Juniper Networks VSAs Supported by the AAA Service Framework
Table 1 describes Juniper Networks VSAs supported by the JUNOS AAA Service Framework. The AAA Service Framework uses vendor ID 4874, which is assigned to Juniper Networks by the Internet Assigned Numbers Authority (IANA).
![]() | Note: A “Yes” entry in the Dynamic CoA Support column indicates that the attribute can be dynamically configured by Access-Accept messages and dynamically modified by CoA-Request messages. |
Table 1: Supported Juniper Networks VSAs
Attribute Number | Attribute Name | Description | Value | Dynamic CoA |
---|---|---|---|---|
26-1 | LSRI-Name | Client logical system:routing instance name. Allowed only from RADIUS server for “default” logical system:routing instance. | string: logical system:routing instance | No |
26-4 | Primary-DNS | Client DNS address negotiated during IPCP | integer: 4-byte primary-dns-address | No |
26-5 | Secondary-DNS | Client DNS address negotiated during IPCP | integer: 4-byte secondary-dns-address | No |
26-6 | Primary-WINS | Client WINS (NBNS) address negotiated during IPCP | integer: 4-byte primary-wins-address | No |
26-7 | Secondary-WINS | Client WINS (NBNS) address negotiated during IPCP | integer: 4-byte secondary-wins-address | No |
26-10 | Ingress-Policy-Name | Input policy name to apply to client interface | string: input-policy-name | Yes |
26-11 | Egress-Policy-Name | Output policy name to apply to client interface | string: output-policy-name | Yes |
26-12 | Ingress-Statistics | Enable or disable input statistics on client interface | integer:
| No |
26-13 | Egress-Statistics | Enable or disable output statistics on client interface | integer:
| No |
26-23 | IGMP-Enable | Enable or disable IGMP on a client interface | integer:
| Yes |
26-25 | Redirect-LSRI-Name | Client logical system:routing instance name indicating to which logical system:routing instance the request is redirected for user authentication. | string: logical-system:routing-instance | No |
26-34 | Framed-IP-Route-Tag | Route tag to apply to returned framed-ip-address | integer: 4-octet | No |
26-42 | Input-Gigapackets | Number of times input-packets attribute rolls over its 4-octet field | integer | No |
26-43 | Output-Gigapackets | Number of times output-packets attribute rolls over its 4-octet field | integer | No |
26-55 | DHCP Options | Client DHCP options | string: dhcp-options | No |
26-56 | DHCP-MAC-Address | Client MAC address | string: mac-address | No |
26-57 | DHCP-GI-Address | DHCP relay agent IP address | integer: 4-octet | No |
26-58 | LI-Action | Traffic mirroring action. For dynamic CoA, VSA 26-58 changes the action on the mediation device identified by VSA 26–59. | 0=stop mirroring 1=start mirroring 2=no action | Yes |
26-59 | Med-Dev-Handle | Link to which traffic mirroring is applied. For dynamic CoA, VSA 26-58 changes the action on the mediation device identified by VSA 26–59. | Salt-encrypted string | Yes |
26-60 | MD-Ip-Address | IP address of content destination device to which mirrored traffic is forwarded | Salt-encrypted IP address | No |
26-61 | MD-Port-Number | UDP port in the content destination device to which mirrored traffic is forwarded | Salt-encrypted integer | No |
26-63 | Interface-Desc | Text string that identifies the subscriber’s access interface | string: interface-description | No |
26-65 | Activate-Service | Service to activate for the subscriber | string: service-name | No |
26-66 | Deactivate-Service | Service to deactivate for the subscriber | string: service-name | No |
26-71 | IGMP-Access-Group-Name | Access List to use for the group (G) filter | string: 32-octet | Yes |
26-72 | IGMP-Access-Source-Group-Name | Access List to use for the source-group (S,G) filter | string: 32-octet | Yes |
26-74 | MLD-Access-Group-Name | Access List to use for the group (G) filter | string: 32-octet | Yes |
26-75 | MLD-Access-Source-Group-Name | Access List to use for the source-group (S,G) filter | string: 32-octet | Yes |
26-77 | MLD-Version | MLD Protocol Version | integer: 1-octet
| Yes |
26-78 | IGMP-Version | IGMP Protocol Version | integer: 1-octet
| Yes |
26-83 | Acct-Service-Session | Name of the service (including parameter values) that is associated with service manager statistics | string: service-name | No |
26–84 | Mobile-IP-Algorithm | Authentication algorithm used for Mobile-IP registration | integer: 4-octet | No |
26–85 | Mobile-IP-SPI | Security parameter index number for Mobile IP registration | integer: 4-octet | No |
26–86 | Mobile-IP-Key | Security association MD5 key for Mobile IP registration | string: key | No |
26–87 | Mobile-IP-Replay | Replay timestamp for Mobile IP registration | integer: 4-octet | No |
26–89 | Mobile-IP-Lifetime | Registration lifetime for Mobile IP registration | integer: 4-octet | No |
26-97 | IGMP-Immediate-Leave | IGMP Immediate Leave | integer: 4-octet
| Yes |
26-100 | MLD-Immediate-Leave | MLD Immediate Leave | integer: 4-octet
| Yes |
26-106 | IPv6-Ingress-Policy-Name | Input policy name to apply to user IPv6 interface | string: policy name | Yes |
26-107 | IPv6-Egress-Policy-Name | Output policy name to apply to user IPv6 interface | string: policy name | Yes |
26-108 | CoS-Shaping-Pmt-Type | CoS traffic-shaping parameter type and description:
| 2 parts, delimited by white space:
Examples:
| Yes |
26-129 | IPv6-NdRa-Prefix | Prefix value in IPv6 Neighbor Discovery route advertisements | hexadecimal string | No |
26-143 | Max-Clients-Per-Interface | Maximum allowable client sessions per interface. For DHCP clients, the maximum sessions per logical interface. | integer: 4-octet | No |
26-146 | CoS-Scheduler-Pmt-Type | CoS scheduler parameter type and description:
| 3 parts, delimited by white space:
Examples:
| Yes |
26-151 | IPv6-Acct-Input-Octets | IPv6 receive octets | integer | No |
26-152 | IPv6-Acct-Output-Octets | IPv6 transmit octets | integer | No |
26-153 | IPv6-Acct-Input-Packets | IPv6 receive packets | integer | No |
26-154 | IPv6-Acct-Output-Packets | IPv6 transmit packets | integer | No |
26-155 | IPv6-Acct-Input-Gigawords | IPv6 receive gigawords | integer | No |
26-156 | IPv6-Acct-Output-Gigawords | IPv6 transmit gigawords | integer | No |
26-157 | IPv6-NdRa-Pool-Name | IPv6 ND/RA pool name used to locally allocate an ND/RA prefix | string | No |