byte order
  27 #       ipv6prefix - 18 octets in network byte order
  28 #
  29 #       FreeRADIUS includes extended data types which are not defined
  30 #       in RFC 2865 or RFC 2866, or RFC 3162.  These data types are:
  31 #
  32 #       abinary - Ascend's binary filter format.
  33 #       octets  - raw octets, printed and input as hex strings.
  34 #                 e.g.: 0x123456789abcdef
  35 #
  36 #
  37 #       Enumerated values are stored in the user file with dictionary
  38 #       VALUE translations for easy administration.
  39 #
  40 #       Example:
  41 #
  42 #       ATTRIBUTE         VALUE
  43 #       ---------------   -----
  44 #       Framed-Protocol = PPP
  45 #       7               = 1     (integer encoding)
  46 #
  47
  48 #
  49 #       Include compatibility dictionary for older users file. Move this
  50 #       directive to the end of the file if you want to see the old names
  51 #       in the logfiles, INSTEAD OF the new names.
  52 #
  53 $INCLUDE dictionary.compat      # compability issues
  54 $INCLUDE dictionary.3com
  55 $INCLUDE dictionary.3gpp
  56 $INCLUDE dictionary.3gpp2
  57 $INCLUDE dictionary.acc
  58 $INCLUDE dictionary.airespace
  59 $INCLUDE dictionary.alcatel
  60 $INCLUDE dictionary.alteon
  61 $INCLUDE dictionary.ascend
  62 $INCLUDE dictionary.bay
  63 $INCLUDE dictionary.bintec
  64 $INCLUDE dictionary.cabletron
  65 $INCLUDE dictionary.cisco
  66 #
  67 #  This is the same as the altiga dictionary.
  68 #
  69 #$INCLUDE dictionary.cisco.vpn3000
  70 $INCLUDE dictionary.cisco.vpn5000
  71 $INCLUDE dictionary.cisco.bbsm
  72 $INCLUDE dictionary.colubris
  73 $INCLUDE dictionary.erx
  74 $INCLUDE dictionary.extreme
  75 $INCLUDE dictionary.freeradius
  76 $INCLUDE dictionary.foundry
  77 $INCLUDE dictionary.gandalf
  78 $INCLUDE dictionary.itk
  79 $INCLUDE dictionary.juniper
  80 $INCLUDE dictionary.karlnet
  81 $INCLUDE dictionary.livingston
  82 $INCLUDE dictionary.microsoft
  83 $INCLUDE dictionary.navini
  84 $INCLUDE dictionary.nomadix
  85 $INCLUDE dictionary.propel
  86 $INCLUDE dictionary.quintum
  87 $INCLUDE dictionary.redback
  88 $INCLUDE dictionary.redcreek
  89 $INCLUDE dictionary.shasta
  90 $INCLUDE dictionary.shiva
  91 $INCLUDE dictionary.sonicwall
  92 $INCLUDE dictionary.springtide
  93 $INCLUDE dictionary.telebit
  94 $INCLUDE dictionary.trapeze
  95 $INCLUDE dictionary.tunnel
  96 $INCLUDE dictionary.usr
  97 $INCLUDE dictionary.valemount
  98 $INCLUDE dictionary.versanet
  99 $INCLUDE dictionary.wispr
 100 $INCLUDE dictionary.xedia
 101
 102 #
 103 #       The following are the proper new names. Use these.
 104 #
 105 #       http://www.iana.org/assignments/radius-types
 106 #
 107 ATTRIBUTE       User-Name               1       string
 108 ATTRIBUTE       User-Password           2       string encrypt=1
 109 ATTRIBUTE       CHAP-Password           3       octets
 110 ATTRIBUTE       NAS-IP-Address          4       ipaddr
 111 ATTRIBUTE       NAS-Port                5       integer
 112 ATTRIBUTE       Service-Type            6       integer
 113 ATTRIBUTE       Framed-Protocol         7       integer
 114 ATTRIBUTE       Framed-IP-Address       8       ipaddr
 115 ATTRIBUTE       Framed-IP-Netmask       9       ipaddr
 116 ATTRIBUTE       Framed-Routing          10      integer
 117 ATTRIBUTE       Filter-Id               11      string
 118 ATTRIBUTE       Framed-MTU              12      integer
 119 ATTRIBUTE       Framed-Compression      13      integer
 120 ATTRIBUTE       Login-IP-Host           14      ipaddr
 121 ATTRIBUTE       Login-Service           15      integer
 122 ATTRIBUTE       Login-TCP-Port          16      integer
 123 ATTRIBUTE       Reply-Message           18      string
 124 ATTRIBUTE       Callback-Number         19      string
 125 ATTRIBUTE       Callback-Id             20      string
 126 ATTRIBUTE       Framed-Route            22      string
 127 ATTRIBUTE       Framed-IPX-Network      23      ipaddr
 128 ATTRIBUTE       State                   24      octets
 129 ATTRIBUTE       Class                   25      octets
 130 ATTRIBUTE       Vendor-Specific         26      octets
 131 ATTRIBUTE       Session-Timeout         27      integer
 132 ATTRIBUTE       Idle-Timeout            28      integer
