RADIUS IETF Attributes Supported by the AAA Service Framework
Table 1 describes the RADIUS IETF attributes that the JUNOS AAA Service Framework supports.
Table 1: Supported RADIUS IETF Attributes
Attribute Number | Attribute Name | Description |
|---|---|---|
1 | User-Name |
|
2 | User-Password |
|
4 | NAS-IP-Address | IP address of the network access server (NAS) that is requesting authentication of the user |
5 | NAS-Port | Physical port number of the NAS that is authenticating the user |
6 | Service-Type | Type of service the user has requested or the type of service to be provided |
8 | Framed-IP-Address |
|
9 | Framed-IP-Netmask |
|
11 | Filter-ID |
|
18 | Reply-Message |
|
22 | Framed-Route | String that provides routing information to be configured for the user on the NAS; in the format: <addr>[/<maskLen>] [<nexthop> [<cost>]] [tag <tagValue>] [distance <distValue>] Note: The tag value is ignored when the Framed-Route attribute is used for configuring access routes. |
25 | Class | An arbitrary value that the NAS includes in all accounting packets for the user if supplied by the RADIUS server |
27 | Session-Timeout | Maximum number of consecutive seconds of service to be provided to the user before termination of the session |
31 | Calling-Station-ID | Indicates that the NAS can send the phone number from which the call originated |
32 | NAS-Identifier | Identifies the NAS originating the request |
40 | Acct-Status-Type | Indicates whether this Accounting-Request marks the beginning of the user service (Start), the end (Stop), or the interim (Interim-Update) |
41 | Acct-Delay-Time | Indicates how many seconds the client has been trying to send a particular record |
42 | Acct-Input-Octets | Indicates how many octets have been received from the port during the time this service has been provided |
43 | Acct-Output-Octets | Indicates how many octets have been sent to the port during the time this service has been provided |
44 | Acct-Session-ID | Unique accounting identifier that makes it easy to match start and stop records in a log file. The identifier can be in one of the following formats:
|
45 | Acct-Authentic | Indicates how the user was authenticated: whether by RADIUS, the NAS itself, or another remote authentication protocol |
46 | Acct-Session-Time | Indicates how long in seconds that the user has received service |
47 | Acct-Input-Packets | Indicates how many packets have been received from the port during the time this service has been provided to a framed user |
48 | Acct-Output-Packets | Indicates how many packets have been sent to the port in the course of delivering this service to a framed user |
49 | Acct-Terminate-Cause | Contains the reason the service (a PPP session) was terminated. The service can be terminated for the following reasons:
|
52 | Acct-Input-Gigawords | Indicates how many times the Acct-Input-Octets counter has wrapped around 232 during the time this service has been provided. Can be present in Accounting-Request records only where the Acct-Status-Type is set to Stop or Interim-Update |
53 | Acct-Output-Gigawords | Indicates how many times the Acct-Output-Octets counter has wrapped around 232 in the course of delivering this service. Can be present in Accounting-Request records only where the Acct-Status-Type is set to Stop or Interim-Update |
55 | Event-Timestamp | Records the time that this event occurred on the NAS, in seconds, since January 1, 1970 00:00 UTC |
61 | NAS-Port-Type | Indicates the type of physical port the NAS is using to authenticate the user |
85 | Acct-Interim-Interval | Number of seconds between each interim accounting update for this session The router uses the following guidelines for interim accounting:
|
87 | NAS-Port-ID | Text string that identifies the physical interface of the NAS that is authenticating the user |
88 | Framed-Pool | Name of an assigned address pool to use to assign an address for the user |
95 | NAS-IPv6-Address | Address of the NAS that is requesting authentication of the user |
96 | Framed-Interface-ID | Interface identifier that is configured for the user |
97 | Framed-IPv6-Prefix | IPv6 prefix that is configured for the user |
98 | Login-IPv6-Host | System the user connects to when the Login-Service attribute is included |
99 | Framed-IPv6-Route | IPv6 routing information that is configured for the user. |
100 | Framed-IPv6-Pool | Name of assigned pool used to assign an IPv6 prefix for the user |
123 | Delegated-IPv6-Prefix | Prefix that is delegated to the user |

