Radius Types (last updated 2008-02-14) The RFC "Remote Authentication Dial In User Service (RADIUS)" [RFC2058, RFC2865] defines a Packet Type Code and an Attribute Type Code. The IANA registry of these codes and subordinate assigned values is listed here according to [RFC3575]. Registries included below: - Radius Attribute Types - Radius Attribute Values - Radius Packet Type Codes - Radius Codes Registry Name: Radius Attribute Types Reference: [RFC2865] Registration Procedures: IETF Consensus Registry: Value Description Reference ----- ----------- --------- 1 User-Name 2 User-Password 3 CHAP-Password 4 NAS-IP-Address 5 NAS-Port 6 Service-Type 7 Framed-Protocol 8 Framed-IP-Address 9 Framed-IP-Netmask 10 Framed-Routing 11 Filter-Id 12 Framed-MTU 13 Framed-Compression 14 Login-IP-Host 15 Login-Service 16 Login-TCP-Port 17 (unassigned) 18 Reply-Message 19 Callback-Number 20 Callback-Id 21 (unassigned) 22 Framed-Route 23 Framed-IPX-Network 24 State 25 Class 26 Vendor-Specific 27 Session-Timeout 28 Idle-Timeout 29 Termination-Action 30 Called-Station-Id 31 Calling-Station-Id 32 NAS-Identifier 33 Proxy-State 34 Login-LAT-Service 35 Login-LAT-Node 36 Login-LAT-Group 37 Framed-AppleTalk-Link 38 Framed-AppleTalk-Network 39 Framed-AppleTalk-Zone 40 Acct-Status-Type [RFC2866] 41 Acct-Delay-Time [RFC2866] 42 Acct-Input-Octets [RFC2866] 43 Acct-Output-Octets [RFC2866] 44 Acct-Session-Id [RFC2866] 45 Acct-Authentic [RFC2866] 46 Acct-Session-Time [RFC2866] 47 Acct-Input-Packets [RFC2866] 48 Acct-Output-Packets [RFC2866] 49 Acct-Terminate-Cause [RFC2866] 50 Acct-Multi-Session-Id [RFC2866] 51 Acct-Link-Count [RFC2866] 52 Acct-Input-Gigawords [RFC2869] 53 Acct-Output-Gigawords [RFC2869] 54 (unassigned) 55 Event-Timestamp [RFC2869] 56 Egress-VLANID [RFC4675] 57 Ingress-Filters [RFC4675] 58 Egress-VLAN-Name [RFC4675] 59 User-Priority-Table [RFC4675] 60 CHAP-Challenge 61 NAS-Port-Type 62 Port-Limit 63 Login-LAT-Port 64 Tunnel-Type [RFC2868] 65 Tunnel-Medium-Type [RFC2868] 66 Tunnel-Client-Endpoint [RFC2868] 67 Tunnel-Server-Endpoint [RFC2868] 68 Acct-Tunnel-Connection [RFC2867] 69 Tunnel-Password [RFC2868] 70 ARAP-Password [RFC2869] 71 ARAP-Features [RFC2869] 72 ARAP-Zone-Access [RFC2869] 73 ARAP-Security [RFC2869] 74 ARAP-Security-Data [RFC2869] 75 Password-Retry [RFC2869] 76 Prompt [RFC2869] 77 Connect-Info [RFC2869] 78 Configuration-Token [RFC2869] 79 EAP-Message [RFC2869] 80 Message-Authenticator [RFC2869] 81 Tunnel-Private-Group-ID [RFC2868] 82 Tunnel-Assignment-ID [RFC2868] 83 Tunnel-Preference [RFC2868] 84 ARAP-Challenge-Response [RFC2869] 85 Acct-Interim-Interval [RFC2869] 86 Acct-Tunnel-Packets-Lost [RFC2867] 87 NAS-Port-Id [RFC2869] 88 Framed-Pool [RFC2869] 89 CUI [RFC4372] 90 Tunnel-Client-Auth-ID [RFC2868] 91 Tunnel-Server-Auth-ID [RFC2868] 92 NAS-Filter-Rule [RFC4849] 93 (Unassigned) 94 Originating-Line-Info [RFC4005] 95 NAS-IPv6-Address [RFC3162] 96 Framed-Interface-Id [RFC3162] 97 Framed-IPv6-Prefix [RFC3162] 98 Login-IPv6-Host [RFC3162] 99 Framed-IPv6-Route [RFC3162] 100 Framed-IPv6-Pool [RFC3162] 101 Error-Cause Attribute [RFC3576] 102 EAP-Key-Name [RFC4072] 103 Digest-Response [RFC5090] 104 Digest-Realm [RFC5090] 105 Digest-Nonce [RFC5090] 106 Digest-Response-Auth [RFC5090] 107 Digest-Nextnonce [RFC5090] 108 Digest-Method [RFC5090] 109 Digest-URI [RFC5090] 110 Digest-Qop [RFC5090] 111 Digest-Algorithm [RFC5090] 112 Digest-Entity-Body-Hash [RFC5090] 113 Digest-CNonce [RFC5090] 114 Digest-Nonce-Count [RFC5090] 115 Digest-Username [RFC5090] 116 Digest-Opaque [RFC5090] 117 Digest-Auth-Param [RFC5090] 118 Digest-AKA-Auts [RFC5090] 119 Digest-Domain [RFC5090] 120 Digest-Stale [RFC5090] 121 Digest-HA1 [RFC5090] 122 SIP-AOR [RFC5090] 123 Delegated-IPv6-Prefix [RFC4818] 124-191 (unassigned) 192-223 Experimental Use [RFC3575] 224-240 Implementation Specific [RFC3575] 241-255 Reserved [RFC3575] RADIUS Attribute Values ----------------------- Defined in [RFC2865] unless otherwise indicated. Values for RADIUS Attribute 6, Service-Type: Value Description Reference ----- ----------- --------- 1 Login 2 Framed 3 Callback Login 4 Callback Framed 5 Outbound 6 Administrative 7 NAS Prompt 8 Authenticate Only 9 Callback NAS Prompt 10 Call Check 11 Callback Administrative 12 Voice [Chiba] 13 Fax [Chiba] 14 Modem Relay [Chiba] 15 IAPP-Register [IEEE 802.11f][Kerry] 16 IAPP-AP-Check [IEEE 802.11f][Kerry] 17 Authorize Only [RFC3576] Values for RADIUS Attribute 7, Framed-Protocol: Value Description Reference ----- ----------- --------- 1 PPP 2 SLIP 3 AppleTalk Remote Access Protocol (ARAP) 4 Gandalf proprietary SingleLink/MultiLink protocol 5 Xylogics proprietary IPX/SLIP 6 X.75 Synchronous 7 GPRS PDP Context [Moore] Values for RADIUS Attribute 10, Framed-Routing: Value Description Reference ----- ----------- --------- 0 None 1 Send routing packets 2 Listen for routing packets 3 Send and Listen Values for RADIUS Attribute 13, Framed-Compression: Value Description Reference ----- ----------- --------- 0 None 1 VJ TCP/IP header compression 2 IPX header compression 3 Stac-LZS compression Values for RADIUS Attribute 15, Login-Service: Value Description Reference ----- ----------- --------- 0 Telnet 1 Rlogin 2 TCP Clear 3 PortMaster (proprietary) 4 LAT 5 X25-PAD 6 X25-T3POS 7 (unassigned) 8 TCP Clear Quiet (suppresses any NAS-generated connect string) Values for RADIUS Attribute 29, Termination-Action: Value Description Reference ----- ----------- --------- 0 Default 1 RADIUS-Request Values for RADIUS Attribute 40, Acct-Status-Type [RFC2866]: Value Description Reference ----- ----------- --------- 1 Start [RFC2866] 2 Stop [RFC2866] 3 Interim-Update [RFC2866] 4-6 (unassigned) 7 Accounting-On [RFC2866] 8 Accounting-Off [RFC2866] 9 Tunnel-Start [RFC2867] 10 Tunnel-Stop [RFC2867] 11 Tunnel-Reject [RFC2867] 12 Tunnel-Link-Start [RFC2867] 13 Tunnel-Link-Stop [RFC2867] 14 Tunnel-Link-Reject [RFC2867] 15 Failed [RFC2866] Values