[Contents] [Prev] [Next] [Index] [Report an Error]

## Defining the Values of RADIUS Attributes

The values of RADIUS attributes can be a standard value (see Table 11) or an expression. Expressions are evaluated with Python. For example: lowWord(inOctets) extracts the lower 32 bits of the 64-bit inOctets counter. You can define multiple values for an expression in a comma-separated list.

Table 11: Standard Values for RADIUS Attributes

Value | Type of Plug-In | Comments
--- | --- | ---
accountingId | User and service tracking |
authUserId | Service tracking |
dhcp | User and service tracking | Provides access to DHCP packet. See Table 6 for details.
domain | Authorization |
eventTime | User and service tracking | Seconds since 1970-01-01T00:00Z
ifRadiusClass | User and service tracking |
ifSessionId | User and service tracking |
inOctets | Service tracking | 64-bit counter
inPackets | Service tracking |
interfaceAlias | User and service tracking |
interfaceDescr | User and service tracking |
interfaceName | User and service tracking |
localNasId | All | Configured NAS-ID
localNasIp | All | Configured NAS-IP
loginId | User and service authorization | ID provided by the subscriber; the loginId value is not separated into UID and domain name.
loginName | User and service tracking | Name that the subscriber uses to log in to portal
nasIp | User and service tracking | NAS IP address of the router
nasPort | User and service tracking | 32-bit integer
outOctets | Service tracking | 64-bit counter
outPackets | Service tracking |
password | User and service authorization |
portId | User and service tracking | ID of the port on the JUNOSe router; for example, FastEthernet 3/1:2001
primaryUserName | User and service tracking | Name that the subscriber uses for DHCP/PPP authentication
radiusClass | User tracking, user and service authorization | For service tracking, this value is taken from the RADIUS Access-Accept response. If the response does not contain a value, the RADIUS class defined in the service definition is used. This attribute can be set by an authorization response.
replyMessage | User and service authorization | This attribute can only be set.
routerName | User and service tracking |
serviceBundle | User tracking and authorization | This attribute can be set by an authorization response.
serviceName | Service tracking | Sets an arbitrary attribute (for example, class) to the name of the service.
serviceSessionName | Service tracking | Named service session; empty for default session
serviceSessionTag | Service tracking |
sessionId | User and service tracking |
sessionTime | User and service tracking |
sessionTimeout | User tracking, user and service authorization | This attribute can be set by an authorization response.
sessionVolumeQuota | User authorization | This attribute can only be set. It is sent for session tracking events and can be returned by service authorization events. It can be set and retrieved through the portal API and can also be defined through an LDAP attribute in the service definition. If the attribute is defined multiple times, the following precedence is observed: Service definition (lowest) Authorization API call (highest) NOTE: The SAE does not enforce a volume quota directly; it only makes the attribute available to an external application that can control the volume quota.
setAcctInterimTime | User authorization | Integer
setAuthVirtualRouterName | DHCP authorization | Text
setIdleTimeout(ATTR) | User authorization |
setLoadServices(ATTR) | User authorization | This attribute can only be set.
setPoolName | DHCP authorization | Text
setRadiusClass(ATTR) | User and service authorization |
setReplyMessage(ATTR) | User and service authorization |
setSessionTimeout(ATTR) | User and service authorization |
setServiceBundle(ATTR) | User authorization |
setSessionVolumeQuota(ATTR) | User authorization |
setSubstitution | User authorization | Text. Substitutions can be set only for service sessions.
setTerminateTime | User authorization | Text
setUserIpAddress | DHCP authorization | Integer
sspHost | User and service tracking |
terminateCause | User and service tracking |
uid | User and service authorization |
userDn | User and service tracking |
userIpAddress | User and service tracking |
userMacAddress | User and service tracking |
userRadiusClass | Service tracking | RADIUS class of associated subscriber session
userSessionId | Service tracking | RADIUS session ID of associated subscriber session

#### Related Topics

- Overview of Flexible RADIUS Plug-Ins
- Using Flexible RADIUS Packet Definitions
- Configuring a RADIUS Packet Template
- Configuring UDP Ports for RADIUS Plug-Ins

[Contents] [Prev] [Next] [Index] [Report an Error]