#
# Version $Id: dictionary,v 1.1.1.1 2002/10/11 12:25:39 wichert Exp $
#
#	This file contains dictionary translations for parsing
#	requests and generating responses.  All transactions are
#	composed of Attribute/Value Pairs.  The value of each attribute
#	is specified as one of 4 data types.  Valid data types are:
#
#	string  - 0-253 octets
#	ipaddr  - 4 octets in network byte order
#	integer - 32 bit value in big endian order (high byte first)
#	date    - 32 bit value in big endian order - seconds since
#					00:00:00 GMT,  Jan.  1,  1970
#
#	FreeRADIUS includes extended data types which are not defined
#	in RFC 2865 or RFC 2866.  These data types are:
#
#	abinary - Ascend's binary filter format.
#	octets  - raw octets, printed and input as hex strings.
#		  e.g.: 0x123456789abcdef
#
#
#	Enumerated values are stored in the user file with dictionary
#	VALUE translations for easy administration.
#
#	Example:
#
#	ATTRIBUTE	  VALUE
#	---------------   -----
#	Framed-Protocol = PPP
#	7		= 1	(integer encoding)
#

#
#	Following are the proper new names. Use these.
#
ATTRIBUTE	User-Name		1	string
ATTRIBUTE	User-Password		2	string
ATTRIBUTE	CHAP-Password		3	octets
ATTRIBUTE	NAS-IP-Address		4	ipaddr
ATTRIBUTE	NAS-Port		5	integer
ATTRIBUTE	Service-Type		6	integer
ATTRIBUTE	Framed-Protocol		7	integer
ATTRIBUTE	Framed-IP-Address	8	ipaddr
ATTRIBUTE	Framed-IP-Netmask	9	ipaddr
ATTRIBUTE	Framed-Routing		10	integer
ATTRIBUTE	Filter-Id		11	string
ATTRIBUTE	Framed-MTU		12	integer
ATTRIBUTE	Framed-Compression	13	integer
ATTRIBUTE	Login-IP-Host		14	ipaddr
ATTRIBUTE	Login-Service		15	integer
ATTRIBUTE	Login-TCP-Port		16	integer
ATTRIBUTE	Reply-Message		18	string
ATTRIBUTE	Callback-Number		19	string
ATTRIBUTE	Callback-Id		20	string
ATTRIBUTE	Framed-Route		22	string
ATTRIBUTE	Framed-IPX-Network	23	ipaddr
ATTRIBUTE	State			24	octets
ATTRIBUTE	Class			25	octets
ATTRIBUTE	Vendor-Specific		26	octets
ATTRIBUTE	Session-Timeout		27	integer
ATTRIBUTE	Idle-Timeout		28	integer
ATTRIBUTE	Termination-Action	29	integer
ATTRIBUTE	Called-Station-Id	30	string
ATTRIBUTE	Calling-Station-Id	31	string
ATTRIBUTE	NAS-Identifier		32	string
ATTRIBUTE	Proxy-State		33	octets
ATTRIBUTE	Login-LAT-Service	34	string
ATTRIBUTE	Login-LAT-Node		35	string
ATTRIBUTE	Login-LAT-Group		36	octets
ATTRIBUTE	Framed-AppleTalk-Link	37	integer
ATTRIBUTE	Framed-AppleTalk-Network 38	integer
ATTRIBUTE	Framed-AppleTalk-Zone	39	string

ATTRIBUTE	Acct-Status-Type	40	integer
ATTRIBUTE	Acct-Delay-Time		41	integer
ATTRIBUTE	Acct-Input-Octets	42	integer
ATTRIBUTE	Acct-Output-Octets	43	integer
ATTRIBUTE	Acct-Session-Id		44	string
ATTRIBUTE	Acct-Authentic		45	integer
ATTRIBUTE	Acct-Session-Time	46	integer
ATTRIBUTE       Acct-Input-Packets	47	integer
ATTRIBUTE       Acct-Output-Packets	48	integer
ATTRIBUTE	Acct-Terminate-Cause	49	integer
ATTRIBUTE	Acct-Multi-Session-Id	50	string
ATTRIBUTE	Acct-Link-Count		51	integer
ATTRIBUTE	Acct-Input-Gigawords    52      integer
ATTRIBUTE	Acct-Output-Gigawords   53      integer
ATTRIBUTE	Event-Timestamp         55      date

