Subscriber host identification attributes

Table: CoA and Disconnect Message: subscriber host identification attributes details the different attributes that can be used in a CoA and Disconnect Message to identify one or multiple subscriber hosts.

Table: CoA and Disconnect Message: subscriber host identification attributes
# (priority) Attribute ID Attribute name Notes Identifies

1NAS-Port-Id + single address/prefix attribute1, 2

87

NAS-Port-Id

+ IP address or prefix

 Single host3

8

Framed-IP-Address

+ [87] NAS-Port-Id

 Single IPv4 host3

26.6527.99

Alc-Ipv6-Address

+ [87] NAS-Port-Id

 Single IPv6 host (IA_NA)3

97

Framed-Ipv6-Prefix

+ [87] NAS-Port-Id

 Single IPv6 host (SLAAC)3

123

Delegated-Ipv6-Prefix

+ [87] NAS-Port-Id

 Single IPv6 host (IA_PD)3

2

44

Acct-Session-Id

(number format)

Host acct-session-id

 Single host3

Queue instance acct-session-id

 All hosts attached to this SLA profile instance4

Session acct-session-id

All hosts of the dual stack PPPoE or IPoE session

3

26.6527.

225

Alc-BRG-Id

—

Updates the BRG and all sessions attached to this BRG.

4

26.6527.11

Alc-Subsc-ID-Str

—

 All hosts of the corresponding subscriber4
51

26.6527.

100

or

241.26.6527.

88

Alc-Serv-Id

or

Alc-Serv-Name

+ [8] Framed-IP-Address

 Single IPv4 host5

8

Framed-IP-Address

+ [26.6527.100] Alc-Serv-Id

 Single IPv4 host5
66

1

User-Name

—

 All hosts matching the User-Name4

1

User-Name

+ [8] Framed-IP-Address

 Single IPv4 host3

1

User-Name

+ [26.6527.99] Alc-Ipv6-Address

 Single IPv6 host (IA_NA)3

1

User-Name

+ [97] Framed-Ipv6-Prefix

 Single IPv6 host (SLAAC)3

1

User-Name

+ [123] Delegated-Ipv6-Prefix

 Single IPv6 host (IA_PD)3

Typically, only a single attribute or set of attributes is used to target a host or a number of hosts: ‟NAS-Port-Id + IP” or ‟Acct-Session-Id” or ‟Alc-Subsc-ID-Str”. If both ‟NAS-Port-Id + IP” and ‟Acct-Session-Id” attributes are specified to identify subscriber hosts, only the host identified by ‟NAS-Port-Id + IP” is targeted. If the identified host is not part of the hosts that would be identified by the ‟Acct-Session-Id” attribute, then the CoA is NAK’d with [101] Error-Cause attribute value 503 Session Context Not Found.

Example:

Change of Authorization(43) id 224 len 81 from 192.168.1.1:32772 vrid 1
    SESSION ID [44] 22 24ADFF0000003D5107AB80   # priority 2
    NAS PORT ID [87] 12 lag-1:10.300            # priority 1
    FRAMED IP ADDRESS [8] 4 10.1.2.251         # priority 1
    VSA [26] 15 Alcatel(6527)
      SLA PROF STR [13] 13 sla-profile-1

The CoA targets the host identified with the combination of [87] NAS-Port-Id and [8] Framed-IP-Address (prio 1) only if the host is also identified by [44] Acct-Session-Id (prio 2), else the CoA is NAK’d.

Following attributes are accepted only if the CoA is targeted to a single host as shown in Table: CoA and Disconnect Message: subscriber host identification attributes:

Table: CoA and Disconnect Message: additional rules for wholesale/retail subscriber host identification attributes in a retail service details the rules in addition to Table: CoA and Disconnect Message: subscriber host identification attributes for identification attributes in a CoA or Disconnect Message when targeting a wholesale/retail subscriber host in a retail service.

Table: CoA and Disconnect Message: additional rules for wholesale/retail subscriber host identification attributes in a retail service
Wholesale / retail subscriber host # (Priority) Attribute ID Attribute name Additional rule

PPPoE

with or without private-retail-subnets

1

NAS-Port-Id

+ single address/ prefix attribute

+ Alc-Retail-Serv-Id

or Alc-Retail-Serv-Name

87

NAS-Port-Id

Must include [26.6527.17] Alc-Retail-Serv-Id or [241.26.6527.89] Alc-Retail-Serv-Name

Note: When the host was setup from RADIUS using the Alc-Retail-Serv-Name, the CoA must also use the Alc-Retail-Serv-Name.

