#
# RADIUS Dictionary — Standard Attributes
#
# Compiled from IETF RFCs. Each section identifies the source RFC.
# Non-protocol / server-internal attributes are not included here.
#
# RFCs covered:
#   RFC 2865  Remote Authentication Dial In User Service (RADIUS)
#   RFC 2866  RADIUS Accounting
#   RFC 2867  RADIUS Accounting Modifications for Tunnel Protocol Support
#   RFC 2868  RADIUS Attributes for Tunnel Protocol Support
#   RFC 2869  RADIUS Extensions
#   RFC 2809  Implementation of L2TP Compulsory Tunneling via RADIUS
#             (informational only — no new attributes defined)
#   RFC 2882  NAS Requirements: Extended RADIUS Practices
#             (informational only — no new attributes defined)
#   RFC 3162  RADIUS and IPv6
#   RFC 3576  Dynamic Authorization Extensions to Remote Access Dial In User Service
#   RFC 3579  RADIUS Support For EAP
#             (attributes EAP-Message and Message-Authenticator defined in RFC 2869)
#   RFC 3580  IEEE 802.1X RADIUS Usage Guidelines
#             (no new attributes; new enumerated values for existing attributes)
#   RFC 4675  RADIUS Attributes for Virtual LAN and Priority Support
#   RFC 4679  DSL Forum Vendor-Specific RADIUS Attributes
#   RFC 4818  RADIUS Delegated-IPv6-Prefix Attribute
#   RFC 4849  RADIUS Filter Rule Attribute
#   RFC 4950  (ICMP Extensions for MPLS — not a RADIUS specification)
#   RFC 5080  Common RADIUS Implementation Issues and Suggested Fixes
#             (clarification document — no new attributes defined)
#   RFC 5997  Use of Status-Server Packets in RADIUS
#             (no new attributes defined)
#   RFC 4372  Chargeable User Identity
#   RFC 6911  RADIUS Attributes for IPv6 Access Networks
#
# Compatibility notes on renamed attributes:
#   RFC 2865 attr 2: canonical name is "User-Password". The old Cistron
#     dictionary used "Password"; the legacy alias is retained.
#   RFC 2865 attr 5: canonical name is "NAS-Port" (integer). The old Cistron
#     dictionary used "NAS-Port-Id"; no alias is possible because "NAS-Port-Id"
#     is the canonical RFC 2869 name for attribute 87 (string).
#   RFC 2869 attr 87: canonical name is "NAS-Port-Id" (string). The legacy
#     alias "NAS-Port-Id-String" is retained.
#


##############################################################################
# RFC 2865 — Remote Authentication Dial In User Service (RADIUS)
##############################################################################

ATTRIBUTE	User-Name			1	string
# BEGIN-COMPAT: legacy alias for attr 2; remove in a future major version
ATTRIBUTE	Password			2	string
# END-COMPAT
ATTRIBUTE	User-Password			2	string
ATTRIBUTE	CHAP-Password			3	string
ATTRIBUTE	NAS-IP-Address			4	ipv4addr
ATTRIBUTE	NAS-Port			5	integer
ATTRIBUTE	Service-Type			6	integer
ATTRIBUTE	Framed-Protocol			7	integer
ATTRIBUTE	Framed-IP-Address		8	ipv4addr
ATTRIBUTE	Framed-IP-Netmask		9	ipv4addr
ATTRIBUTE	Framed-Routing			10	integer
ATTRIBUTE	Filter-Id			11	string
ATTRIBUTE	Framed-MTU			12	integer
ATTRIBUTE	Framed-Compression		13	integer
ATTRIBUTE	Login-IP-Host			14	ipv4addr
ATTRIBUTE	Login-Service			15	integer
ATTRIBUTE	Login-TCP-Port			16	integer
# 17 unassigned
ATTRIBUTE	Reply-Message			18	string
ATTRIBUTE	Callback-Number			19	string
ATTRIBUTE	Callback-Id			20	string
# 21 unassigned
ATTRIBUTE	Framed-Route			22	string
ATTRIBUTE	Framed-IPX-Network		23	integer
ATTRIBUTE	State				24	string
ATTRIBUTE	Class				25	string
ATTRIBUTE	Vendor-Specific			26	string
ATTRIBUTE	Session-Timeout			27	integer
ATTRIBUTE	Idle-Timeout			28	integer
ATTRIBUTE	Termination-Action		29	integer
ATTRIBUTE	Called-Station-Id		30	string
ATTRIBUTE	Calling-Station-Id		31	string
ATTRIBUTE	NAS-Identifier			32	string
ATTRIBUTE	Proxy-State			33	string
ATTRIBUTE	Login-LAT-Service		34	string
ATTRIBUTE	Login-LAT-Node			35	string
ATTRIBUTE	Login-LAT-Group			36	string
ATTRIBUTE	Framed-AppleTalk-Link		37	integer
ATTRIBUTE	Framed-AppleTalk-Network	38	integer
ATTRIBUTE	Framed-AppleTalk-Zone		39	string
# 40–59: RFC 2866/2867/2869/4675
ATTRIBUTE	CHAP-Challenge			60	string
ATTRIBUTE	NAS-Port-Type			61	integer
ATTRIBUTE	Port-Limit			62	integer
ATTRIBUTE	Login-LAT-Port			63	string

