1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
|
RADIUS TYPES
(last updated 2001 June 15)
The RFC "Remote Authentication Dial In User Service (RADIUS)"
[RFC2058, RFC2865] defines a type code. The IANA registry of
these codes is listed here.
RADIUS Attribute Types
- RADIUS Attribute Values
RADIUS Packet Type Codes
- RADIUS Codes
RADIUS Attribute Types
----------------------
Defined in RFC 2865 unless otherwise indicated.
VALUE DESCRIPTION REFERENCE
------ ----------- ---------
1 User-Name
2 User-Password
3 CHAP-Password
4 NAS-IP-Address
5 NAS-Port
6 Service-Type
7 Framed-Protocol
8 Framed-IP-Address
9 Framed-IP-Netmask
10 Framed-Routing
11 Filter-Id
12 Framed-MTU
13 Framed-Compression
14 Login-IP-Host
15 Login-Service
16 Login-TCP-Port
17 (unassigned)
18 Reply-Message
19 Callback-Number
20 Callback-Id
21 (unassigned)
22 Framed-Route
23 Framed-IPX-Network
24 State
25 Class
26 Vendor-Specific
27 Session-Timeout
28 Idle-Timeout
29 Termination-Action
30 Called-Station-Id
31 Calling-Station-Id
32 NAS-Identifier
33 Proxy-State
34 Login-LAT-Service
35 Login-LAT-Node
36 Login-LAT-Group
37 Framed-AppleTalk-Link
38 Framed-AppleTalk-Network
39 Framed-AppleTalk-Zone
40 Acct-Status-Type [RFC2866]
41 Acct-Delay-Time [RFC2866]
42 Acct-Input-Octets [RFC2866]
43 Acct-Output-Octets [RFC2866]
44 Acct-Session-Id [RFC2866]
45 Acct-Authentic [RFC2866]
46 Acct-Session-Time [RFC2866]
47 Acct-Input-Packets [RFC2866]
48 Acct-Output-Packets [RFC2866]
49 Acct-Terminate-Cause [RFC2866]
50 Acct-Multi-Session-Id [RFC2866]
51 Acct-Link-Count [RFC2866]
52 Acct-Input-Gigawords [RFC2869]
53 Acct-Output-Gigawords [RFC2869]
54 (unassigned)
55 Event-Timestamp [RFC2869]
56-59 (unassigned)
60 CHAP-Challenge
61 NAS-Port-Type
62 Port-Limit
63 Login-LAT-Port
64 Tunnel-Type [RFC2868]
65 Tunnel-Medium-Type [RFC2868]
66 Tunnel-Client-Endpoint [RFC2868]
67 Tunnel-Server-Endpoint [RFC2868]
68 Acct-Tunnel-Connection [RFC2867]
69 Tunnel-Password [RFC2868]
70 ARAP-Password [RFC2869]
71 ARAP-Features [RFC2869]
72 ARAP-Zone-Access [RFC2869]
73 ARAP-Security [RFC2869]
74 ARAP-Security-Data [RFC2869]
75 Password-Retry [RFC2869]
76 Prompt [RFC2869]
77 Connect-Info [RFC2869]
78 Configuration-Token [RFC2869]
79 EAP-Message [RFC2869]
80 Message-Authenticator [RFC2869]
81 Tunnel-Private-Group-ID [RFC2868]
82 Tunnel-Assignment-ID [RFC2868]
83 Tunnel-Preference [RFC2868]
84 ARAP-Challenge-Response [RFC2869]
85 Acct-Interim-Interval [RFC2869]
86 Acct-Tunnel-Packets-Lost [RFC2867]
87 NAS-Port-Id [RFC2869]
88 Framed-Pool [RFC2869]
89 (unassigned)
90 Tunnel-Client-Auth-ID [RFC2868]
91 Tunnel-Server-Auth-ID [RFC2868]
92-93 (Unassigned)
94 Originating-Line-Info [Trifunovic]
192-223 Experimental Use [RFC2058]
224-240 Implementation Specific [RFC2058]
241-255 Reserved [RFC2058]
RADIUS Attribute Values
-----------------------
Defined in RFC 2865 unless otherwise indicated.