ATTRIBUTE	CHAP-Challenge		60	string
ATTRIBUTE	NAS-Port-Type		61	integer
ATTRIBUTE	Port-Limit		62	integer
ATTRIBUTE	Login-LAT-Port		63	integer

ATTRIBUTE	Tunnel-Type		64	integer

ATTRIBUTE	Acct-Tunnel-Connection	68	string

ATTRIBUTE	ARAP-Password           70      string
ATTRIBUTE	ARAP-Features           71      string
ATTRIBUTE	ARAP-Zone-Access        72      integer
ATTRIBUTE	ARAP-Security           73      integer
ATTRIBUTE	ARAP-Security-Data      74      string
ATTRIBUTE	Password-Retry          75      integer
ATTRIBUTE	Prompt                  76      integer
ATTRIBUTE	Connect-Info		77	string
ATTRIBUTE	Configuration-Token	78	string
ATTRIBUTE	EAP-Message		79	string
ATTRIBUTE	Message-Authenticator	80	octets
ATTRIBUTE	ARAP-Challenge-Response	84	string	# 10 octets
ATTRIBUTE	Acct-Interim-Interval   85      integer
ATTRIBUTE	NAS-Port-Id		87	string
ATTRIBUTE	Framed-Pool		88	string
ATTRIBUTE	NAS-IPv6-Address	95	octets	# really IPv6
ATTRIBUTE	Framed-Interface-Id	96	octets	# 8 octets
ATTRIBUTE	Framed-IPv6-Prefix	97	ipv6prefix	# stupid format
ATTRIBUTE	Login-IPv6-Host		98	octets	# really IPv6
ATTRIBUTE	Framed-IPv6-Route	99	string
ATTRIBUTE	Framed-IPv6-Pool	100	string
ATTRIBUTE   Delegated-IPv6-Prefix   123     ipv6prefix


ATTRIBUTE	Digest-Response		206	string
ATTRIBUTE	Digest-Attributes	207	octets	# stupid format

#
#	Experimental Non Protocol Attributes used by Cistron-Radiusd
#

# 	These attributes CAN go in the reply item list.
ATTRIBUTE	Fall-Through		500	integer
ATTRIBUTE	Exec-Program		502	string
ATTRIBUTE	Exec-Program-Wait	503	string

#	These attributes CANNOT go in the reply item list.
ATTRIBUTE	User-Category		1029	string
ATTRIBUTE	Group-Name		1030	string
ATTRIBUTE	Huntgroup-Name		1031	string
ATTRIBUTE	Simultaneous-Use	1034	integer
ATTRIBUTE	Strip-User-Name		1035	integer
ATTRIBUTE	Hint			1040	string
ATTRIBUTE	Pam-Auth		1041	string
ATTRIBUTE	Login-Time		1042	string
ATTRIBUTE	Stripped-User-Name	1043	string
ATTRIBUTE	Current-Time		1044	string
ATTRIBUTE	Realm			1045	string
ATTRIBUTE	No-Such-Attribute	1046	string
ATTRIBUTE	Packet-Type		1047	integer
ATTRIBUTE	Proxy-To-Realm		1048	string
ATTRIBUTE	Replicate-To-Realm	1049	string
ATTRIBUTE	Acct-Session-Start-Time	1050	date
ATTRIBUTE	Acct-Unique-Session-Id  1051	string
ATTRIBUTE	Client-IP-Address	1052	ipaddr
ATTRIBUTE	Ldap-UserDn		1053	string
ATTRIBUTE	NS-MTA-MD5-Password	1054	string
ATTRIBUTE	SQL-User-Name	 	1055	string
ATTRIBUTE	LM-Password		1057	octets
ATTRIBUTE	NT-Password		1058	octets
ATTRIBUTE	SMB-Account-CTRL	1059	integer
ATTRIBUTE	SMB-Account-CTRL-TEXT	1061	string
ATTRIBUTE	User-Profile		1062	string
ATTRIBUTE	Digest-Realm		1063	string
ATTRIBUTE	Digest-Nonce		1064	string
ATTRIBUTE	Digest-Method		1065	string
ATTRIBUTE	Digest-URI		1066	string
ATTRIBUTE	Digest-QOP		1067	string
ATTRIBUTE	Digest-Algorithm	1068	string
ATTRIBUTE	Digest-Body-Digest	1069	string
ATTRIBUTE	Digest-CNonce		1070	string
ATTRIBUTE	Digest-Nonce-Count	1071	string
ATTRIBUTE	Digest-User-Name	1072	string
ATTRIBUTE	Pool-Name		1073	string
ATTRIBUTE	Ldap-Group		1074	string
ATTRIBUTE	Module-Success-Message	1075	string
ATTRIBUTE	Module-Failure-Message	1076	string
#		X99-Fast		1077	integer