##############################################################################
# RFC 2866 — RADIUS Accounting
##############################################################################

ATTRIBUTE	Acct-Status-Type		40	integer
ATTRIBUTE	Acct-Delay-Time			41	integer
ATTRIBUTE	Acct-Input-Octets		42	integer
ATTRIBUTE	Acct-Output-Octets		43	integer
ATTRIBUTE	Acct-Session-Id			44	string
ATTRIBUTE	Acct-Authentic			45	integer
ATTRIBUTE	Acct-Session-Time		46	integer
ATTRIBUTE	Acct-Input-Packets		47	integer
ATTRIBUTE	Acct-Output-Packets		48	integer
ATTRIBUTE	Acct-Terminate-Cause		49	integer
ATTRIBUTE	Acct-Multi-Session-Id		50	string
ATTRIBUTE	Acct-Link-Count			51	integer

##############################################################################
# RFC 2869 — RADIUS Extensions
##############################################################################

ATTRIBUTE	Acct-Input-Gigawords		52	integer
ATTRIBUTE	Acct-Output-Gigawords		53	integer
# 54 unassigned
ATTRIBUTE	Event-Timestamp			55	date
# 56–59: RFC 4675 (VLAN)
ATTRIBUTE	EAP-Message			79	string
ATTRIBUTE	Message-Authenticator		80	string
ATTRIBUTE	ARAP-Password			70	string
ATTRIBUTE	ARAP-Features			71	string
ATTRIBUTE	ARAP-Zone-Access		72	integer
ATTRIBUTE	ARAP-Security			73	integer
ATTRIBUTE	ARAP-Security-Data		74	string
ATTRIBUTE	Password-Retry			75	integer
ATTRIBUTE	Prompt				76	integer
ATTRIBUTE	Connect-Info			77	string
ATTRIBUTE	Configuration-Token		78	string
ATTRIBUTE	ARAP-Challenge-Response		84	string
ATTRIBUTE	Acct-Interim-Interval		85	integer
# 86: RFC 2867
# BEGIN-COMPAT: legacy alias for attr 87; remove in a future major version
ATTRIBUTE	NAS-Port-Id-String		87	string
# END-COMPAT
ATTRIBUTE	NAS-Port-Id			87	string
ATTRIBUTE	Framed-Pool			88	string

##############################################################################
# RFC 4372 — Chargeable User Identity
##############################################################################

ATTRIBUTE	Chargeable-User-Identity	89	string

##############################################################################
# RFC 2867 — RADIUS Accounting Modifications for Tunnel Protocol Support
##############################################################################

ATTRIBUTE	Acct-Tunnel-Connection		68	string
ATTRIBUTE	Acct-Tunnel-Packets-Lost	86	integer

##############################################################################
# RFC 2868 — RADIUS Attributes for Tunnel Protocol Support
##############################################################################

ATTRIBUTE	Tunnel-Type			64	integer
ATTRIBUTE	Tunnel-Medium-Type		65	integer
ATTRIBUTE	Tunnel-Client-Endpoint		66	string
ATTRIBUTE	Tunnel-Server-Endpoint		67	string
ATTRIBUTE	Tunnel-Password			69	string
ATTRIBUTE	Tunnel-Private-Group-ID		81	string
ATTRIBUTE	Tunnel-Assignment-ID		82	string
ATTRIBUTE	Tunnel-Preference		83	integer
ATTRIBUTE	Tunnel-Client-Auth-ID		90	string
ATTRIBUTE	Tunnel-Server-Auth-ID		91	string

##############################################################################
# RFC 4849 — RADIUS Filter Rule Attribute
##############################################################################

ATTRIBUTE	NAS-Filter-Rule			92	string

##############################################################################
# RFC 3162 — RADIUS and IPv6
##############################################################################

