 |
Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |
The values of RADIUS attributes can be a standard value (see Table 11) or an expression. Expressions are evaluated with Python. For example: lowWord(inOctets) extracts the lower 32 bits of the 64-bit inOctets counter. You can define multiple values for an expression in a comma-separated list.
Table 11: Standard Values for RADIUS Attributes
Value |
Type of Plug-In |
Comments |
|---|---|---|
accountingId |
User and service tracking |
|
authUserId |
Service tracking |
|
dhcp |
User and service tracking |
Provides access to DHCP packet. See Table 6 for details. |
domain |
Authorization |
|
eventTime |
User and service tracking |
Seconds since 1970-01-01T00:00Z |
ifRadiusClass |
User and service tracking |
|
ifSessionId |
User and service tracking |
|
inOctets |
Service tracking |
64-bit counter |
inPackets |
Service tracking |
|
interfaceAlias |
User and service tracking |
|
interfaceDescr |
User and service tracking |
|
interfaceName |
User and service tracking |
|
localNasId |
All |
Configured NAS-ID |
localNasIp |
All |
Configured NAS-IP |
loginId |
User and service authorization |
ID provided by the subscriber; the loginId value is not separated into UID and domain name. |
loginName |
User and service tracking |
Name that the subscriber uses to log in to portal |
nasIp |
User and service tracking |
NAS IP address of the router |
nasPort |
User and service tracking |
32-bit integer |
outOctets |
Service tracking |
64-bit counter |
outPackets |
Service tracking |
|
password |
User and service authorization |
|
portId |
User and service tracking |
ID of the port on the JUNOSe router; for example, FastEthernet 3/1:2001 |
primaryUserName |
User and service tracking |
Name that the subscriber uses for DHCP/PPP authentication |
radiusClass |
User tracking, user and service authorization |
For service tracking, this value is taken from the RADIUS Access-Accept response. If the response does not contain a value, the RADIUS class defined in the service definition is used. This attribute can be set by an authorization response. |
replyMessage |
User and service authorization |
This attribute can only be set. |
routerName |
User and service tracking |
|
serviceBundle |
User tracking and authorization |
This attribute can be set by an authorization response. |
serviceName |
Service tracking |
Sets an arbitrary attribute (for example, class) to the name of the service. |
serviceSessionName |
Service tracking |
Named service session; empty for default session |
serviceSessionTag |
Service tracking |
|
sessionId |
User and service tracking |
|
sessionTime |
User and service tracking |
|
sessionTimeout |
User tracking, user and service authorization |
This attribute can be set by an authorization response. |
sessionVolumeQuota |
User authorization |
This attribute can only be set. It is sent for session tracking events and can be returned by service authorization events. It can be set and retrieved through the portal API and can also be defined through an LDAP attribute in the service definition. If the attribute is defined multiple times, the following precedence is observed:
|
setAcctInterimTime |
User authorization |
Integer |
setAuthVirtualRouterName |
DHCP authorization |
Text |
setIdleTimeout(ATTR) |
User authorization |
|
setLoadServices(ATTR) |
User authorization |
This attribute can only be set. |
setPoolName |
DHCP authorization |
Text |
setRadiusClass(ATTR) |
User and service authorization |
|
setReplyMessage(ATTR) |
User and service authorization |
|
setSessionTimeout(ATTR) |
User and service authorization |
|
setServiceBundle(ATTR) |
User authorization |
|
setSessionVolumeQuota(ATTR) |
User authorization |
|
setSubstitution |
User authorization |
Text. Substitutions can be set only for service sessions. |
setTerminateTime |
User authorization |
Text |
setUserIpAddress |
DHCP authorization |
Integer |
sspHost |
User and service tracking |
|
terminateCause |
User and service tracking |
|
uid |
User and service authorization |
|
userDn |
User and service tracking |
|
userIpAddress |
User and service tracking |
|
userMacAddress |
User and service tracking |
|
userRadiusClass |
Service tracking |
RADIUS class of associated subscriber session |
userSessionId |
Service tracking |
RADIUS session ID of associated subscriber session |
|
Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |