- Preface
- Chapter 1 Overview
- Chapter 2 Using the aregcmd Commands
- Chapter 3 Using the Graphical User Interface
- Chapter 4 Cisco Prime Access Registrar Server Objects
- Chapter 5 Using the radclient Command
- Chapter 6 Configuring Local Authentication and Authorization
- Chapter 7 RADIUS Accounting
- Chapter 8 Diameter
- Chapter 9 Extensible Authentication Protocols
- Chapter 10 Using WiMAX in Cisco Prime Access Registrar
- Chapter 11 Using Extension Points
- Chapter 12 Using Replication
- Chapter 13 Using On-Demand Address Pools
- Chapter 14 Using Identity Caching
- Chapter 15 Using Trusted ID Authorization with SESM
- Chapter 16 Using Prepaid Billing
- Chapter 17 Using Cisco Prime Access Registrar Server Features
- Chapter 18 Directing RADIUS Requests
- Chapter 19 Wireless Support
- Chapter 20 Using LDAP
- Chapter 21 Using Open Database Connectivity
- Chapter 22 SIGTRAN-M3UA
- Chapter 23 Using SNMP
- Chapter 24 Enforcement of Licensing Models
- Chapter 25 Backing Up the Database
- Chapter 26 Using the REX Accounting Script
- Chapter 27 Logging Syslog Messages
- Chapter 28 Troubleshooting Cisco Prime Access Registrar
- Appendix A: Cisco Prime Access Registrar Tcl, REX and Java Dictionaries
- Appendix B: Environment Dictionary
- Appendix C: RADIUS Attributes
- Glossary
- Index
RADIUS Attributes
This appendix lists the attributes Cisco Prime Access Registrar (Cisco Prime AR) supports with their names and values. RADIUS attributes carry the specific authentication, authorization information, and configuration details for requests and replies. For more detailed information about specific attributes, see the appropriate RFC as listed Table C-1.
This appendix has two sections:
RADIUS Attributes—This section provides an alphabetic list of all RADIUS attributes Cisco Prime AR supports and a list of all RADIUS attributes in numeric order.
Vendor-Specific Attributes—This section provides lists of RADIUS vendor-specific attributes (VSAs).
RADIUS Attributes
This section lists the RADIUS attributes supported in Cisco Prime AR. RADIUS attributes carry specific authentication, authorization, information, and configuration details in the Access-Request and the RADIUS server response.
Cisco Prime Access Registrar Attributes
This section provides an alphabetical list of all attributes used in Cisco Prime AR and the attribute number.
RADIUS Attributes Numeric List
Table C-3 lists all RFC-defined RADIUS attributes in numeric order.
|
|
---|---|
1 |
User-Name |
2 |
User-Password |
3 |
CHAP-Password |
4 |
NAS-IP-Address |
5 |
NAS-Port |
6 |
Service-Type |
7 |
Framed-Protocol |
8 |
Framed-IP-Address |
9 |
Framed-IP-Netmask |
10 |
Framed-Routing |
11 |
Filter-Id |
12 |
Framed-MTU |
13 |
Framed-Compression |
14 |
Login-IP-Host |
15 |
Login-Service |
16 |
Login-TCP-Port |
17 |
Change-Password |
18 |
Reply-Message |
19 |
Callback-Number |
20 |
Callback-Id |
21 |
Password-Expiration |
22 |
Framed-Route |
12 |
Framed-IPX-Network |