ATTRIBUTE	NAS-IPv6-Address		95	ipv6addr
ATTRIBUTE	Framed-Interface-Id		96	string
ATTRIBUTE	Framed-IPv6-Prefix		97	ipv6prefix
ATTRIBUTE	Login-IPv6-Host			98	ipv6addr
ATTRIBUTE	Framed-IPv6-Route		99	string
ATTRIBUTE	Framed-IPv6-Pool		100	string

##############################################################################
# RFC 3576 — Dynamic Authorization Extensions to RADIUS
##############################################################################

ATTRIBUTE	Error-Cause			101	integer

##############################################################################
# RFC 4675 — RADIUS Attributes for Virtual LAN and Priority Support
##############################################################################

ATTRIBUTE	Egress-VLANID			56	string
ATTRIBUTE	Ingress-Filters			57	integer
ATTRIBUTE	Egress-VLAN-Name		58	string
ATTRIBUTE	User-Priority-Table		59	string

##############################################################################
# RFC 4818 — RADIUS Delegated-IPv6-Prefix Attribute
##############################################################################

ATTRIBUTE	Delegated-IPv6-Prefix		123	ipv6prefix

##############################################################################
# RFC 6911 — RADIUS Attributes for IPv6 Access Networks
##############################################################################

ATTRIBUTE	Framed-IPv6-Address		168	ipv6addr
ATTRIBUTE	DNS-Server-IPv6-Address		169	ipv6addr
ATTRIBUTE	Route-IPv6-Information		170	ipv6prefix
ATTRIBUTE	Delegated-IPv6-Prefix-Pool	171	string
ATTRIBUTE	Stateful-IPv6-Address-Pool	172	string


##############################################################################
# Enumerated Values
##############################################################################

#
# RFC 2865 — Service-Type
#
VALUE	Service-Type		Login-User		1
VALUE	Service-Type		Framed-User		2
VALUE	Service-Type		Callback-Login-User	3
VALUE	Service-Type		Callback-Framed-User	4
VALUE	Service-Type		Outbound-User		5
VALUE	Service-Type		Administrative-User	6
VALUE	Service-Type		NAS-Prompt-User		7
VALUE	Service-Type		Authenticate-Only	8
VALUE	Service-Type		Callback-NAS-Prompt	9
VALUE	Service-Type		Call-Check		10
VALUE	Service-Type		Callback-Administrative	11
#   RFC 5997
VALUE	Service-Type		Voice			12
VALUE	Service-Type		Fax			13
VALUE	Service-Type		Modem-Relay		14
#   RFC 3576 / IANA
VALUE	Service-Type		Authorize-Only		17

#
# RFC 2865 — Framed-Protocol
#
VALUE	Framed-Protocol		PPP			1
VALUE	Framed-Protocol		SLIP			2
VALUE	Framed-Protocol		ARAP			3
VALUE	Framed-Protocol		GANDALF-SLMLP		4
VALUE	Framed-Protocol		XYLOGICS-IPX-SLIP	5
VALUE	Framed-Protocol		X.75-Synchronous	6

#
# RFC 2865 — Framed-Routing
#
VALUE	Framed-Routing		None			0
VALUE	Framed-Routing		Broadcast		1
VALUE	Framed-Routing		Listen			2
VALUE	Framed-Routing		Broadcast-Listen	3

#
# RFC 2865 — Framed-Compression
#
VALUE	Framed-Compression	None			0
VALUE	Framed-Compression	Van-Jacobson-TCP-IP	1
VALUE	Framed-Compression	IPX-Header		2
VALUE	Framed-Compression	Stac-LZS		3

#
# RFC 2865 — Login-Service
#
VALUE	Login-Service		Telnet			0
VALUE	Login-Service		Rlogin			1
VALUE	Login-Service		TCP-Clear		2
VALUE	Login-Service		PortMaster		3
VALUE	Login-Service		LAT			4
VALUE	Login-Service		X.25-PAD		5
VALUE	Login-Service		X.25-T3POS		6
VALUE	Login-Service		TCP-Clear-Quiet		8