 133 ATTRIBUTE       Termination-Action      29      integer
 134 ATTRIBUTE       Called-Station-Id       30      string
 135 ATTRIBUTE       Calling-Station-Id      31      string
 136 ATTRIBUTE       NAS-Identifier          32      string
 137 ATTRIBUTE       Proxy-State             33      octets
 138 ATTRIBUTE       Login-LAT-Service       34      string
 139 ATTRIBUTE       Login-LAT-Node          35      string
 140 ATTRIBUTE       Login-LAT-Group         36      octets
 141 ATTRIBUTE       Framed-AppleTalk-Link   37      integer
 142 ATTRIBUTE       Framed-AppleTalk-Network 38     integer
 143 ATTRIBUTE       Framed-AppleTalk-Zone   39      string
 144
 145 ATTRIBUTE       Acct-Status-Type        40      integer
 146 ATTRIBUTE       Acct-Delay-Time         41      integer
 147 ATTRIBUTE       Acct-Input-Octets       42      integer
 148 ATTRIBUTE       Acct-Output-Octets      43      integer
 149 ATTRIBUTE       Acct-Session-Id         44      string
 150 ATTRIBUTE       Acct-Authentic          45      integer
 151 ATTRIBUTE       Acct-Session-Time       46      integer
 152 ATTRIBUTE       Acct-Input-Packets      47      integer
 153 ATTRIBUTE       Acct-Output-Packets     48      integer
 154 ATTRIBUTE       Acct-Terminate-Cause    49      integer
 155 ATTRIBUTE       Acct-Multi-Session-Id   50      string
 156 ATTRIBUTE       Acct-Link-Count         51      integer
 157 ATTRIBUTE       Acct-Input-Gigawords    52      integer
 158 ATTRIBUTE       Acct-Output-Gigawords   53      integer
 159 ATTRIBUTE       Event-Timestamp         55      date
 160
 161 ATTRIBUTE       CHAP-Challenge          60      octets
 162 ATTRIBUTE       NAS-Port-Type           61      integer
 163 ATTRIBUTE       Port-Limit              62      integer
 164 ATTRIBUTE       Login-LAT-Port          63      integer
 165
 166 ATTRIBUTE       Acct-Tunnel-Connection  68      string
 167
 168 ATTRIBUTE       ARAP-Password           70      string
 169 ATTRIBUTE       ARAP-Features           71      string
 170 ATTRIBUTE       ARAP-Zone-Access        72      integer
 171 ATTRIBUTE       ARAP-Security           73      integer
 172 ATTRIBUTE       ARAP-Security-Data      74      string
 173 ATTRIBUTE       Password-Retry          75      integer
 174 ATTRIBUTE       Prompt                  76      integer
 175 ATTRIBUTE       Connect-Info            77      string
 176 ATTRIBUTE       Configuration-Token     78      string
 177 ATTRIBUTE       EAP-Message             79      octets
 178 ATTRIBUTE       Message-Authenticator   80      octets
 179 ATTRIBUTE       ARAP-Challenge-Response 84      string  # 10 octets
 180 ATTRIBUTE       Acct-Interim-Interval   85      integer
 181 ATTRIBUTE       NAS-Port-Id             87      string
 182 ATTRIBUTE       Framed-Pool             88      string
 183 ATTRIBUTE       Originating-Line-Info   94      string
 184 ATTRIBUTE       NAS-IPv6-Address        95      ipv6addr
 185 ATTRIBUTE       Framed-Interface-Id     96      ifid
 186 ATTRIBUTE       Framed-IPv6-Prefix      97      octets # ipv6prefix
 187 ATTRIBUTE       Login-IPv6-Host         98      ipv6addr
 188 ATTRIBUTE       Framed-IPv6-Route       99      string
 189 ATTRIBUTE       Framed-IPv6-Pool        100     string
 190
 191 #  As defined in RFC 3576
 192 ATTRIBUTE       Error-Cause             101     integer
 193
 194 #  As defined in draft-sterman-aaa-sip-00.txt
 195 ATTRIBUTE       Digest-Response         206     string
 196 ATTRIBUTE       Digest-Attributes       207     octets  # stupid format
 197
 198 #
 199 #       Experimental Non Protocol Attributes used by FreeRADIUS
 200 #
 201
 202 #       The attributes number ranges are allocates as follows:
 203 #
 204 #       Range:  500-999
 205 #               server-side attributes which can go in a reply list
 206
 207 #       These attributes CAN go in the reply item list.
 208 ATTRIBUTE       Fall-Through            500     integer
 209 ATTRIBUTE       Exec-Program            502     string
 210 ATTRIBUTE       Exec-Program-Wait       503     string
 211
 212 #       These attributes CANNOT go in the reply item list.
 213
 214 #
 215 #       Range:  1000+
 216 #               Attributes which cannot go in a reply list.
 217 #
 218 #
 219 #       Range:  1000-1199
 220 #               Miscellaneous server attributes.