24 |
State |
25 |
Class |
26 |
Vendor-Specific Attributes (VSAs) See Vendor-Specific Attributes or the specific vendor's VSA list: • • |
27 |
Session-Timeout |
28 |
Idle-Timeout |
29 |
Termination-Action |
30 |
Called-Station-ID (DNIS) |
31 |
Calling-Station-ID (CLID) |
32 |
NAS-Identifier |
33 |
Proxy-State |
34 |
Login-LAT-Service |
35 |
Login-LAT-Node |
36 |
Login-LAT-Group |
37 |
Framed-AppleTalk-Link |
38 |
Framed-AppleTalk-Network |
39 |
Framed-AppleTalk-Zone |
40 |
Acct-Status-Type |
41 |
Acct-Delay-Time |
42 |
Acct-Input-Octets |
43 |
Acct-Output-Octets |
44 |
Acct-Session-Id |
45 |
Acct-Authentic |
46 |
Acct-Session-Time |
47 |
Acct-Input-packets |
48 |
Acct-Output-packets |
49 |
Acct-Terminate-Cause |
50 |
Acct-Multi-Session-Id |
51 |
Acct-Link-Count |
52 |
Acct-Input-Gigawords |
53 |
Acct-Output-Gigawords |
54 |
unassigned |
55 |
Event-Timestamp |
56 |
unassigned |
57 |
unassigned |
58 |
unassigned |
59 |
unassigned |
60 |
CHAP-Challenge |
61 |
NAS-Port-Type |
62 |
Port-Limit |
63 |
Login-LAT-PortNo |
64 |
Tunnel-Type |
65 |
Tunnel-Medium-Type |
66 |
Tunnel-Client-Endpoint |
67 |
Tunnel-Server-Endpoint |
68 |
Acct-Tunnel-Connection |
68 |
Tunnel-ID |
69 |
Tunnel-Password |
70 |
ARAP-Password |
71 |
ARAP-Features |
72 |
ARAP-Zone-Access |
73 |
ARAP-Security |
74 |
ARAP-Security-Data |
75 |
Password-Retry |
76 |
Prompt |
77 |
Connect-Info |
78 |
Configuration-Token |
79 |
EAP-Message |
80 |
Message-Authenticator |
81 |
Tunnel-Private-Group-ID |
81 |
Ascend-Auth-Type |
82 |
Tunnel-Assignment-ID |
83 |
Tunnel-Preference |
84 |
ARAP-Challenge-Response |
85 |
Acct-Interim-Interval |
85 |
Ascend-IP-Pool-Chaining |
86 |
Acct-Tunnel-Packets-Lost |
87 |
NAS-Port-ID |
88 |
Framed-Pool |
88 |
Ascend-IP-TOS |
89 |
Ascend-IP-TOS-Precedence |
90 |
Tunnel-Client-Auth-ID |
90 |
Ascend-IP-TOS-Apply-To |
91 |
Tunnel-Server-Auth-ID |
91 |
Ascend-Filter |
92 |
Ascend-Dsl-Rate-Type |
93 |
Ascend-Redirect-Number |
94 |
Originating-Line-Info |
95 |
Ascend-ATM-Vci |
96 |
Ascend-Source-IP-Check |
97 |
Ascend-Dsl-Rate-Mode |
98 |
Ascend-Dsl-Upstream-Limit |
99 |
Ascend-Dsl-Downstream-Limit |
100 |
Ascend-Dsl-CIR-Recv-Limit |
101 |
Error-Cause |
102 |
EAP-Key-Name |
103 |
Ascend-Source-Auth |
104 |
Ascend-Private-Route |
105 |
unassigned |
106 |
Ascend-FR-Link-Status-DLCI |
107 |
unassigned |
108 |
Ascend-Callback-Delay |
109 |
unassigned |
110 |
unassigned |
111 |
Ascend-Multicast-GLeave-Delay |
112 |
Ascend-CBCP-Enable |
113 |
Ascend-CBCP-Mode |
114 |
unassigned |
115 |
Ascend-CBCP-Trunk-Group |
116 |
Ascend-Appletalk-Route |
117 |
Ascend-Appletalk-Peer-Mode |
118 |
Ascend-Route-Appletalk |
119 |
unassigned |
120 |
Ascend-Modem-PortNo |
121 |
Ascend-Modem-SlotNo |
122 |
unassigned |
112 |
unassigned |
124 |
unassigned |
125 |
Ascend-Maximum-Call-Duration |
126 |
Ascend-Preference |
127 |
Tunneling-Protocol |
128 |
Ascend-Shared-Profile-Enable |
129 |
Ascend-Primary-Home-Agent |
130 |
Ascend-Secondary-Home-Agent |