for RADIUS Attribute 45, Acct-Authentic [RFC2866]: Value Description Reference ----- ----------- --------- 1 RADIUS 2 Local 3 Remote 4 Diameter [Calhoun] Values for RADIUS Attribute 49, Acct-Terminate-Cause [RFC2866]: Value Description Reference ----- ----------- --------- 1 User Request 2 Lost Carrier 3 Lost Service 4 Idle Timeout 5 Session Timeout 6 Admin Reset 7 Admin Reboot 8 Port Error 9 NAS Error 10 NAS Request 11 NAS Reboot 12 Port Unneeded 13 Port Preempted 14 Port Suspended 15 Service Unavailable 16 Callback 17 User Error 18 Host Request 19 Supplicant Restart [RFC3580] 20 Reauthentication Failure [RFC3580] 21 Port Reinitialized [RFC3580] 22 Port Administratively Disabled [RFC3580] Values for RADIUS Attribute 61, NAS-Port-Type [RFC2865]: Value Description Reference ----- ----------- --------- 0 Async 1 Sync 2 ISDN Sync 3 ISDN Async V.120 4 ISDN Async V.110 5 Virtual 6 PIAFS 7 HDLC Clear Channel 8 X.25 9 X.75 10 G.3 Fax 11 SDSL - Symmetric DSL 12 ADSL-CAP - Asymmetric DSL, Carrierless Amplitude Phase Modulation 13 ADSL-DMT - Asymmetric DSL, Discrete Multi-Tone 14 IDSL - ISDN Digital Subscriber Line 15 Ethernet 16 xDSL - Digital Subscriber Line of unknown type 17 Cable 18 Wireless - Other 19 Wireless - IEEE 802.11 20 Token-Ring [RFC3580] 21 FDDI [RFC3580] 22 Wireless - CDMA2000 [McCann] 23 Wireless - UMTS [McCann] 24 Wireless - 1X-EV [McCann] 25 IAPP [IEEE 802.11f][Kerry] 26 FTTP - Fiber to the Premises [Nyce] 27 Wireless - IEEE 802.16 [IEEE 802.16] 12 December 2006 28 Wireless - IEEE 802.20 [IEEE 802.20] 12 December 2006 29 Wireless - IEEE 802.22 [IEEE 802.22] 12 December 2006 30 PPPoA - PPP over ATM [RFC4603] 31 PPPoEoA - PPP over Ethernet over ATM [RFC4603] 32 PPPoEoE - PPP over Ethernet over Ethernet [RFC4603] 33 PPPoEoVLAN - PPP over Ethernet over VLAN [RFC4603] 34 PPPoEoQinQ - PPP over Ethernet over IEEE 802.1QinQ [RFC4603] 35 xPON - Passive Optical Network [Hublet][Yan] 19 June 2007 Registry Name: Values for RADIUS Attribute 64, Tunnel-Type Reference: [RFC2868] Registration Procedures: IETF Consensus Registry: Value Description Reference ----- ----------- --------- 1 Point-to-Point Tunneling Protocol (PPTP) 2 Layer Two Forwarding (L2F) 3 Layer Two Tunneling Protocol (L2TP) 4 Ascend Tunnel Management Protocol (ATMP) 5 Virtual Tunneling Protocol (VTP) 6 IP Authentication Header in the Tunnel-mode (AH) 7 IP-in-IP Encapsulation (IP-IP) 8 Minimal IP-in-IP Encapsulation (MIN-IP-IP) 9 IP Encapsulating Security Payload in the Tunnel-mode (ESP) 10 Generic Route Encapsulation (GRE) 11 Bay Dial Virtual Services (DVS) 12 IP-in-IP Tunneling 13 Virtual LANs (VLAN) [RFC3580] Registry Name: Values for RADIUS Attribute 65, Tunnel-Medium-Type Reference: [RFC2868] Registration Procedures: IETF Consensus Registry: Value Description Reference ----- ----------- --------- 1 IPv4 (IP version 4) 2 IPv6 (IP version 6) 3 NSAP 4 HDLC (8-bit multidrop) 5 BBN 1822 6 802 (includes all 802 media plus Ethernet "canonical format") 7 E.163 (POTS) 8 E.164 (SMDS, Frame Relay, ATM) 9 F.69 (Telex) 10 X.121 (X.25, Frame Relay) 11 IPX 12 Appletalk 13 Decnet IV 14 Banyan Vines 15 E.164 with NSAP format subaddress Values for RADIUS Attribute 72, ARAP-Zone-Access [RFC2869]: Value Description Reference ----- ----------- --------- 1 Only allow access to default zone 2 Use zone filter inclusively 3 (not used) 4 Use zone filter exclusively Sub-registry: Values for RADIUS Attribute 76, Prompt [RFC2869]: Value Description Reference ----- ----------- --------- 0 No Echo 1 Echo Values for RADIUS Attribute 101, Error-Cause Attribute [RFC5176]: Value Description Reference ----- ------------------------------------------------------ --------- 201 Residual Session Context Removed 202 Invalid EAP Packet (Ignored) 401 Unsupported Attribute 402 Missing Attribute 403 NAS Identification Mismatch 404 Invalid Request 405 Unsupported Service 406 Unsupported Extension 407 Invalid Attribute Value [RFC5176] 501 Administratively Prohibited 502 Request Not Routable (Proxy) 503 Session Context Not Found 504 Session Context Not Removable 505 Other Proxy Processing Error 506 Resources Unavailable 507 Request Initiated 508 Multiple Session Selection Unsupported [RFC5176] End of RADIUS Attribute Values. RADIUS Packet Type Codes ------------------------ RADIUS Codes (decimal) are assigned as follows: # Message Reference ---- ------------------------- --------- 1 Access-Request [RFC2865] 2 Access-Accept [RFC2865] 3 Access-Reject [RFC2865] 4 Accounting-Request [RFC2865] 5 Accounting-Response [RFC2865] 6 Accounting-Status [RFC3575] (now Interim Accounting) 7 Password-Request [RFC3575] 8 Password-Ack [RFC3575] 9 Password-Reject [RFC3575] 10 Accounting-Message [RFC3575] 11 Access-Challenge [RFC2865] 12 Status-Server (experimental) [RFC2865] 13 Status-Client (experimental) [RFC2865] 21 Resource-Free-Request [RFC3575] 22 Resource-Free-Response [RFC3575] 23 Resource-Query-Request [RFC3575] 24 Resource-Query-Response [RFC3575] 25 Alternate-Resource- Reclaim-Request [RFC3575] 26 NAS-Reboot-Request [RFC3575] 27 NAS-Reboot-Response [RFC3575] 28 Reserved 29 Next-Passcode [RFC3575] 30 New-Pin [RFC3575] 31 Terminate-Session [RFC3575] 32 Password-Expired [RFC3575] 33 Event-Request [RFC3575] 34 Event-Response [RFC3575] 40 Disconnect-Request [RFC3575] 41 Disconnect-ACK [RFC3575] 42 Disconnect-NAK [RFC3575] 43 CoA-Request [RFC3575] 44 CoA-ACK [RFC3575] 45 CoA-NAK [RFC3575] 50 IP-Address-Allocate [RFC3575] 51 IP-Address-Release [RFC3575] 250-253 Experimental Use [RFC3575] 254 Reserved [RFC3575] 255 Reserved [RFC3575] References -------------- [IEEE 802.11F] [IEEE 802.16] "IEEE Standard for Local and metropolitan area networks, Part 16: Air Interface for Fixed and Mobile Broadband Wireless Access Systems, Amendment2: Physical and Medium Access Control Layers for Combined Fixed and Mobile Operation in Licensed Bands", February 2006. [IEEE 802.20] Mobile