Changes in master mean that we can now represent them in the Cisco vendor dictionary, and convert all Cisco-AVPair attributes to internal, correctly typed ones. This makes proper comparisons, and access much easier. So if anyone has a complete or semi-complete list of all the Cisco-AVPair attributes please send them over so the Cisco dictionary can be updated. Next step is to modify foreach to work correctly, providing references to actual attributes, instead of stringifying them. This will allow automatic re-encoding of attributes for proxying and replies. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 11 January 2015 at 01:32 Arran Cudbard-Bell [a.cudbardb@freeradius.org] wrote:
So if anyone has a complete or semi-complete list of all the Cisco-AVPair attributes please send them over so the Cisco dictionary can be updated.
The ones I'm aware of - though don't necessarily know their meaning are: Cisco-AVPair = "connect-progress=some_state" Cisco-AVPair = "disc-cause-ext=some_cause" Cisco-AVPair = parent-session-id=0D70DD7 Cisco-AVPair = "portbundle=some_state" Cisco-AVPair = "accounting-list=some_list" Cisco-AVPair = "ip:l4redirect=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = "ip:inacl2002=some_rule" Cisco-AVPair = "ip:inacl2005=some_rule" Cisco-AVPair = "ip:outacl2002=some_rule" Cisco-AVPair = "ip:outacl2005=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = postpay-config=default Cisco-AVPair = prepaid-config=default I've changed values to be some_xyz incase they reveal sensitive detail about our implementation. I think all you were after was the attribute names, but if you need to know the format of the possible values I'll see if I can go through them again and sanitise them less bluntly Paul
On 13-01-15 15:04, paul.moser@bt.com wrote:
On 11 January 2015 at 01:32 Arran Cudbard-Bell [a.cudbardb@freeradius.org] wrote:
So if anyone has a complete or semi-complete list of all the Cisco-AVPair attributes please send them over so the Cisco dictionary can be updated.
The ones I'm aware of - though don't necessarily know their meaning are:
Cisco-AVPair = "connect-progress=some_state" Cisco-AVPair = "disc-cause-ext=some_cause" Cisco-AVPair = parent-session-id=0D70DD7 Cisco-AVPair = "portbundle=some_state" Cisco-AVPair = "accounting-list=some_list" Cisco-AVPair = "ip:l4redirect=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = "ip:inacl2002=some_rule" Cisco-AVPair = "ip:inacl2005=some_rule" Cisco-AVPair = "ip:outacl2002=some_rule" Cisco-AVPair = "ip:outacl2005=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = postpay-config=default Cisco-AVPair = prepaid-config=default
In addition, we've seen the following: Cisco-AVPair = "ssid=some_ssid" -- Herwin Weststrate
On 13 January 2015 at 14:22, Herwin Weststrate <herwin@quarantainenet.nl> wrote:
On 13-01-15 15:04, paul.moser@bt.com wrote:
On 11 January 2015 at 01:32 Arran Cudbard-Bell [a.cudbardb@freeradius.org] wrote:
So if anyone has a complete or semi-complete list of all the Cisco-AVPair attributes please send them over so the Cisco dictionary can be updated.
The ones I'm aware of - though don't necessarily know their meaning are:
Cisco-AVPair = "connect-progress=some_state" Cisco-AVPair = "disc-cause-ext=some_cause" Cisco-AVPair = parent-session-id=0D70DD7 Cisco-AVPair = "portbundle=some_state" Cisco-AVPair = "accounting-list=some_list" Cisco-AVPair = "ip:l4redirect=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = "ip:inacl2002=some_rule" Cisco-AVPair = "ip:inacl2005=some_rule" Cisco-AVPair = "ip:outacl2002=some_rule" Cisco-AVPair = "ip:outacl2005=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = postpay-config=default Cisco-AVPair = prepaid-config=default
In addition, we've seen the following:
Cisco-AVPair = "ssid=some_ssid"
-- Herwin Weststrate
http://null.53bits.co.uk/index.php?page=avpairs Cheers, James.