#
# RFC 2865 — Termination-Action
#
VALUE	Termination-Action	Default			0
VALUE	Termination-Action	RADIUS-Request		1

#
# RFC 2865 — NAS-Port-Type (extended by RFC 2869 IANA assignments and RFC 3580)
#
VALUE	NAS-Port-Type		Async			0
VALUE	NAS-Port-Type		Sync			1
VALUE	NAS-Port-Type		ISDN			2
VALUE	NAS-Port-Type		ISDN-V.120		3
VALUE	NAS-Port-Type		ISDN-V.110		4
VALUE	NAS-Port-Type		Virtual			5
VALUE	NAS-Port-Type		PIAFS			6
VALUE	NAS-Port-Type		HDLC-Clear-Channel	7
VALUE	NAS-Port-Type		X.25			8
VALUE	NAS-Port-Type		X.75			9
VALUE	NAS-Port-Type		G.3-Fax			10
VALUE	NAS-Port-Type		SDSL			11
VALUE	NAS-Port-Type		ADSL-CAP		12
VALUE	NAS-Port-Type		ADSL-DMT		13
VALUE	NAS-Port-Type		IDSL			14
VALUE	NAS-Port-Type		Ethernet		15
VALUE	NAS-Port-Type		xDSL			16
VALUE	NAS-Port-Type		Cable			17
VALUE	NAS-Port-Type		Wireless-Other		18
VALUE	NAS-Port-Type		Wireless-IEEE-802.11	19
#   RFC 3580
VALUE	NAS-Port-Type		Token-Ring		20
VALUE	NAS-Port-Type		FDDI			21

#
# RFC 2866 — Acct-Status-Type (extended by RFC 2867)
#
VALUE	Acct-Status-Type	Start			1
VALUE	Acct-Status-Type	Stop			2
VALUE	Acct-Status-Type	Interim-Update		3
VALUE	Acct-Status-Type	Accounting-On		7
VALUE	Acct-Status-Type	Accounting-Off		8
#   RFC 2867
VALUE	Acct-Status-Type	Tunnel-Start		9
VALUE	Acct-Status-Type	Tunnel-Stop		10
VALUE	Acct-Status-Type	Tunnel-Reject		11
VALUE	Acct-Status-Type	Tunnel-Link-Start	12
VALUE	Acct-Status-Type	Tunnel-Link-Stop	13
VALUE	Acct-Status-Type	Tunnel-Link-Reject	14
#   RFC 2866 (Failed, added later by IANA)
VALUE	Acct-Status-Type	Failed			15

#
# RFC 2866 — Acct-Authentic
#
VALUE	Acct-Authentic		RADIUS			1
VALUE	Acct-Authentic		Local			2
VALUE	Acct-Authentic		Remote			3

#
# RFC 2866 — Acct-Terminate-Cause (extended by RFC 3580)
#
VALUE	Acct-Terminate-Cause	User-Request		1
VALUE	Acct-Terminate-Cause	Lost-Carrier		2
VALUE	Acct-Terminate-Cause	Lost-Service		3
VALUE	Acct-Terminate-Cause	Idle-Timeout		4
VALUE	Acct-Terminate-Cause	Session-Timeout		5
VALUE	Acct-Terminate-Cause	Admin-Reset		6
VALUE	Acct-Terminate-Cause	Admin-Reboot		7
VALUE	Acct-Terminate-Cause	Port-Error		8
VALUE	Acct-Terminate-Cause	NAS-Error		9
VALUE	Acct-Terminate-Cause	NAS-Request		10
VALUE	Acct-Terminate-Cause	NAS-Reboot		11
VALUE	Acct-Terminate-Cause	Port-Unneeded		12
VALUE	Acct-Terminate-Cause	Port-Preempted		13
VALUE	Acct-Terminate-Cause	Port-Suspended		14
VALUE	Acct-Terminate-Cause	Service-Unavailable	15
VALUE	Acct-Terminate-Cause	Callback		16
VALUE	Acct-Terminate-Cause	User-Error		17
VALUE	Acct-Terminate-Cause	Host-Request		18
#   RFC 3580
VALUE	Acct-Terminate-Cause	Supplicant-Restart		19
VALUE	Acct-Terminate-Cause	Reauthentication-Failure	20
VALUE	Acct-Terminate-Cause	Port-Reinit			21
VALUE	Acct-Terminate-Cause	Port-Admin-Disabled		22

#
# RFC 2869 — Prompt
#
VALUE	Prompt			No-Echo			0
VALUE	Prompt			Echo			1

#
# RFC 2869 — ARAP-Zone-Access
#
VALUE	ARAP-Zone-Access	Default-Zone		1
VALUE	ARAP-Zone-Access	Zone-Filter-Inclusive	2
VALUE	ARAP-Zone-Access	Zone-Filter-Exclusive	4