#
#	Non-Protocol Attributes
#	These attributes are used internally by the server
#
ATTRIBUTE	Auth-Type		1000	integer
ATTRIBUTE	Menu			1001	string
ATTRIBUTE	Termination-Menu	1002	string
ATTRIBUTE	Prefix			1003	string
ATTRIBUTE	Suffix			1004	string
ATTRIBUTE	Group			1005	string
ATTRIBUTE	Crypt-Password		1006	string
ATTRIBUTE	Connect-Rate		1007	integer
ATTRIBUTE	Add-Prefix		1008	string
ATTRIBUTE	Add-Suffix		1009	string
ATTRIBUTE	Expiration		1010	date
ATTRIBUTE	Autz-Type		1011	integer

#
#	Integer Translations
#

#	User Types

VALUE		Service-Type		Login-User		1
VALUE		Service-Type		Framed-User		2
VALUE		Service-Type		Callback-Login-User	3
VALUE		Service-Type		Callback-Framed-User	4
VALUE		Service-Type		Outbound-User		5
VALUE		Service-Type		Administrative-User	6
VALUE		Service-Type		NAS-Prompt-User		7
VALUE		Service-Type		Authenticate-Only	8
VALUE		Service-Type		Callback-NAS-Prompt	9
VALUE		Service-Type		Call-Check		10
VALUE		Service-Type		Callback-Administrative	11

#	Framed Protocols

VALUE		Framed-Protocol		PPP			1
VALUE		Framed-Protocol		SLIP			2
VALUE		Framed-Protocol		ARAP			3
VALUE		Framed-Protocol		Gandalf-SLML		4
VALUE		Framed-Protocol		Xylogics-IPX-SLIP	5
VALUE		Framed-Protocol		X.75-Synchronous	6

#	Framed Routing Values

VALUE		Framed-Routing		None			0
VALUE		Framed-Routing		Broadcast		1
VALUE		Framed-Routing		Listen			2
VALUE		Framed-Routing		Broadcast-Listen	3

#	Framed Compression Types

VALUE		Framed-Compression	None			0
VALUE		Framed-Compression	Van-Jacobson-TCP-IP	1
VALUE		Framed-Compression	IPX-Header-Compression	2
VALUE		Framed-Compression	Stac-LZS		3

#	Login Services

VALUE		Login-Service		Telnet			0
VALUE		Login-Service		Rlogin			1
VALUE		Login-Service		TCP-Clear		2
VALUE		Login-Service		PortMaster		3
VALUE		Login-Service		LAT			4
VALUE		Login-Service		X25-PAD			5
VALUE		Login-Service		X25-T3POS		6
VALUE		Login-Service		TCP-Clear-Quiet		7

#	Login-TCP-Port		(see /etc/services for more examples)

VALUE		Login-TCP-Port		Telnet			23
VALUE		Login-TCP-Port		Rlogin			513
VALUE		Login-TCP-Port		Rsh			514