 221 #
 222 #
 223 #       Non-Protocol Attributes
 224 #       These attributes are used internally by the server
 225 #
 226 ATTRIBUTE       Auth-Type               1000    integer
 227 ATTRIBUTE       Menu                    1001    string
 228 ATTRIBUTE       Termination-Menu        1002    string
 229 ATTRIBUTE       Prefix                  1003    string
 230 ATTRIBUTE       Suffix                  1004    string
 231 ATTRIBUTE       Group                   1005    string
 232 ATTRIBUTE       Crypt-Password          1006    string
 233 ATTRIBUTE       Connect-Rate            1007    integer
 234 ATTRIBUTE       Add-Prefix              1008    string
 235 ATTRIBUTE       Add-Suffix              1009    string
 236 ATTRIBUTE       Expiration              1010    date
 237 ATTRIBUTE       Autz-Type               1011    integer
 238 ATTRIBUTE       Acct-Type               1012    integer
 239 ATTRIBUTE       Session-Type            1013    integer
 240 ATTRIBUTE       Post-Auth-Type          1014    integer
 241 ATTRIBUTE       Pre-Proxy-Type          1015    integer
 242 ATTRIBUTE       Post-Proxy-Type         1016    integer
 243 ATTRIBUTE       Pre-Acct-Type           1017    integer
 244
 245 #
 246 #       This is the EAP type of authentication, which is set
 247 #       by the EAP module, for informational purposes only.
 248 #
 249 ATTRIBUTE       EAP-Type                1018    integer
 250 ATTRIBUTE       EAP-TLS-Require-Client-Cert     1019    integer
 251 ATTRIBUTE       EAP-Id                  1020    integer
 252 ATTRIBUTE       EAP-Code                1021    integer
 253 ATTRIBUTE       EAP-MD5-Password        1022    string
 254 #
 255 #       Range:  1022-1028
 256 #               unused
 257 #
 258 ATTRIBUTE       User-Category           1029    string
 259 ATTRIBUTE       Group-Name              1030    string
 260 ATTRIBUTE       Huntgroup-Name          1031    string
 261 ATTRIBUTE       Simultaneous-Use        1034    integer
 262 ATTRIBUTE       Strip-User-Name         1035    integer
 263 ATTRIBUTE       Hint                    1040    string
 264 ATTRIBUTE       Pam-Auth                1041    string
 265 ATTRIBUTE       Login-Time              1042    string
 266 ATTRIBUTE       Stripped-User-Name      1043    string
 267 ATTRIBUTE       Current-Time            1044    string
 268 ATTRIBUTE       Realm                   1045    string
 269 ATTRIBUTE       No-Such-Attribute       1046    string
 270 ATTRIBUTE       Packet-Type             1047    integer
 271 ATTRIBUTE       Proxy-To-Realm          1048    string
 272 ATTRIBUTE       Replicate-To-Realm      1049    string
 273 ATTRIBUTE       Acct-Session-Start-Time 1050    date
 274 ATTRIBUTE       Acct-Unique-Session-Id  1051    string
 275 ATTRIBUTE       Client-IP-Address       1052    ipaddr
 276 ATTRIBUTE       Ldap-UserDn             1053    string
 277 ATTRIBUTE       NS-MTA-MD5-Password     1054    string
 278 ATTRIBUTE       SQL-User-Name           1055    string
 279 ATTRIBUTE       LM-Password             1057    octets
 280 ATTRIBUTE       NT-Password             1058    octets
 281 ATTRIBUTE       SMB-Account-CTRL        1059    integer
 282 ATTRIBUTE       SMB-Account-CTRL-TEXT   1061    string
 283 ATTRIBUTE       User-Profile            1062    string
 284 ATTRIBUTE       Digest-Realm            1063    string
 285 ATTRIBUTE       Digest-Nonce            1064    string
 286 ATTRIBUTE       Digest-Method           1065    string
 287 ATTRIBUTE       Digest-URI              1066    string
 288 ATTRIBUTE       Digest-QOP              1067    string
 289 ATTRIBUTE       Digest-Algorithm        1068    string
 290 ATTRIBUTE       Digest-Body-Digest      1069    string
 291 ATTRIBUTE       Digest-CNonce           1070    string
 292 ATTRIBUTE       Digest-Nonce-Count      1071    string
 293 ATTRIBUTE       Digest-User-Name        1072    string
 294 ATTRIBUTE       Pool-Name               1073    string
 295 ATTRIBUTE       Ldap-Group              1074    string
 296 ATTRIBUTE       Module-Success-Message  1075    string
 297 ATTRIBUTE       Module-Failure-Message  1076    string
 298 #               X99-Fast                1077    integer
 299 ATTRIBUTE       Rewrite-Rule            1078    string
 300 ATTRIBUTE       Sql-Group               1079    string
 301 ATTRIBUTE       Response-Packet-Type    1080    integer
 302 # 1081 unused
 303 ATTRIBUTE       MS-CHAP-Use-NTLM-Auth   1082    integer
 304 ATTRIBUTE       NTLM-User-Name          1083    string
 305 ATTRIBUTE       Packet-Src-IP-Address   1084    ipaddr
 306 ATTRIBUTE       Packet-Dst-IP-Address   1085    ipaddr
 307 ATTRIBUTE       Packet-Src-Port         1086    integer
 308 ATTRIBUTE       Packet-Dst-Port         1087    integer
 309 ATTRIBUTE       Packet-Authentication-Vector 1088 octets
 310 ATTRIBUTE       Time-Of-Day             1089    string
 311 ATTRIBUTE       Request-Processing-Stage 1090   string
 312 ATTRIBUTE       Cache-No-Caching        1091    string
 313 ATTRIBUTE       Cache-Delete-Cache      1092    string
 314
 315 #
 316 #       Range:  1084-1199
 317 #               unused.
 318 #
 319
 320 #
 321 #       Range:  1200-1279
 322 #               EAP-SIM (and other EAP type) weirdness.