131 |
Ascend-Dialout-Allowed |
132 |
Ascend-Client-Gateway |
133 |
Ascend-BACP-Enable |
134 |
Ascend-DHCP-Maximum-Leases |
135 |
Ascend-Client-Primary-DNS |
136 |
Ascend-Client-Secondary-DNS |
137 |
Ascend-Client-Assign-DNS |
138 |
Ascend-User-Acct-Type |
139 |
Ascend-User-Acct-Host |
140 |
Ascend-User-Acct-Port |
141 |
Ascend-User-Acct-Key |
142 |
Ascend-User-Acct-Base |
143 |
Ascend-User-Acct-Time |
144 |
Ascend-Assign-IP-Client |
145 |
Ascend-Assign-IP-Server |
146 |
Ascend-Assign-IP-Global-Pool |
147 |
Ascend-DHCP-Reply |
148 |
Ascend-DHCP-Pool-Number |
149 |
Ascend-Expect-Callback |
150 |
Ascend-Event-Type |
151 |
Ascend-Session-Svr-Key |
152 |
Ascend-Multicast-Rate-Limit |
153 |
Ascend-IF-Netmask |
154 |
Ascend-Remote-Addr |
155 |
Ascend-Multicast-Client |
156 |
Ascend-FR-Circuit-Name |
157 |
Ascend-FR-LinkUp |
158 |
Ascend-FR-Nailed-Grp |
159 |
Ascend-FR-Type |
160 |
Ascend-FR-Link-Mgt |
161 |
Ascend-FR-N391 |
162 |
Ascend-FR-DCE-N392 |
163 |
Ascend-FR-DTE-N392 |
164 |
Ascend-FR-DCE-N393 |
165 |
Ascend-FR-DTE-N393 |
166 |
Ascend-FR-T391 |
167 |
Ascend-FR-T392 |
168 |
Ascend-Bridge-Address |
169 |
Ascend-TS-Idle-Limit |
170 |
Ascend-TS-Idle-Mode |
171 |
Ascend-DBA-Monitor |
172 |
Ascend-Base-Channel-Count |
173 |
Ascend-Minimum-Channels |
174 |
Ascend-IPX-Route |
175 |
Ascend-FT1-Caller |
176 |
Ascend-backup |
177 |
Ascend-Call-Type |
178 |
Ascend-Group |
179 |
Ascend-FR-DLCI |
180 |
Ascend-FR-Profile-Name |
181 |
Ascend-Ara-PW |
182 |
Ascend-IPX-Node-Addr |
183 |
Ascend-Home-Agent-IP-Addr |
184 |
Ascend-Home-Agent-Password |
185 |
Ascend-Home-Network-Name |
186 |
Ascend-Home-Agent-UDP-Port |
187 |
Ascend-Multilink-ID supported |
188 |
Ascend-Num-In-Multilink |
189 |
Ascend-First-Dest (Not supported) |
190 |
Ascend-Pre-Input-Octets |
191 |
Ascend-Pre-Output-Octets |
192 |
Ascend-Pre-Input-packets |
193 |
Ascend-Pre-Output-packets |
194 |
Ascend-Maximum-Time |
195 |
Ascend-Disconnect-Cause |
196 |
Ascend-Connect-Progress |
197 |
Ascend-Data-Rate |
198 |
Ascend-PreSession-Time |
199 |
Ascend-Token-Idle |
200 |
Ascend-Token-Immediate |
201 |
Ascend-Require-Auth |
202 |
Ascend-Number-Sessions |
203 |
Ascend-Authen-Alias |
204 |
Ascend-Token-Expiry |
205 |
Ascend-Menu-Selector |
206 |
Digest-Response |
207 |
Digest-Attributes |
208 |
Ascend-PW-Lifetime |
209 |
Ascend-IP-Direct |
210 |
Ascend-PPP-VJ-Slot-Comp |
211 |
Ascend-PPP-VJ-1172 |
212 |
Ascend-PPP-Async-Map |
213 |
Ascend-Third-Prompt |
214 |
Ascend-Send-Secret |
215 |
Ascend-Receive-Secret |
216 |
Ascend-IPX-Peer-Mode |
217 |
Ascend-IP-Pool-Definition |
218 |
Ascend-Assign-IP-Pool |
219 |
Ascend-FR-Direct |
220 |
Ascend-FR-Direct-Profile |
221 |
Ascend-FR-Direct-DLCI |
222 |
Ascend-Handle-IPX |
212 |
Ascend-Netware-timeout |
224 |
Ascend-IPX-Alias |
225 |
Ascend-Metric |
226 |
Ascend-PRI-Number-Type |
227 |
Ascend-Dial-Number |
228 |
Ascend-Route-IP |
229 |
Ascend-Route-IPX |
120 |
Ascend-Bridge |
121 |
Ascend-Send-Auth |
122 |
