Configuring Dictionaries for the SIC Group (SRC CLI)
You can add new attributes or modify the current attributes in an SIC dictionary. To add or modify an attribute in a dictionary, specify the unique name of the attribute and configure the RADIUS properties of the attribute.
![]() | Note: To create a new dictionary, we recommend that you work with Juniper Networks Technical Support. |
Use the following statements to configure attributes in an SIC dictionary:
shared sic group identifier dictionary id
shared sic group identifier dictionary id attribute id
shared sic group identifier dictionary id attribute id radius { type type; format (one-byte-integer | integer | eight-byte-integer
| string | ipv4-address | ipv6-address | time | octets); vendor-id vendor-id; encrypt; salt-encrypt; tagged; sensitive; }
shared sic group identifier dictionary id attribute id radius constant constant-name {constant-value;}
To add or modify attributes in an SIC dictionary:
- From configuration mode, access the statement that specifies
the unique name for the dictionary. This sample procedure uses group1
as the group identifier and dic1 as the dictionary identifier.[edit]user@host# edit shared sic group group1 dictionary dic1
- Specify the unique name for the attribute you want to
add or modify in the dictionary. [edit shared sic group group1 dictionary dic1]user@host# edit attribute id
- Specify that the attribute is a RADIUS attribute.[edit shared sic group group1 dictionary dic1 attribute id]user@host# edit radius
- Specify the attribute type.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set type type
- Specify the format of the RADIUS attribute.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set format (one-byte-integer | integer | eight-byte-integer | string | ipv4-address | ipv6-address | time | octets)
where:
- one-byte-integer—Attribute value is an 8-bit unsigned integer.
- integer—Attribute value is a 32-bit unsigned integer.
- eight-byte-integer—Attribute value is a 64-bit unsigned integer.
- string—Attribute value is a string.
- ipv4-address—Attribute value is an IPv4 address.
- ipv6-address—Attribute value is an IPv6 address.
- time—Attribute value is a 32-bit unsigned value, with the most significant octet appearing first. The value is equal to the number of seconds since 00:00:00 UTC, January 1, 1970.
- octets—Attribute value consists of raw bytes.
- (Optional) Specify the vendor ID for the attribute.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set vendor-id vendor-id
- (Optional) Specify whether the attribute should be encrypted
without the salt.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set encrypt
- (Optional) Specify whether the attribute should be encrypted
with the salt.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set salt-encrypt
- (Optional) Specify whether the RADIUS attribute is tagged.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set tagged
- (Optional) Specify whether the RADIUS attribute carries
sensitive data, so its value will not be logged.[edit shared sic group group1 dictionary dic1 attribute attribute1 radius]user@host# set sensitive
- (Optional) Specify the name and value of the constant
you want to associate with the data contained in the RADIUS attribute. [edit shared sic group group1 dictionary dic1 attribute attribute1 radius constant]user@host# set constant-name constant-name constant-value
- (Optional) If you modify an existing dictionary, you need
to restart the SIC.user@host# restart component sic