Values for RADIUS Attribute 6, Service-Type:
1 Login
2 Framed
3 Callback Login
4 Callback Framed
5 Outbound
6 Administrative
7 NAS Prompt
8 Authenticate Only
9 Callback NAS Prompt
10 Call Check
11 Callback Administrative
12 Voice [Chiba]
13 Fax [Chiba]
14 Modem Relay [Chiba]
Values for RADIUS Attribute 7, Framed-Protocol:
1 PPP
2 SLIP
3 AppleTalk Remote Access Protocol (ARAP)
4 Gandalf proprietary SingleLink/MultiLink protocol
5 Xylogics proprietary IPX/SLIP
6 X.75 Synchronous
7 GPRS PDP Context [Moore]
Values for RADIUS Attribute 10, Framed-Routing:
0 None
1 Send routing packets
2 Listen for routing packets
3 Send and Listen
Values for RADIUS Attribute 13, Framed-Compression:
0 None
1 VJ TCP/IP header compression
2 IPX header compression
3 Stac-LZS compression
Values for RADIUS Attribute 15, Login-Service:
0 Telnet
1 Rlogin
2 TCP Clear
3 PortMaster (proprietary)
4 LAT
5 X25-PAD
6 X25-T3POS
7 (unassigned)
8 TCP Clear Quiet (suppresses any NAS-generated connect
string)
Values for RADIUS Attribute 29, Termination-Action:
0 Default
1 RADIUS-Request
Values for RADIUS Attribute 40, Acct-Status-Type [RFC 2866]:
1 Start [RFC 2866]
2 Stop [RFC 2866]
3 Interim-Update [RFC 2866]
4-6 (unassigned)
7 Accounting-On [RFC 2866]
8 Accounting-Off [RFC 2866]
9 Tunnel-Start [RFC 2867]
10 Tunnel-Stop [RFC 2867]
11 Tunnel-Reject [RFC 2867]
12 Tunnel-Link-Start [RFC 2867]
13 Tunnel-Link-Stop [RFC 2867]
14 Tunnel-Link-Reject [RFC 2867]
15 Failed [RFC 2866]
Values for RADIUS Attribute 45, Acct-Authentic [RFC 2866]:
1 RADIUS
2 Local
3 Remote
4 Diameter [Calhoun]
Values for RADIUS Attribute 49, Acct-Terminate-Cause [RFC 2866]:
1 User Request
2 Lost Carrier
3 Lost Service
4 Idle Timeout
5 Session Timeout
6 Admin Reset
7 Admin Reboot
8 Port Error
9 NAS Error
10 NAS Request
11 NAS Reboot
12 Port Unneeded
13 Port Preempted
14 Port Suspended
15 Service Unavailable
16 Callback
17 User Error
18 Host Request
19 Supplicant Restart [Congdon]
20 Reauthentication Failure [Congdon]
21 Port Reinit [Congdon]
22 Port Disabled [Congdon]
Values for RADIUS Attribute 61, NAS-Port-Type [RFC 2865]:
0 Async
1 Sync
2 ISDN Sync
3 ISDN Async V.120
4 ISDN Async V.110
5 Virtual
6 PIAFS
7 HDLC Clear Channel
8 X.25
9 X.75
10 G.3 Fax
11 SDSL - Symmetric DSL
12 ADSL-CAP - Asymmetric DSL, Carrierless Amplitude Phase
Modulation
13 ADSL-DMT - Asymmetric DSL, Discrete Multi-Tone
14 IDSL - ISDN Digital Subscriber Line
15 Ethernet
16 xDSL - Digital Subscriber Line of unknown type
17 Cable
18 Wireless - Other
19 Wireless - IEEE 802.11
20 Token-Ring [Congdon]
21 FDDI [Congdon]
Values for RADIUS Attribute 64, Tunnel-Type [RFC 2868]:
1 Point-to-Point Tunneling Protocol (PPTP)