Broadband Wireless Access (MBWA), IEEE Standard, Work in Progress. [IEEE 802.22] Wireless Regional Area Networks (WRAN), IEEE Standard, Work in Progress. [RFC2058] Rigney, C., A. Rubens, W. Simpson, and S. Willens, "Remote Authentication Dial In User Service (RADIUS)", RFC 2058, Livingston, Merit, Daydreamer, January 1997. [RFC2059] Rigney, C., "RADIUS Accounting", RFC 2059, Livingston, November 1996. [RFC2865] Rigney, W., S. Willens, A. Rubens, and W. Simpson, "Remote Authentication Dial In User Service (RADIUS)", RFC 2865, June 2000. [RFC2866] Rigney, C., "RADIUS Accounting", RFC 2865, June 2000. [RFC2867] Zorn, G., B. Aboba, D. Mitton, "RADIUS Accounting Modifications for Tunnel Protocol Support", RFC 2867, June 2000. [RFC2868] Zorn, G., D. Leifer, A. Rubens, J. Shriver, M. Holdrege, I. Goyret, "RADIUS Attributes for Tunnel Protocol Support", RFC 2868, June 2000. [RFC2869] Rigney, C., W. Willats, P. Calhoun, "RADIUS Extensions", RFC 2869, June 2000. [RFC3162] B. Aboba, G. Zorn, and D. Mitton, "RADIUS and IPv6", RFC 3162, August 2001. [RFC3336] B. Thompson, T. Koren and B. Buffam, "PPP Over Asynchronous Transfer Mode Adaptation Layer 2 (AAL2)", RFC 3336, December 2002. [RFC3575] B. Aboba, "IANA Considerations for RADIUS (Remote Authentication Dial In User Service)", RFC 3575, July 2003. [RFC3580] P. Congdon, B. Aboba, A. Smith, G. Zorn, and J. Roese, "IEEE 802.1X RADIUS Usage Guidelines", RFC 3580, September 2003. [RFC4072] P. Eronen, Ed., T. Hiller, and G. Zorn, "Diameter Extensible Authentication Protocol (EAP) Application", RFC 4072, August 2005. [RFC4372] F. Adrangi, A. Lior, J. Korhonen and J. Loughney, "Chargeable User Identity", RFC 4372, January 2006. [RFC4603] G. Zorn, G. Weber and R. Foltak, "Additional Values for the NAS-Port-Type Attribute", RFC 4603, July 2006. [RFC4590] B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams and W. Beck, "RADIUS Extension for Digest Authentication", RFC 4590, July 2006 [RFC4675] P. Congdon, M. Sanchez, B. Aboba, "RADIUS Attributes for Virtual LAN and Priority Support", RFC 4675, September 2006. [RFC4818] J. Salowey, R. Droms, "RADIUS Delegated-IPv6-Prefix Attribute", RFC 4818, April 2007. [RFC4849] P. Congdon, M. Sanchez, B. Aboba, "RADIUS Filter Rule Attribute", RFC 4849, April 2007. [RFC5090] B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams, W. Beck, "RADIUS Extension for Digest Authentication", RFC 5090, February 2008. [RFC5176] M. Chiba, G. Dommety, M. Eklund, D. Mitton, B. Aboba, "Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)", RFC 5176, January 2008. People ------ [Calhoun] Pat Calhoun, , May 2001. [Chiba] Murtaza Chiba, , June 2001. [Hublet] Christian Hublet, , 21 June 2007. [Kerry] Stuart Kerry, stuart.kerry&philips.com>, January 2003. [McCann] Pete McCann, , March 2002. [Moore] Jeff Moore, , February 2001. [Nyce] Tim Nyce, , March 2004 [Trifunovic] Nenad Trifunovic, , October 1998. [Yan] Renxiang Yan, , 19 June 2007. []