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

26.6527.17

241.26.6527.89

Alc-Retail-Serv-Id

Alc-Retail-Serv-Name

IPoE

without private-retail-subnets

1

NAS-Port-Id

+ single address/ prefix attribute

87

NAS-Port-Id

Must not include [26.6527.17] Alc-Retail-Serv-Id nor [241.26.6527.89] Alc-Retail-Serv-Name

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

IPoE

with private-retail-subnets

1

NAS-Port-Id

+ single address/ prefix attribute

+ Alc-Client-Hardware-Addr

87

NAS-Port-Id

Must not include [26.6527.17] Alc-Retail-Serv-Id nor [241.26.6527.89] Alc-Retail-Serv-Name

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

26.6527.27

Alc-Client-Hardware-Addr

PPPoE

without private-retail-subnets

5

Alc-Serv-Id or Alc-Serv-Name

+ Framed-IP-Address

26.6527.100

241.26.6527.88

Alc-Serv-Id

Alc-Serv-Name

[26.6527.100] Alc-Serv-ID must reference the subscriber wholesale service ID

[241.26.6527.88] Alc-Serv-Name must reference the subscriber wholesale service name.

Note: When the host was setup from RADIUS using the Alc-Retail-Serv-Name, the CoA must use the Alc-Serv-Name.

8

Framed-IP-Address

PPPoE

with private-retail-subnets

5

Alc-Serv-Id or Alc-Serv-Name

+ Framed-IP-Address

26.6527.100

241.26.6527.88

Alc-Serv-Id

Alc-Serv-Name

[26.6527.100] Alc-Serv-ID must reference the subscriber retail service ID

[241.26.6527.88] Alc-Serv-Name must reference the subscriber retail service name.

Note: When the host was setup from RADIUS using the Alc-Retail-Serv-Name, the CoA must use the Alc-Serv-Name.

8

Framed-IP-Address

IPoE

without private-retail-subnets

5

Alc-Serv-Id or Alc-Serv-Name

+ single address/ prefix attribute

26.6527.100

241.26.6527.88

Alc-Serv-Id

Alc-Serv-Name

[26.6527.100] Alc-Serv-ID must reference the subscriber wholesale service ID

[241.26.6527.88] Alc-Serv-Name must reference the subscriber wholesale service name.

Note: When the host was setup from RADIUS using the Alc-Retail-Serv-Name, the CoA must use the Alc-Serv-Name.

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

IPoE

with private-retail-subnets

5

Alc-Serv-Id or Alc-Serv-Name

+ Framed-IP-Address

+ Alc-Client-Hardware-Addr

26.6527.100

241.26.6527.88

Alc-Serv-Id

Alc-Serv-Name

[26.6527.100] Alc-Serv-ID must reference the subscriber wholesale service ID

[241.26.6527.88] Alc-Serv-Name must reference the subscriber wholesale service name.

Note: When the host was setup from RADIUS using the Alc-Retail-Serv-Name, the CoA must use the Alc-Serv-Name.

8

Framed-IP-Address

26.6527.27

Alc-Client-Hardware-Addr

PPPoE

with or without private-retail-subnets

6

User-Name+ single address/ prefix attribute

1

User-Name

Username targets all wholesale/retail hosts with the same username. Username with IP address/prefix can target a more specific host.

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

IPoE

without private-retail-subnets

6

User-Name+ single address/ prefix attribute

1

User-Name

Username targets all wholesale/retail hosts with the same username. Username with IP address/prefix can target a more specific host.

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

IPoE

with private-retail-subnets

6

User-Name+ single address/ prefix attribute

1

User-Name

Username targets all wholesale/retail hosts with the same username. Username with IP address/prefix can target a more specific host.

8

26.6527.99

97

123

Framed-IP-Address

Alc-Ipv6-Address

Framed-Ipv6-Prefix

Delegated-Ipv6-Prefix

Parent topic: RADIUS CoA and disconnect message attributes
1 See Table: CoA and Disconnect Message: additional rules for wholesale/retail subscriber host identification attributes in a retail service for additional rules to target a wholesale/retail subscriber host in a retail service.
2 For a CoA with as key NAS-Port-Id + IP address/prefix, the NAS-Port-Id is used to lookup the service context and the IP address/prefix is used to lookup the subscriber host within the service. If multiple hosts in the resulting service have the same IP address/prefix (such as in a L2-aware NAT scenario), then the first found host is identified. To make the selection of the host deterministic, the MAC address of one of the hosts can be included with the [26.6527.27] Alc-Client-Hardware-Addr to target that single host.
3 Although a single host is identified, the CoA or Disconnect Message applies to all hosts of a dual stack PPPoE session or IPoE session (if enabled).
4 A maximum of 32 hosts can be targeted in a single CoA or Disconnect Message. When more than 32 hosts are identified, the CoA and Disconnect Message is rejected with [101] Error-Cause attribute value 501 (Administratively Prohibited).
5 If multiple hosts share the same IP in the specified service, then the CoA is rejected (NAK).
6 For a CoA with as key User-Name + IP address/prefix, the User-Name is used to lookup the service context and the IP address/prefix is used to lookup the subscriber host within the service. If multiple hosts in the resulting service have the same IP address/prefix (such as in a L2-aware NAT scenario), then the CoA is rejected. To make the selection of the host deterministic, the MAC address of one of the hosts can be included with the [26.6527.27] Alc-Client-Hardware-Addr to target a single host.