Attribute Name and Value Function Example Used in** ip:portbundle=enable Enable PBHK feature ip:portbundle=enable Acc-Acc CoA Req ip:l4redirect=redirect to {group server-group-name | ip ip-address [port port-number]} [duration seconds] [frequency seconds] Enables L4 redirection. ip:l4redirect=redirect to group L4-REDIRECT ip:l4redirect=redirect list 199 to group SERVER_GROUP1 duration 120 frequency 120 Acc-Acc CoA Req ip:traffic-class= [in | out] access-group [acl-number | name acl-name] [priority value] Classification (traffic class) for a TC service NoteTC cannot be dynamically downloaded via the ip:inacl or other VSA pairs. The ACLs in this command must be predefined on the ISG. ip:traffic-class=in access-group name ACL_IN_L4R priority 5 Acc-Acc CoA Req ip:inacl[#number]={standard-access-control-list | extended-access-control-list} Incoming ACL definition, for feature push. ip:inacl=ACL1_IN where “ACL1_IN” is predefined on the ISG OR ip:inacl#10=deny ip any 13.13.16.0 0.0.0.255 ip:inacl#20=permit ip any any ip:outacl[#number]={standard-access-control-list | extended-access-control-list} Outgoing ACL definition, for feature push. Ip:outacl=ACL1_OUT where “ACL1_OUT” is predefined on the ISG or ip:outacl#10=deny ip 13.13.16.0 0.0.0.255 any ip:outacl#20=permit ip any any Acc-Acc CoA Req ip:sub-qos-policy-in=in-policy-name Per-Session MQC Input policy name NoteActual MQC policy must be predefined on the ISG. Supported for both IP and PPP sessions. ip:sub-qos-policy-int=QOS_POLICY_IN Acc-Acc CoA Req ip:sub-qos-policy-out=<out-policy-name> Per-Session MQC Output policy name NoteActual MQC policy must be predefined on the ISG. Supported for both IP and PPP sessions. ip:sub-qos-policy-out=QOS_POLICY_OUT Acc-Acc CoA Req atm:vc-qos-policy-in=<in-policy-name> Specifies MQC policy applied on atm vc atm:vc-qos-policy-in= QOS_POLICY_IN Acc-Acc CoA Req atm:vc-qos-policy-out=<out-policy-name> Specifies MQC policy applied on atm vc atm:vc-qos-policy-out= QOS_POLICY_OUT Acc-Acc CoA Req ip:vrf-id=<vrf_name> Places a session inside the specified VRF ip:vrf-id=VPN_ISP1 Acc-Acc CoA Req ip:ip-unnumbered=<loopback address> Specifies loopback address ip:ip-unnumbered= loopback5 Acc-Acc CoA Req ip:pool-def#n =<ip pool definition> IP pool definition for router ip:pool-def#1=beta 2.0.2.5 2.0.2.8 ip:addr-pool =<pool_name> IP address pool name used for PPP access ip:addr-pool=PPPOE_POOL Acc-Acc CoA Req parent-session-id=<id-number> Used to match a TC service with parent session for accounting purposes. parent-session-id= 00000081 Accounting client-mac-address=<mac-address> Identify client’s MAC address client-mac-address= 0050.5607.0103 Acc-Req Accounting circuit-id-tag=<tag name> DHCP Option 82 tag (identifies line card & port) circuit-id-tag=0|4|22|1|15 Acc-Req Acc-Acc CoA Req Accounting remote-id-tag=<tag name> DHCP Option 82 tag (identifies DSLAM or L2 switch) remote-id-tag= 0|6|000d.edc0.3f80 Acc-Req Acc-Acc CoA Req Accounting vrf-id = <vrf name> Identifier for the virtual routing table. vrf-id=VPN_ISP1 Accounting sg-version=<isg-version> Identify ISG version sg-version=1.0 CoA Ack connect-progress=<session-state> Report session state - (Call Up, LAN Ses Up) connect-progress= Call