About this guide

About this guide

This guide provides an overview of all supported RADIUS Authentication, Authorization and Accounting attributes.

Note: Unless otherwise indicated, this guide uses classic CLI command syntax and configuration examples.

Topics include:

The authentication attributes are organized per application. The accounting attributes are organized per accounting application. For each application, three tables provide the attribute details:

Description
a detailed description per attribute
Limits
value limits and format description per attribute. Note that the SR OS RADIUS Python interface enables flexible formatting of the attributes received from and sent to the RADIUS AAA servers.
Applicability
RADIUS messages where the attribute can be present

Table: Attribute conventions lists and describes the attribute conventions used in this guide.

Table: Attribute conventions
Attribute Description

0

This attribute must not be present in packet.

0+

Zero or more instances of this attribute may be present in packet.

0-1

Zero or one instance of this attribute may be present in packet.

1

Exactly one instance of this attribute must be present in packet.

Attribute Type Identifiers and VSA Type Identifiers used in this guide follow the dotted number notation as described in RFC 6929, Remote Authentication Dial In User Service (RADIUS) Protocol Extensions. For example:

Note: An unsupported attribute that is present in a CoA message is silently ignored, unless explicitly stated differently in the attribute description.

All Nokia Vendor Specific Attributes (VSAs) are available in a freeradius dictionary format. The dictionary is delivered together with the software package: <cflash>\support\dictionary-freeradius.txt.