 323 #
 324 #       For EAP-SIM, some attribute definitions for database interface
 325 #
 326 ATTRIBUTE       EAP-Sim-Subtype         1200    integer
 327
 328 ATTRIBUTE       EAP-Sim-Rand1           1201    octets
 329 ATTRIBUTE       EAP-Sim-Rand2           1202    octets
 330 ATTRIBUTE       EAP-Sim-Rand3           1203    octets
 331
 332 ATTRIBUTE       EAP-Sim-SRES1           1204    octets
 333 ATTRIBUTE       EAP-Sim-SRES2           1205    octets
 334 ATTRIBUTE       EAP-Sim-SRES3           1206    octets
 335
 336 VALUE           EAP-Sim-Subtype         Start             10
 337 VALUE           EAP-Sim-Subtype         Challenge         11
 338 VALUE           EAP-Sim-Subtype         Notification      12
 339 VALUE           EAP-Sim-Subtype         Re-authentication 13
 340
 341 # this attribute is used internally by the client code.
 342 ATTRIBUTE       EAP-Sim-State           1207    integer
 343
 344 ATTRIBUTE       EAP-Sim-IMSI            1208    string
 345 ATTRIBUTE       EAP-Sim-HMAC            1209    string
 346 ATTRIBUTE       EAP-Sim-KEY             1210    octets
 347 ATTRIBUTE       EAP-Sim-EXTRA           1211    octets
 348
 349 ATTRIBUTE       EAP-Sim-KC1             1212    octets
 350 ATTRIBUTE       EAP-Sim-KC2             1213    octets
 351 ATTRIBUTE       EAP-Sim-KC3             1214    octets
 352
 353 #
 354 #       Range:  1280 - 1535
 355 #               EAP-type specific attributes
 356 #
 357
 358 # these are PW_EAP_X  + 1280
 359 ATTRIBUTE       EAP-Type-Identity       1281    string
 360 ATTRIBUTE       EAP-Type-Notification   1282    string
 361 ATTRIBUTE       EAP-Type-NAK            1283    string
 362 ATTRIBUTE       EAP-Type-MD5            1284    octets
 363 ATTRIBUTE       EAP-Type-OTP            1285    string
 364 ATTRIBUTE       EAP-Type-GTC            1286    string
 365 ATTRIBUTE       EAP-Type-TLS            1297    octets
 366 ATTRIBUTE       EAP-Type-SIM            1298    octets
 367 ATTRIBUTE       EAP-Type-LEAP           1301    octets
 368 ATTRIBUTE       EAP-Type-SIM2           1302    octets
 369 ATTRIBUTE       EAP-Type-TTLS           1305    octets
 370 ATTRIBUTE       EAP-Type-PEAP           1309    octets
 371
 372 #
 373 #       Range:  1536 - 1791
 374 #               EAP Sim sub-types.
 375 #
 376
 377 # these are PW_EAP_SIM_X + 1536
 378 ATTRIBUTE       EAP-Sim-RAND            1537    octets
 379 ATTRIBUTE       EAP-Sim-PADDING         1542    octets
 380 ATTRIBUTE       EAP-Sim-NONCE_MT        1543    octets
 381 ATTRIBUTE       EAP-Sim-PERMANENT_ID_REQ 1546    octets
 382 ATTRIBUTE       EAP-Sim-MAC             1547    octets
 383 ATTRIBUTE       EAP-Sim-NOTIFICATION    1548    octets
 384 ATTRIBUTE       EAP-Sim-ANY_ID_REQ      1549    octets
 385 ATTRIBUTE       EAP-Sim-IDENTITY        1550    octets
 386 ATTRIBUTE       EAP-Sim-VERSION_LIST    1551    octets
 387 ATTRIBUTE       EAP-Sim-SELECTED_VERSION 1552   octets
 388 ATTRIBUTE       EAP-Sim-FULLAUTH_ID_REQ 1553    octets
 389 ATTRIBUTE       EAP-Sim-COUNTER         1555    octets
 390 ATTRIBUTE       EAP-Sim-COUNTER_TOO_SMALL 1556  octets
 391 ATTRIBUTE       EAP-Sim-NONCE_S         1557    octets
 392 ATTRIBUTE       EAP-Sim-IV              1665    octets
 393 ATTRIBUTE       EAP-Sim-ENCR_DATA       1666    octets
 394 ATTRIBUTE       EAP-Sim-NEXT_PSEUDONUM  1668    octets
 395 ATTRIBUTE       EAP-Sim-NEXT_REAUTH_ID  1669    octets
 396 ATTRIBUTE       EAP-Sim-CHECKCODE       1670    octets
 397
 398
 399 #
 400 #       Range: 1800-1899
 401 #              Temporary attributes, for local storage.