Up Accounting disc-cause-ext=<disconnect-cause> Report disconnect cause – (No Reason, PPP Receive Term, TS User Exit) disc-cause-ext= PPP Receive Term Accounting subscriber:classname=<dhcp-class-name> Used to assign IP address from a specific DHCP pool subscriber:classname= VPN_ISP1_CLASS Acc-Acc CoA Req subscriber:accounting-list=<accounting-method-list-name> The session or service requires accounting. subscriber:accounting-list=ACCNT_LIST1 Acc-Acc CoA Req Prepaid-config=<prepaid-method -name> Specify service is pre-paid prepaid-config=PREPAID_CONFIG Acc-Acc CoA Req subscriber:policy-directive=<policy-directive> Additional policy directive for a service. (i.e., further authentication) subscriber:policy-directive=authenticate aaa list APP1_SERVER Acc-Acc subscriber:subscriber-service = <type of service> Type of service – (vpdn, local, relay-pppoe) Typically used as part of a service profile for PPP sessions to decide whether the session needs to forwarded or terminated. subscriber:subscriber-service=local Acc-Acc subscriber:sg-service-type=primary Indicates whether service is primary. subscriber:sg-service-type=primary Acc-Acc subscriber:service-group=<group-name > Defines a group name to outline what non-primary services are dependent on a primary service. subscriber:sg-service-type=ISP1_SERVICES Acc-Acc CoA-Req vpdn:tunnel-id =<vpdn_tunnel_id> VPDN tunnel id vpdn:tunnel-id=nas1 Acc-Acc CoA-Req vpdn:l2tp-tunnel_password=<vpdn_tunnel_password> VPDN tunnel password vpdn:l2tp-tunnel-password=cisco Acc-Acc CoA-Req vpdn:ip-addresses=<vpdn_ip_address> VPDN Ip addresses vpdn:ip-addresses=10.0.1.26 Acc-Acc CoA-Req vpdn:tunnel-type =<vpdn_tunnel_type> VPDN tunnel type (t2tp,l2f, pptp) vpdn:tunnel-type=l2tp Acc-Acc CoA-Req Robert Graham Network Engineer U-Haul International 2727 N. Central Ave Phoenix, AZ 85004 FreeRadius users mailing list <freeradius-users@lists.freeradius.org> writes:
On 13 January 2015 at 14:22, Herwin Weststrate <herwin@quarantainenet.nl> wrote:
On 13-01-15 15:04, paul.moser@bt.com wrote:
On 11 January 2015 at 01:32 Arran Cudbard-Bell
[a.cudbardb@freeradius.org] wrote:
So if anyone has a complete or semi-complete list of all the
Cisco-AVPair attributes
please send them over so the Cisco dictionary can be updated.
The ones I'm aware of - though don't necessarily know their meaning are:
Cisco-AVPair = "connect-progress=some_state" Cisco-AVPair = "disc-cause-ext=some_cause" Cisco-AVPair = parent-session-id=0D70DD7 Cisco-AVPair = "portbundle=some_state" Cisco-AVPair = "accounting-list=some_list" Cisco-AVPair = "ip:l4redirect=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = "ip:inacl2002=some_rule" Cisco-AVPair = "ip:inacl2005=some_rule" Cisco-AVPair = "ip:outacl2002=some_rule" Cisco-AVPair = "ip:outacl2005=some_rule" Cisco-AVPair = "ip:traffic-class=some_rule" Cisco-AVPair = postpay-config=default Cisco-AVPair = prepaid-config=default
In addition, we've seen the following:
Cisco-AVPair = "ssid=some_ssid"
-- Herwin Weststrate
http://null.53bits.co.uk/index.php?page=avpairs
Cheers, James. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Arran Cudbard-Bell -
Herwin Weststrate -
James Bensley -
paul.moser＠bt.com -
Robert Graham