#	Status Types

VALUE		Acct-Status-Type	Start			1
VALUE		Acct-Status-Type	Stop			2
VALUE		Acct-Status-Type	Interim-Update		3
VALUE		Acct-Status-Type	Alive			3
VALUE		Acct-Status-Type	Accounting-On		7
VALUE		Acct-Status-Type	Accounting-Off		8
#	RFC 2867 Additional Status-Type Values
VALUE		Acct-Status-Type	Tunnel-Start		9
VALUE		Acct-Status-Type	Tunnel-Stop		10
VALUE		Acct-Status-Type	Tunnel-Reject		11
VALUE		Acct-Status-Type	Tunnel-Link-Start	12
VALUE		Acct-Status-Type	Tunnel-Link-Stop	13
VALUE		Acct-Status-Type	Tunnel-Link-Reject	14

#	Authentication Types

VALUE		Acct-Authentic		RADIUS			1
VALUE		Acct-Authentic		Local			2

#	Termination Options

VALUE		Termination-Action	Default			0
VALUE		Termination-Action	RADIUS-Request		1

#	NAS Port Types

VALUE		NAS-Port-Type		Async			0
VALUE		NAS-Port-Type		Sync			1
VALUE		NAS-Port-Type		ISDN			2
VALUE		NAS-Port-Type		ISDN-V120		3
VALUE		NAS-Port-Type		ISDN-V110		4
VALUE		NAS-Port-Type		Virtual			5
VALUE		NAS-Port-Type		PIAFS			6
VALUE		NAS-Port-Type		HDLC-Clear-Channel	7
VALUE		NAS-Port-Type		X.25			8
VALUE		NAS-Port-Type		X.75			9
VALUE		NAS-Port-Type		G.3-Fax			10
VALUE		NAS-Port-Type		SDSL			11
VALUE		NAS-Port-Type		ADSL-CAP		12
VALUE		NAS-Port-Type		ADSL-DMT		13
VALUE		NAS-Port-Type		IDSL			14
VALUE		NAS-Port-Type		Ethernet		15
VALUE		NAS-Port-Type		xDSL			16
VALUE		NAS-Port-Type		Cable			17
VALUE		NAS-Port-Type		Wireless-Other		18
VALUE		NAS-Port-Type		Wireless-802.11		19

#	Acct Terminate Causes, available in 3.3.2 and later

VALUE           Acct-Terminate-Cause    User-Request            1
VALUE           Acct-Terminate-Cause    Lost-Carrier            2
VALUE           Acct-Terminate-Cause    Lost-Service            3
VALUE           Acct-Terminate-Cause    Idle-Timeout            4
VALUE           Acct-Terminate-Cause    Session-Timeout         5
VALUE           Acct-Terminate-Cause    Admin-Reset             6
VALUE           Acct-Terminate-Cause    Admin-Reboot            7
VALUE           Acct-Terminate-Cause    Port-Error              8
VALUE           Acct-Terminate-Cause    NAS-Error               9
VALUE           Acct-Terminate-Cause    NAS-Request             10
VALUE           Acct-Terminate-Cause    NAS-Reboot              11
VALUE           Acct-Terminate-Cause    Port-Unneeded           12
VALUE           Acct-Terminate-Cause    Port-Preempted          13
VALUE           Acct-Terminate-Cause    Port-Suspended          14
VALUE           Acct-Terminate-Cause    Service-Unavailable     15
VALUE           Acct-Terminate-Cause    Callback                16
VALUE           Acct-Terminate-Cause    User-Error              17
VALUE           Acct-Terminate-Cause    Host-Request            18

#VALUE		Tunnel-Type		L2TP			3
#VALUE		Tunnel-Medium-Type	IP			1

VALUE		Prompt			No-Echo			0
VALUE		Prompt			Echo			1

#
#	Non-Protocol Integer Translations
#

VALUE		Auth-Type		Local			0
VALUE		Auth-Type		System			1
VALUE		Auth-Type		SecurID			2
VALUE		Auth-Type		Crypt-Local		3
VALUE		Auth-Type		Reject			4
VALUE		Auth-Type		ActivCard		5
VALUE		Auth-Type		EAP			6
VALUE		Auth-Type		ARAP			7