Ascend-Send-Passwd |
123 |
Ascend-Link-Compression |
124 |
Ascend-Target-Util |
125 |
Ascend-Maximum-Channels |
126 |
Ascend-Inc-Channel-Count |
127 |
Ascend-Dec-Channel-Count |
128 |
Ascend-Seconds-Of-History |
129 |
Ascend-History-Weigh-Type |
240 |
Ascend-Add-Seconds |
241 |
Ascend-Remove-Seconds |
242 |
Ascend-Data-Filter |
243 |
Ascend-Call-Filter |
244 |
Ascend-Idle-Limit |
245 |
Ascend-Preempt-Limit |
246 |
Ascend-Callback |
247 |
Ascend-Data-Svc |
248 |
Ascend-Force-56 |
249 |
Ascend-Billing-Number |
250 |
Ascend-Call-By-Call |
251 |
Ascend-Transit-Number |
252 |
Ascend-Host-Info |
253 |
Ascend-PPP-Address |
254 |
Ascend-MPP-Idle-Percent |
255 |
Ascend-Xmit-Rate |
256 |
HNB Parameters |
257 |
Macro-Coverage-Information |
258 |
Geographical Location |
259 |
HNB Internet Information |
260 |
Reject Cause |
270 |
White-List |
Vendor-Specific Attributes
This section lists all vendor-specific attributes (VSAs) supported by Cisco Prime AR.
3GPP VSAs
Table C-4 lists the 3GPP VSAs. The vendor ID for 3GPP VSAs is 10415.
3GPP2 VSAs
Table C-5 lists the 3GPP2 VSAs. The vendor ID for 3GPP2 VSAs is 5535 with 8-bit VendorTypeSize.
ACC VSAs
Table C-6 lists the ACC VSAs. The vendor ID for ACC VSAs is 5.
Altiga VSAs
Table C-7 lists the Altiga VSAs. The vendor ID for Altiga VSAs is 3076.
Ascend VSAs
Table C-8 lists the Ascend VSAs. The vendor ID for Ascend VSAs is 529.
Bay Networks VSAs
Table C-9 Lists the Bay Networks VSAs. The vendor ID for Bay Networks VSAs is 1584.
Cabletron VSAs
Table C-10 lists the Cabletron VSAs. The vendor ID for Cabletron VSAs is 52.
Cisco Prime Access Registrar Internal VSAs
Table C-11 lists the Cisco Prime AR Internal VSAs. The vendor ID for Cisco Prime AR internal VSAs is 1760.
Cisco VSAs
Table C-12 lists the Cisco VSAs. The vendor ID for Cisco VSAs is 9.
Compatible VSAs
Table C-13 lists the Compatible VSAs. The vendor ID for Compatible VSAs is 255.
Microsoft VSAs
Table C-14 lists the Microsoft VSAs. The vendor ID for Microsoft VSAs is 311.
Nomadix VSAs
Table C-15 lists the Nomadix VSAs. The vendor ID for Nomadix VSAs is 3309.
|
|
|
|
---|---|---|---|
1 |
Nomadix-Bw-Up 0 253 |
UINT32 |
0-253 |
2 |
Nomadix-Dw-Down |
UINT32 |
0-253 |
RedBack VSAs
Table C-16 lists the RedBack VSAs. The vendor ID for RedBack VSAs is 1252.
RedCreek VSAs
Table C-17 lists the RedCreek VSAs. The vendor ID for RedCreek VSAs is 1958.
TACACS+ VSAs
Table C-18 lists the TACACS+ VSAs. The vendor ID for TACACS+ VSAs is 268435456.
Telebit VSAs
Table C-19 lists the Telebit VSAs. The vendor ID for Telebit VSAs is 117.
Unisphere VSAs
Table C-20 lists the Unisphere VSAs. The vendor ID for RedBack VSAs is 4874.
USR VSAs
Table C-21 lists the USR VSAs. The vendor ID for USR VSAs is 429.
WiMax
Table C-22 lists the WiMax VSAs. The vendor ID for WiMax VSAs is 24757.
WISPr
Table C-23 lists the WISPr VSAs. The vendor ID for WISPr VSAs is 14122.
XML
Table C-24 lists the XML VSAs, attributes for XML tags. The vendor ID for XML VSAs is 5842.