2 Layer Two Forwarding (L2F)
3 Layer Two Tunneling Protocol (L2TP)
4 Ascend Tunnel Management Protocol (ATMP)
5 Virtual Tunneling Protocol (VTP)
6 IP Authentication Header in the Tunnel-mode (AH)
7 IP-in-IP Encapsulation (IP-IP)
8 Minimal IP-in-IP Encapsulation (MIN-IP-IP)
9 IP Encapsulating Security Payload in the Tunnel-mode
(ESP)
10 Generic Route Encapsulation (GRE)
11 Bay Dial Virtual Services (DVS)
12 IP-in-IP Tunneling
13 Virtual LANs (VLAN) [Congdon]
Values for RADIUS Attribute 65, Tunnel-Medium-Type [RFC 2868]:
1 IPv4 (IP version 4)
2 IPv6 (IP version 6)
3 NSAP
4 HDLC (8-bit multidrop)
5 BBN 1822
6 802 (includes all 802 media plus Ethernet "canonical
format")
7 E.163 (POTS)
8 E.164 (SMDS, Frame Relay, ATM)
9 F.69 (Telex)
10 X.121 (X.25, Frame Relay)
11 IPX
12 Appletalk
13 Decnet IV
14 Banyan Vines
15 E.164 with NSAP format subaddress
Values for RADIUS Attribute 72, ARAP-Zone-Access [RFC 2869]:
1 Only allow access to default zone
2 Use zone filter inclusively
3 (not used)
4 Use zone filter exclusively
Values for RADIUS Attribute 76, Prompt [RFC 2869]:
0 No Echo
1 Echo
End of RADIUS Attribute Values.
RADIUS Packet Type Codes
------------------------
Defined in RFC 2865 unless otherwise indicated.
RADIUS Codes (decimal) are assigned as follows:
1 Access-Request
2 Access-Accept
3 Access-Reject
4 Accounting-Request [RFC 2866]
5 Accounting-Response [RFC 2866]
6-10 (unassigned)
11 Access-Challenge
12 Status-Server (experimental)
13 Status-Client (experimental)
255 Reserved
REFERENCES
----------
[RFC2058] Rigney, C., A. Rubens, W. Simpson, and S. Willens, "Remote
Authentication Dial In User Service (RADIUS)", RFC 2058,
Livingston, Merit, Daydreamer, January 1997.
[RFC2059] Rigney, C., "RADIUS Accounting", RFC 2059, Livingston,
November 1996.
[RFC2865] Rigney, W., S. Willens, A. Rubens, and W. Simpson,
"Remote Authentication Dial In User Service (RADIUS)",
RFC 2865, June 2000.
[RFC2866] Rigney, C., "RADIUS Accounting", RFC 2865, June 2000.
[RFC2867] Zorn, G., B. Aboba, D. Mitton, "RADIUS Accounting
Modifications for Tunnel Protocol Support", RFC 2867,
June 2000.
[RFC2868] Zorn, G., D. Leifer, A. Rubens, J. Shriver, M. Holdrege,
I. Goyret, "RADIUS Attributes for Tunnel Protocol Support",
RFC 2868, June 2000.
[RFC2869] Rigney, C., W. Willats, P. Calhoun, "RADIUS Extensions",
RFC 2869, June 2000.
PEOPLE
------
[Calhoun] Pat Calhoun, <pcalhoun@diameter.org>, May 2001.
[Chiba] Murtaza Chiba, <mchiba@cisco.com], June 2001.
[Congdon] Paul Congdon, <PAUL_CONGDON@hp.com>, October 2000.
[Moore] Jeff Moore, <jeff.moore@cisco.com>, February 2001.
[Trifunovic] Nenad Trifunovic, <Nenad.Trifunovic@mci.com>, October 1998.
[]
|