 402 #
 403 ATTRIBUTE       Tmp-String-0            1800    string
 404 ATTRIBUTE       Tmp-String-1            1801    string
 405 ATTRIBUTE       Tmp-String-2            1802    string
 406 ATTRIBUTE       Tmp-String-3            1803    string
 407 ATTRIBUTE       Tmp-String-4            1804    string
 408 ATTRIBUTE       Tmp-String-5            1805    string
 409 ATTRIBUTE       Tmp-String-6            1806    string
 410 ATTRIBUTE       Tmp-String-7            1807    string
 411 ATTRIBUTE       Tmp-String-8            1808    string
 412 ATTRIBUTE       Tmp-String-9            1809    string
 413
 414 ATTRIBUTE       Tmp-Integer-0           1810    integer
 415 ATTRIBUTE       Tmp-Integer-1           1811    integer
 416 ATTRIBUTE       Tmp-Integer-2           1812    integer
 417 ATTRIBUTE       Tmp-Integer-3           1813    integer
 418 ATTRIBUTE       Tmp-Integer-4           1814    integer
 419 ATTRIBUTE       Tmp-Integer-5           1815    integer
 420 ATTRIBUTE       Tmp-Integer-6           1816    integer
 421 ATTRIBUTE       Tmp-Integer-7           1817    integer
 422 ATTRIBUTE       Tmp-Integer-8           1818    integer
 423 ATTRIBUTE       Tmp-Integer-9           1819    integer
 424
 425 ATTRIBUTE       Tmp-IP-Address-0        1820    ipaddr
 426 ATTRIBUTE       Tmp-IP-Address-1        1821    ipaddr
 427 ATTRIBUTE       Tmp-IP-Address-2        1822    ipaddr
 428 ATTRIBUTE       Tmp-IP-Address-3        1823    ipaddr
 429 ATTRIBUTE       Tmp-IP-Address-4        1824    ipaddr
 430 ATTRIBUTE       Tmp-IP-Address-5        1825    ipaddr
 431 ATTRIBUTE       Tmp-IP-Address-6        1826    ipaddr
 432 ATTRIBUTE       Tmp-IP-Address-7        1827    ipaddr
 433 ATTRIBUTE       Tmp-IP-Address-8        1828    ipaddr
 434 ATTRIBUTE       Tmp-IP-Address-9        1829    ipaddr
 435
 436
 437 #
 438 #       Range:  1900-2999
 439 #               Free
 440 #
 441 #       Range:  3000-3999
 442 #               Site-local attributes (see raddb/dictionary.in)
 443 #               Do NOT define attributes in this range!
 444 #
 445 #       Range:  4000-65535
 446 #               Unused
 447 #
 448 #       Range:  65536-
 449 #               Invalid.  Don't use.
 450 #
 451
 452
 453 #
 454 #       Integer Translations
 455 #
 456
 457 #       User Types
 458
 459 VALUE           Service-Type            Login-User              1
 460 VALUE           Service-Type            Framed-User             2
 461 VALUE           Service-Type            Callback-Login-User     3
 462 VALUE           Service-Type            Callback-Framed-User    4
 463 VALUE           Service-Type            Outbound-User           5
 464 VALUE           Service-Type            Administrative-User     6
 465 VALUE           Service-Type            NAS-Prompt-User         7
 466 VALUE           Service-Type            Authenticate-Only       8
 467 VALUE           Service-Type            Callback-NAS-Prompt     9
 468 VALUE           Service-Type            Call-Check              10
 469 VALUE           Service-Type            Callback-Administrative 11
 470 VALUE           Service-Type            Voice                   12
 471 VALUE           Service-Type            Fax                     13
 472 VALUE           Service-Type            Modem-Relay             14
 473 VALUE           Service-Type            IAPP-Register           15
 474 VALUE           Service-Type            IAPP-AP-Check           16
 475
 476 #       Framed Protocols
 477
 478 VALUE           Framed-Protocol         PPP                     1
 479 VALUE           Framed-Protocol         SLIP                    2
 480 VALUE           Framed-Protocol         ARAP                    3
 481 VALUE           Framed-Protocol         Gandalf-SLML            4
 482 VALUE           Framed-Protocol         Xylogics-IPX-SLIP       5
 483 VALUE           Framed-Protocol         X.75-Synchronous        6
 484 VALUE           Framed-Protocol         GPRS-PDP-Context        7
 485
 486 #       Framed Routing Values
 487
 488 VALUE           Framed-Routing          None                    0
 489 VALUE           Framed-Routing          Broadcast               1
 490 VALUE           Framed-Routing          Listen                  2
 491 VALUE           Framed-Routing          Broadcast-Listen        3
 492
 493 #       Framed Compression Types
 494
 495 VALUE           Framed-Compression      None                    0
 496 VALUE           Framed-Compression      Van-Jacobson-TCP-IP     1
 497 VALUE           Framed-Compression      IPX-Header-Compression  2
 498 VALUE           Framed-Compression      Stac-LZS                3
 499
 500 #       Login Services
 501
 502 VALUE           Login-Service           Telnet                  0
 503 VALUE           Login-Service           Rlogin                  1
 504 VALUE           Login-Service           TCP-Clear               2
 505 VALUE           Login-Service           PortMaster              3
 506 VALUE           Login-Service           LAT                     4
 507 VALUE           Login-Service           X25-PAD                 5
 508 VALUE           Login-Service           X25-T3POS               6
 509 VALUE           Login-Service           TCP-Clear-Quiet         7
