[PATCH] Updating dictionary.erx based on Juniper documentation
Also adding a note about JUNOS (M/MX) usage of this dictionary. Signed-off-by: Bjørn Mork <bjorn@mork.no> --- share/dictionary.erx | 23 +++++++++++++++++++++++ 1 files changed, 23 insertions(+), 0 deletions(-) diff --git a/share/dictionary.erx b/share/dictionary.erx index a7c84de..93584d2 100644 --- a/share/dictionary.erx +++ b/share/dictionary.erx @@ -7,6 +7,15 @@ # # Version: $Id$ # + +# This dictionary applies to access services on Juniper JUNOS (M/MX) +# based platforms as well as JUNOSe, although some of the attributes +# have been given new names on JUNOS: +# http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aaa... +# +# In this file, we keep the ERX prefix and the JUNOSe attribute names +# for backwards compatibility +# # Juniper ERX dictionaries are available at: # http://www.juniper.net/techpubs/software/erx/junose71/unisphere7-1.dct # http://www.juniper.net/techpubs/software/erx/junose700/unisphere7-0.dct @@ -156,6 +165,10 @@ ATTRIBUTE ERX-IGMP-No-Tracking-V2-Grps 103 integer ATTRIBUTE ERX-MLD-Explicit-Tracking 104 integer ATTRIBUTE ERX-MLD-No-Tracking-V1-Grps 105 integer +ATTRIBUTE ERX-IPv6-Ingress-Policy-Name 106 string +ATTRIBUTE ERX-IPv6-Egress-Policy-Name 107 string +ATTRIBUTE ERX-CoS-Shaping-Pmt-Type 108 string + ATTRIBUTE ERX-Acc-Loop-Cir-Id 110 string ATTRIBUTE ERX-Acc-Aggr-Cir-Id-Bin 111 octets ATTRIBUTE ERX-Acc-Aggr-Cir-Id-Asc 112 string @@ -187,6 +200,16 @@ ATTRIBUTE ERX-Max-Clients-Per-Interface 143 integer ATTRIBUTE ERX-PPP-Monitor-Ingress-Only 144 integer +ATTRIBUTE ERX-CoS-Scheduler-Pmt-Type 146 string + +ATTRIBUTE ERX-IPv6-Acct-Input-Octets 151 integer +ATTRIBUTE ERX-IPv6-Acct-Output-Octets 152 integer +ATTRIBUTE ERX-IPv6-Acct-Input-Packets 153 integer +ATTRIBUTE ERX-IPv6-Acct-Output-Packets 154 integer +ATTRIBUTE ERX-IPv6-Acct-Input-Gigawords 155 integer +ATTRIBUTE ERX-IPv6-Acct-Output-Gigawords 156 integer +ATTRIBUTE ERX-IPv6-NdRa-Pool-Name 157 string + # # Values Attribute Name Number -- 1.7.1
Bjørn Mork <bjorn@mork.no> writes:
Also adding a note about JUNOS (M/MX) usage of this dictionary.
I'm wondering if this is the best way to deal with this. Comments are appreciated. Some background: Juniper currently have two (well, they have more but we can simplify it to two for this discussion) platforms using RADIUS: JUNOS (T/M/MX routers) JUNOSe ("E-series", aka ERX, previously Unisphere ERX) Both have their own set of vendor specific attributes, using two different vendorid's. In FreeRADIUS, these VSAs are defined in dictionary.juniper (vendor=2636) and dictionary.erx (vendor=4874). Until recently, JUNOS has been used for "core" routers and JUNOSe has been used for "access" routers (i.e. the traditional NAS role). But now Juniper are adding more and more access services to JUNOS. For this they have added a separate "access" RADIUS service, using the ERX VSAs. So you now have JUNOS routers using both 2636 VSAs and 4874 VSAs. They have also added a few new JUNOS specific (AFAIK) VSAs to the 4874 dictionary, and some of the existing attributes have got new names in JUNOS (although their meaning are identical/similar to the meaning in JUNOSe). The JUNOS usage of 4874 VSAs is documented on http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aaa... Well, for backwards compatibility I guess there is no question about the existing attributes. They should keep their "ERX-" name. But for consistency, I have suggested using the "ERX-" prefix for the new attributes as well. That's what's least confusing to my mind. But YMMV. So run discussion. I assume we are not the only ISP looking to replace our ERXes with MXes over the next few years. So keeping this dictionary compatible with both platforms is essential. Separate dictionaries will not work, as we need to configure accounts working on both JUNOS and JUNOSe. Bjørn
participants (2)
-
Alan DeKok -
Bjørn Mork