#
#	Cistron extensions
#
VALUE		Auth-Type		Ldap			252
VALUE		Auth-Type		Pam			253
VALUE		Auth-Type		Accept			254

VALUE		Auth-Type		PAP			1024
VALUE		Auth-Type		CHAP			1025
VALUE		Auth-Type		LDAP			1026
VALUE		Auth-Type		PAM			1027
VALUE		Auth-Type		MS-CHAP			1028
VALUE		Auth-Type		Kerberos		1029
VALUE		Auth-Type		CRAM			1030
VALUE		Auth-Type		NS-MTA-MD5		1031
VALUE		Auth-Type		CRAM			1032
VALUE		Auth-Type		SMB			1033

#
#	Authorization type, too.
#
VALUE		Autz-Type		Local			0

#
#	Experimental Non-Protocol Integer Translations for Cistron-Radiusd
#
VALUE		Fall-Through		No			0
VALUE		Fall-Through		Yes			1

VALUE		Packet-Type	Access-Request			1
VALUE		Packet-Type	Access-Accept			2
VALUE		Packet-Type	Access-Reject			3
VALUE		Packet-Type	Accounting-Request		4
VALUE		Packet-Type	Accounting-Response		5
VALUE		Packet-Type	Accounting-Status		6
VALUE		Packet-Type	Password-Request		7
VALUE		Packet-Type	Password-Accept			8
VALUE		Packet-Type	Password-Reject			9
VALUE		Packet-Type	Accounting-Message		10
VALUE		Packet-Type	Access-Challenge		11
VALUE		Packet-Type	Status-Server			12
VALUE		Packet-Type	Status-Client			13


#
# Rublon
#

VENDOR          Rublon                  56247

BEGIN-VENDOR	Rublon
ATTRIBUTE       Rublon-Email            1       string  Rublon
END-VENDOR Rublon


#
# PaloAlto
#
VENDOR          PaloAlto                                25461

BEGIN-VENDOR	PaloAlto
ATTRIBUTE       PaloAlto-Admin-Role                     1       string  PaloAlto
ATTRIBUTE       PaloAlto-Admin-Access-Domain            2       string  PaloAlto
ATTRIBUTE       PaloAlto-Panorama-Admin-Role            3       string  PaloAlto
ATTRIBUTE       PaloAlto-Panorama-Admin-Access-Domain   4       string  PaloAlto
ATTRIBUTE       PaloAlto-User-Group                     5       string  PaloAlto
ATTRIBUTE       PaloAlto-User-Domain                    6       string  PaloAlto
ATTRIBUTE       PaloAlto-Client-Source-IP               7       string  PaloAlto
ATTRIBUTE       PaloAlto-Client-OS                      8       string  PaloAlto
ATTRIBUTE       PaloAlto-Client-Hostname                9       string  PaloAlto
ATTRIBUTE       PaloAlto-GlobalProtect-Client-Version   10      string  PaloAlto
END-VENDOR PaloAlto

#
#	Fortinet
#
VENDOR		Fortinet			12356

BEGIN-VENDOR	Fortinet
ATTRIBUTE	Fortinet-Group-Name			1	string
ATTRIBUTE	Fortinet-Client-IP-Address		2	octets
ATTRIBUTE	Fortinet-Vdom-Name			3	string
ATTRIBUTE	Fortinet-Client-IPv6-Address		4	octets
ATTRIBUTE	Fortinet-Interface-Name			5	string
ATTRIBUTE	Fortinet-Access-Profile			6	string
END-VENDOR Fortinet
#
#   Microsoft
#
VENDOR		Microsoft			311