 510
 511 #       Login-TCP-Port          (see /etc/services for more examples)
 512
 513 VALUE           Login-TCP-Port          Telnet                  23
 514 VALUE           Login-TCP-Port          Rlogin                  513
 515 VALUE           Login-TCP-Port          Rsh                     514
 516
 517 #       Status Types
 518
 519 VALUE           Acct-Status-Type        Start                   1
 520 VALUE           Acct-Status-Type        Stop                    2
 521 VALUE           Acct-Status-Type        Interim-Update          3
 522 VALUE           Acct-Status-Type        Alive                   3
 523 VALUE           Acct-Status-Type        Accounting-On           7
 524 VALUE           Acct-Status-Type        Accounting-Off          8
 525 #       RFC 2867 Additional Status-Type Values
 526 VALUE           Acct-Status-Type        Tunnel-Start            9
 527 VALUE           Acct-Status-Type        Tunnel-Stop             10
 528 VALUE           Acct-Status-Type        Tunnel-Reject           11
 529 VALUE           Acct-Status-Type        Tunnel-Link-Start       12
 530 VALUE           Acct-Status-Type        Tunnel-Link-Stop        13
 531 VALUE           Acct-Status-Type        Tunnel-Link-Reject      14
 532 VALUE           Acct-Status-Type        Failed                  15
 533
 534 #       Authentication Types
 535
 536 VALUE           Acct-Authentic          RADIUS                  1
 537 VALUE           Acct-Authentic          Local                   2
 538 VALUE           Acct-Authentic          Remote                  3
 539 VALUE           Acct-Authentic          Diameter                4
 540
 541 #       Termination Options
 542
 543 VALUE           Termination-Action      Default                 0
 544 VALUE           Termination-Action      RADIUS-Request          1
 545
 546 #       NAS Port Types
 547
 548 VALUE           NAS-Port-Type           Async                   0
 549 VALUE           NAS-Port-Type           Sync                    1
 550 VALUE           NAS-Port-Type           ISDN                    2
 551 VALUE           NAS-Port-Type           ISDN-V120               3
 552 VALUE           NAS-Port-Type           ISDN-V110               4
 553 VALUE           NAS-Port-Type           Virtual                 5
 554 VALUE           NAS-Port-Type           PIAFS                   6
 555 VALUE           NAS-Port-Type           HDLC-Clear-Channel      7
 556 VALUE           NAS-Port-Type           X.25                    8
 557 VALUE           NAS-Port-Type           X.75                    9
 558 VALUE           NAS-Port-Type           G.3-Fax                 10
 559 VALUE           NAS-Port-Type           SDSL                    11
 560 VALUE           NAS-Port-Type           ADSL-CAP                12
 561 VALUE           NAS-Port-Type           ADSL-DMT                13
 562 VALUE           NAS-Port-Type           IDSL                    14
 563 VALUE           NAS-Port-Type           Ethernet                15
 564 VALUE           NAS-Port-Type           xDSL                    16
 565 VALUE           NAS-Port-Type           Cable                   17
 566 VALUE           NAS-Port-Type           Wireless-Other          18
 567 VALUE           NAS-Port-Type           Wireless-802.11         19
 568 VALUE           NAS-Port-Type           Token-Ring              20
 569 VALUE           NAS-Port-Type           FDDI                    21
 570 VALUE           NAS-Port-Type           Wireless-CDMA2000       22
 571 VALUE           NAS-Port-Type           Wireless-UMTS           23
 572 VALUE           NAS-Port-Type           Wireless-1X-EV          24
 573 VALUE           NAS-Port-Type           IAPP                    25
 574
 575 #       Acct Terminate Causes
 576
 577 VALUE           Acct-Terminate-Cause    User-Request            1
 578 VALUE           Acct-Terminate-Cause    Lost-Carrier            2
 579 VALUE           Acct-Terminate-Cause    Lost-Service            3
 580 VALUE           Acct-Terminate-Cause    Idle-Timeout            4
 581 VALUE           Acct-Terminate-Cause    Session-Timeout         5
 582 VALUE           Acct-Terminate-Cause    Admin-Reset             6
 583 VALUE           Acct-Terminate-Cause    Admin-Reboot            7
 584 VALUE           Acct-Terminate-Cause    Port-Error              8
 585 VALUE           Acct-Terminate-Cause    NAS-Error               9
 586 VALUE           Acct-Terminate-Cause    NAS-Request             10
 587 VALUE           Acct-Terminate-Cause    NAS-Reboot              11
 588 VALUE           Acct-Terminate-Cause    Port-Unneeded           12
 589 VALUE           Acct-Terminate-Cause    Port-Preempted          13
 590 VALUE           Acct-Terminate-Cause    Port-Suspended          14
 591 VALUE           Acct-Terminate-Cause    Service-Unavailable     15
 592 VALUE           Acct-Terminate-Cause    Callback                16
 593 VALUE           Acct-Terminate-Cause    User-Error              17
 594 VALUE           Acct-Terminate-Cause    Host-Request            18
 595 VALUE           Acct-Terminate-Cause    Supplicant-Restart      19
 596 VALUE           Acct-Terminate-Cause    Reauthentication-Failure 20
