Paul, It means that there are conflicting definitions for an attribute number associated with the Juniper vendor ID. Look for an attribute with the same number as defined for Unisphere-Ingress-Policy-Name in the Juniper dictionary file, and comment it out. It sounds like the conflicting attribute is an integer, and its definition is being used over Unisphere-Ingress-Policy-Name which is obviously a string. -Arran On 24 Jan 2012, at 21:33, Paul Stewart wrote:

Hi there..

I’m trying to get an understanding on a FreeRadius installation how to enable the unisphere.dictionary. There are specific attributes in that file that we need such as “Unisphere-Ingress-Policy-Name”. By default, this dictionary file is commented out due to “attribute conflicts”.

Can someone share a bit more info? I need unisphere attributes and also erx attributes to function on the same FreeRadius system ultimately …. We have a mixture of Juniper ERX equipment and Juniper MX equipment that needs to talk to FreeRadius.

When I try to add a “Unisphere-Ingress-Policy-Name = 512k” for example in the users file I get “invalid integer” error.

Thanks for any insight…

Paul

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Arran Cudbard-Bell a.cudbardb@networkradius.com Technical consultant and solutions architect 15 Ave. du Granier, Meylan, France +33 4 69 66 54 50

"Paul Stewart" <paul@paulstewart.org> writes:

I'm trying to get an understanding on a FreeRadius installation how to enable the unisphere.dictionary. There are specific attributes in that file that we need such as "Unisphere-Ingress-Policy-Name". By default, this dictionary file is commented out due to "attribute conflicts".

Can someone share a bit more info? I need unisphere attributes and also erx attributes to function on the same FreeRadius system ultimately .. We have a mixture of Juniper ERX equipment and Juniper MX equipment that needs to talk to FreeRadius.

So do we. And it does work very well with the default FreeRADIUS dictionaries.

When I try to add a "Unisphere-Ingress-Policy-Name = 512k" for example in the users file I get "invalid integer" error.

There is no Unishpere dictionary. It has always been dictionary.erx from the beginning of FreeRADIUS. And the attributes all have "ERX" prefix, even those that are JUNOS specific (with the exception of some "Sdx" attributes. Don't know how that happend. Hope it wasn't me :-). I chose to continue using the ERX prefix for the latest batch of JUNOS specific attributes, to keep the vendor id to attribute prefix mapping consistent. I'd like to hear comments on that decision from other FreeRADIUS and multi-platform Juniper customers. Juniper themselves use a mix of Jnpr, Unisphere, Sdx and Erx as prefixes depending on which system the attribute is for. But that does not really work either, as some of the attributes are really multi-system. Like ERX-Virtual-Router-Name (26-1) which is just as valid on both JUNOS (MX access) and JUNOSe (ERX). This was one of the main reasons why I decided not to follow their route to confusion. The other reason was remembering when they renamed a few com.unisphere.* java classes to net.juniper.* without thinking about the unnecessary confusion that would create. Made me aware that they really don't have a clue about stable naming... All in all, I believe the current FreeRADIUS dictionary makes more sense than any of the alternatives. And if in doubt you can always match up the actual attribute codes. Juniper are nice enough to document them. Bjørn