#
# RFC 2868 — Tunnel-Type (extended by RFC 3580)
#
VALUE	Tunnel-Type		PPTP			1
VALUE	Tunnel-Type		L2F			2
VALUE	Tunnel-Type		L2TP			3
VALUE	Tunnel-Type		ATMP			4
VALUE	Tunnel-Type		VTP			5
VALUE	Tunnel-Type		AH			6
VALUE	Tunnel-Type		IP-IP			7
VALUE	Tunnel-Type		MIN-IP-IP		8
VALUE	Tunnel-Type		ESP			9
VALUE	Tunnel-Type		GRE			10
VALUE	Tunnel-Type		DVS			11
VALUE	Tunnel-Type		IP-in-IP		12
#   RFC 3580
VALUE	Tunnel-Type		VLAN			13

#
# RFC 2868 — Tunnel-Medium-Type
#
VALUE	Tunnel-Medium-Type	IPv4			1
VALUE	Tunnel-Medium-Type	IPv6			2
VALUE	Tunnel-Medium-Type	NSAP			3
VALUE	Tunnel-Medium-Type	HDLC			4
VALUE	Tunnel-Medium-Type	BBN-1822		5
VALUE	Tunnel-Medium-Type	802			6
VALUE	Tunnel-Medium-Type	E.163			7
VALUE	Tunnel-Medium-Type	E.164			8
VALUE	Tunnel-Medium-Type	F.69			9
VALUE	Tunnel-Medium-Type	X.121			10
VALUE	Tunnel-Medium-Type	IPX			11
VALUE	Tunnel-Medium-Type	Appletalk		12
VALUE	Tunnel-Medium-Type	Decnet-IV		13
VALUE	Tunnel-Medium-Type	Banyan-Vines		14
VALUE	Tunnel-Medium-Type	E.164-NSAP		15

#
# RFC 3576 — Error-Cause
#
VALUE	Error-Cause	Residual-Session-Context-Removed	201
VALUE	Error-Cause	Invalid-EAP-Packet			202
VALUE	Error-Cause	Unsupported-Attribute			401
VALUE	Error-Cause	Missing-Attribute			402
VALUE	Error-Cause	NAS-Identification-Mismatch		403
VALUE	Error-Cause	Invalid-Request				404
VALUE	Error-Cause	Unsupported-Service			405
VALUE	Error-Cause	Unsupported-Extension			406
VALUE	Error-Cause	Administratively-Prohibited		501
VALUE	Error-Cause	Request-Not-Routable			502
VALUE	Error-Cause	Session-Context-Not-Found		503
VALUE	Error-Cause	Session-Context-Not-Removable		504
VALUE	Error-Cause	Other-Proxy-Processing-Error		505
VALUE	Error-Cause	Resources-Unavailable			506
VALUE	Error-Cause	Request-Initiated			507

#
# RFC 4675 — Ingress-Filters
#
VALUE	Ingress-Filters		Enabled			1
VALUE	Ingress-Filters		Disabled		2


##############################################################################
# RFC 4679 — DSL Forum Vendor-Specific RADIUS Attributes
# Vendor: Broadband Forum (formerly DSL Forum), IANA Enterprise Number 3561
##############################################################################

VENDOR	DSL-Forum	3561

BEGIN-VENDOR	DSL-Forum

ATTRIBUTE	Agent-Circuit-Id			1	string
ATTRIBUTE	Agent-Remote-Id				2	string
ATTRIBUTE	Actual-Data-Rate-Upstream		129	integer
ATTRIBUTE	Actual-Data-Rate-Downstream		130	integer
ATTRIBUTE	Minimum-Data-Rate-Upstream		131	integer
ATTRIBUTE	Minimum-Data-Rate-Downstream		132	integer
ATTRIBUTE	Attainable-Data-Rate-Upstream		133	integer
ATTRIBUTE	Attainable-Data-Rate-Downstream		134	integer
ATTRIBUTE	Maximum-Data-Rate-Upstream		135	integer
ATTRIBUTE	Maximum-Data-Rate-Downstream		136	integer
ATTRIBUTE	Minimum-Data-Rate-Upstream-Low-Power	137	integer
ATTRIBUTE	Minimum-Data-Rate-Downstream-Low-Power	138	integer
ATTRIBUTE	Maximum-Interleaving-Delay-Upstream	139	integer
ATTRIBUTE	Actual-Interleaving-Delay-Upstream	140	integer
ATTRIBUTE	Maximum-Interleaving-Delay-Downstream	141	integer
ATTRIBUTE	Actual-Interleaving-Delay-Downstream	142	integer
ATTRIBUTE	Access-Loop-Encapsulation		144	string
ATTRIBUTE	IWF-Session				254	string

END-VENDOR	DSL-Forum