 597 VALUE           Acct-Terminate-Cause    Port-Reinit             21
 598 VALUE           Acct-Terminate-Cause    Port-Disabled           22
 599
 600 #VALUE          Tunnel-Type             L2TP                    3
 601 #VALUE          Tunnel-Medium-Type      IP                      1
 602
 603 VALUE           Prompt                  No-Echo                 0
 604 VALUE           Prompt                  Echo                    1
 605
 606 #
 607 #       Error causes
 608 #
 609 VALUE           Error-Cause             Residual-Context-Removed        201
 610 VALUE           Error-Cause             Invalid-EAP-Packet              202
 611 VALUE           Error-Cause             Unsupported-Attribute           401
 612 VALUE           Error-Cause             Missing-Attribute               402
 613 VALUE           Error-Cause             NAS-Identification-Mismatch     403
 614 VALUE           Error-Cause             Invalid-Request                 404
 615 VALUE           Error-Cause             Unsupported-Service             405
 616 VALUE           Error-Cause             Unsupported-Extension           406
 617 VALUE           Error-Cause             Administratively-Prohibited     501
 618 VALUE           Error-Cause             Proxy-Request-Not-Routable      502
 619 VALUE           Error-Cause             Session-Context-Not-Found       503
 620 VALUE           Error-Cause             Session-Context-Not-Removable   504
 621 VALUE           Error-Cause             Proxy-Processing-Error          505
 622 VALUE           Error-Cause             Resources-Unavailable           506
 623 VALUE           Error-Cause             Request-Initiated               507
 624
 625 #
 626 #       Non-Protocol Integer Translations
 627 #
 628
 629 VALUE           Auth-Type               Local                   0
 630 VALUE           Auth-Type               System                  1
 631 VALUE           Auth-Type               SecurID                 2
 632 VALUE           Auth-Type               Crypt-Local             3
 633 VALUE           Auth-Type               Reject                  4
 634 VALUE           Auth-Type               ActivCard               5
 635 VALUE           Auth-Type               EAP                     6
 636 VALUE           Auth-Type               ARAP                    7
 637
 638 #
 639 #       FreeRADIUS extensions (most originally from Cistron)
 640 #
 641 VALUE           Auth-Type               Accept                  254
 642
 643 VALUE           Auth-Type               PAP                     1024
 644 VALUE           Auth-Type               CHAP                    1025
 645 VALUE           Auth-Type               LDAP                    1026
 646 VALUE           Auth-Type               PAM                     1027
 647 VALUE           Auth-Type               MS-CHAP                 1028
 648 VALUE           Auth-Type               Kerberos                1029
 649 VALUE           Auth-Type               CRAM                    1030
 650 VALUE           Auth-Type               NS-MTA-MD5              1031
 651 # 1032 is unused (was a duplicate of CRAM)
 652 VALUE           Auth-Type               SMB                     1033
 653
 654 #
 655 #       Authorization type, too.
 656 #
 657 VALUE           Autz-Type               Local                   0
 658
 659 #
 660 #       And accounting
 661 #
 662 VALUE           Acct-Type               Local                   0
 663
 664 #
 665 #       And Session handling
 666 #
 667 VALUE           Session-Type            Local                   0
 668
 669 #
 670 #       And Post-Auth
 671 VALUE           Post-Auth-Type          Local                   0
 672
 673 #
 674 #       Experimental Non-Protocol Integer Translations for FreeRADIUS
 675 #
 676 VALUE           Fall-Through            No                      0
 677 VALUE           Fall-Through            Yes                     1
 678
 679 #VALUE          Strip-User-Name         No                      0
 680 #VALUE          Strip-User-Name         Yes                     1
 681
 682 VALUE           Packet-Type     Access-Request                  1
 683 VALUE           Packet-Type     Access-Accept                   2
 684 VALUE           Packet-Type     Access-Reject                   3
 685 VALUE           Packet-Type     Accounting-Request              4
 686 VALUE           Packet-Type     Accounting-Response             5
 687 VALUE           Packet-Type     Accounting-Status               6
 688 VALUE           Packet-Type     Password-Request                7
 689 VALUE           Packet-Type     Password-Accept                 8
 690 VALUE           Packet-Type     Password-Reject                 9
 691 VALUE           Packet-Type     Accounting-Message              10
 692 VALUE           Packet-Type     Access-Challenge                11
 693 VALUE           Packet-Type     Status-Server                   12
 694 VALUE           Packet-Type     Status-Client                   13
 695
 696 #
 697 #       The following packet types are described in RFC 2882,
 698 #       but they are NOT part of the RADIUS standard.  Instead,
 699 #       they are informational about vendor-specific extensions
 700 #       to the RADIUS standard.
 701 #
 702 VALUE           Packet-Type     Resource-Free-Request           21
 703 VALUE           Packet-Type     Resource-Free-Response          22
 704 VALUE           Packet-Type     Resource-Query-Request          23
 705 VALUE           Packet-Type     Resource-Query-Response         24
 706 VALUE           Packet-Type     Alternate-Resource-Reclaim-Request 25
 707 VALUE           Packet-Type     NAS-Reboot-Request              26
 708 VALUE           Packet-Type     NAS-Reboot-Response             27
 709 VALUE           Packet-Type     Next-Passcode                   29
 710 VALUE           Packet-Type     New-Pin                         30
 711 VALUE           Packet-Type     Terminate-Session               31
 712 VALUE           Packet-Type     Password-Expired                32
 713 VALUE           Packet-Type     Event-Request                   33
 714 VALUE           Packet-Type     Event-Response                  34
 715 VALUE           Packet-Type     Disconnect-Request              40
 716 VALUE           Packet-Type     Disconnect-ACK                  41
 717 VALUE           Packet-Type     Disconnect-NAK                  42
 718 VALUE           Packet-Type     CoF-Request                     43
 719 VALUE           Packet-Type     CoF-ACK                         44
 720 VALUE           Packet-Type     CoF-NAK                         45
 721 VALUE           Packet-Type     IP-Address-Allocate             50
 722 VALUE           Packet-Type     IP-Address-Release              51
 723
 724 VALUE           Response-Packet-Type    Access-Request                  1
 725 VALUE           Response-Packet-Type    Access-Accept                   2
 726 VALUE           Response-Packet-Type    Access-Reject                   3
 727 VALUE           Response-Packet-Type    Accounting-Request              4
 728 VALUE           Response-Packet-Type    Accounting-Response             5
 729 VALUE           Response-Packet-Type    Accounting-Status               6
 730 VALUE           Response-Packet-Type    Password-Request                7
 731 VALUE           Response-Packet-Type    Password-Accept                 8
 732 VALUE           Response-Packet-Type    Password-Reject                 9
 733 VALUE           Response-Packet-Type    Accounting-Message              10
 734 VALUE           Response-Packet-Type    Access-Challenge                11
 735 VALUE           Response-Packet-Type    Status-Server                   12
 736 VALUE           Response-Packet-Type    Status-Client                   13
 737
 738 #
 739 #       EAP Sub-types, inside of Request and Response packets
 740 #
 741 #       http://www.iana.org/assignments/ppp-numbers
 742 #               "PPP EAP REQUEST/RESPONSE TYPES"
 743 #
 744 #
 745 #       See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
 746 #
 747 VALUE           EAP-Type        None                    0
 748 VALUE           EAP-Type        Identity                1
 749 VALUE           EAP-Type        Notification            2
 750 VALUE           EAP-Type        NAK                     3
 751 VALUE           EAP-Type        MD5-Challenge           4
 752 VALUE           EAP-Type        One-Time-Password       5
 753 VALUE           EAP-Type        Generic-Token-Card      6
 754 VALUE           EAP-Type        RSA-Public-Key          9
 755 VALUE           EAP-Type        DSS-Unilateral          10
 756 VALUE           EAP-Type        KEA                     11
 757 VALUE           EAP-Type        KEA-Validate            12
 758 VALUE           EAP-Type        EAP-TLS                 13
 759 VALUE           EAP-Type        Defender-Token          14
 760 VALUE           EAP-Type        RSA-SecurID-EAP         15
 761 VALUE           EAP-Type        Arcot-Systems-EAP       16
 762 VALUE           EAP-Type        Cisco-LEAP              17
 763 VALUE           EAP-Type        Nokia-IP-Smart-Card     18
 764 VALUE           EAP-Type        SIM                     18
 765 VALUE           EAP-Type        SRP-SHA1-Part-1         19
 766 VALUE           EAP-Type        SRP-SHA1-Part-2         20
 767 VALUE           EAP-Type        EAP-TTLS                21
 768 VALUE           EAP-Type        Remote-Access-Service   22
 769 VALUE           EAP-Type        UMTS                    23
 770 VALUE           EAP-Type        EAP-3Com-Wireless       24
 771 VALUE           EAP-Type        PEAP                    25
 772 VALUE           EAP-Type        MS-EAP-Authentication   26
 773 VALUE           EAP-Type        MAKE                    27
 774 VALUE           EAP-Type        CRYPTOCard              28
 775 VALUE           EAP-Type        EAP-MSCHAP-V2           29
 776 VALUE           EAP-Type        DynamID                 30
 777 VALUE           EAP-Type        Rob-EAP                 31
 778 VALUE           EAP-Type        SecurID-EAP             32
 779 VALUE           EAP-Type        MS-Authentication-TLV   33
 780 VALUE           EAP-Type        SentriNET               34
 781 VALUE           EAP-Type        EAP-Actiontec-Wireless  35
 782 VALUE           EAP-Type        Cogent-Biomentric-EAP   36
 783 VALUE           EAP-Type        AirFortress-EAP         37
 784 VALUE           EAP-Type        EAP-HTTP-Digest         38
 785 VALUE           EAP-Type        SecuriSuite-EAP         39
 786 VALUE           EAP-Type        DeviceConnect-EAP       40
 787 VALUE           EAP-Type        EAP-SPEKE               41
 788 VALUE           EAP-Type        EAP-MOBAC               42
 789
 790 #
 791 #       These are duplicate values, to get around the problem of
 792 #       having two MS-CHAPv2 EAP types.
 793 #
 794 VALUE           EAP-Type        Microsoft-MS-CHAPv2     26
 795 VALUE           EAP-Type        Cisco-MS-CHAPv2         29
 796
 797 #
 798 #       And this is what most people mean by MS-CHAPv2
 799 #
 800 VALUE           EAP-Type        MS-CHAP-V2              26
 801
 802
 803 #
 804 #       This says TLS, but it's only valid for TTLS & PEAP.
 805 #       EAP-TLS *always* requires a client certificate.
 806 #
 807 VALUE   EAP-TLS-Require-Client-Cert No  0
 808 VALUE   EAP-TLS-Require-Client-Cert Yes 1
 809
 810 #
 811 #       These are the EAP-Code values.
 812 #
 813 VALUE   EAP-Code     Request     1
 814 VALUE   EAP-Code     Response    2
 815 VALUE   EAP-Code     Success     3
 816 VALUE   EAP-Code     Failure     4
 817
 818 #
 819 #  For MS-CHAP, do we run ntlm_auth, or not.
 820 #
 821 VALUE   MS-CHAP-Use-NTLM-Auth   No      0
 822 VALUE   MS-CHAP-Use-NTLM-Auth   Yes     1