BEGIN-VENDOR	Microsoft
ATTRIBUTE	MS-CHAP-Response			1	octets[50]
ATTRIBUTE	MS-CHAP-Error				2	string
ATTRIBUTE	MS-CHAP-CPW-1				3	octets[70]
ATTRIBUTE	MS-CHAP-CPW-2				4	octets[84]
ATTRIBUTE	MS-CHAP-LM-Enc-PW			5	octets
ATTRIBUTE	MS-CHAP-NT-Enc-PW			6	octets
ATTRIBUTE	MS-MPPE-Encryption-Policy		7	integer

VALUE	MS-MPPE-Encryption-Policy	Encryption-Allowed	1
VALUE	MS-MPPE-Encryption-Policy	Encryption-Required	2

# This is referred to as both singular and plural in the RFC.
# Plural seems to make more sense.
ATTRIBUTE	MS-MPPE-Encryption-Type			8	integer
ATTRIBUTE	MS-MPPE-Encryption-Types		8	integer

VALUE	MS-MPPE-Encryption-Types	RC4-40bit-Allowed	1
VALUE	MS-MPPE-Encryption-Types	RC4-128bit-Allowed	2
VALUE	MS-MPPE-Encryption-Types	RC4-40or128-bit-Allowed	6

ATTRIBUTE	MS-RAS-Vendor				9	integer	# content is Vendor-ID
ATTRIBUTE	MS-CHAP-Domain				10	string
ATTRIBUTE	MS-CHAP-Challenge			11	octets
ATTRIBUTE	MS-CHAP-MPPE-Keys			12	octets  encrypt=1
ATTRIBUTE	MS-BAP-Usage				13	integer
ATTRIBUTE	MS-Link-Utilization-Threshold		14	integer # values are 1-100
ATTRIBUTE	MS-Link-Drop-Time-Limit			15	integer
ATTRIBUTE	MS-MPPE-Send-Key			16	octets
ATTRIBUTE	MS-MPPE-Recv-Key			17	octets
ATTRIBUTE	MS-RAS-Version				18	string
ATTRIBUTE	MS-Old-ARAP-Password			19	octets
ATTRIBUTE	MS-New-ARAP-Password			20	octets
ATTRIBUTE	MS-ARAP-PW-Change-Reason		21	integer

ATTRIBUTE	MS-Filter				22	octets
ATTRIBUTE	MS-Acct-Auth-Type			23	integer
ATTRIBUTE	MS-Acct-EAP-Type			24	integer

ATTRIBUTE	MS-CHAP2-Response			25	octets[50]
ATTRIBUTE	MS-CHAP2-Success			26	octets
ATTRIBUTE	MS-CHAP2-CPW				27	octets[68]

ATTRIBUTE	MS-Primary-DNS-Server			28	ipaddr
ATTRIBUTE	MS-Secondary-DNS-Server			29	ipaddr
ATTRIBUTE	MS-Primary-NBNS-Server			30	ipaddr
ATTRIBUTE	MS-Secondary-NBNS-Server		31	ipaddr

#ATTRIBUTE	MS-ARAP-Challenge			33	octets[8]

## MS-RNAP
#
# http://download.microsoft.com/download/9/5/E/95EF66AF-9026-4BB0-A41D-A4F81802D92C/%5BMS-RNAP%5D.pdf

ATTRIBUTE	MS-RAS-Client-Name			34	string
ATTRIBUTE	MS-RAS-Client-Version			35	string
ATTRIBUTE	MS-Quarantine-IPFilter			36	octets
ATTRIBUTE	MS-Quarantine-Session-Timeout		37	integer
ATTRIBUTE	MS-User-Security-Identity		40	string
ATTRIBUTE	MS-Identity-Type			41	integer
ATTRIBUTE	MS-Service-Class			42	string
ATTRIBUTE	MS-Quarantine-User-Class		44	string
ATTRIBUTE	MS-Quarantine-State			45	integer
ATTRIBUTE	MS-Quarantine-Grace-Time		46	integer
ATTRIBUTE	MS-Network-Access-Server-Type		47	integer
ATTRIBUTE	MS-AFW-Zone				48	integer

VALUE	MS-AFW-Zone			MS-AFW-Zone-Boundary-Policy 1
VALUE	MS-AFW-Zone			MS-AFW-Zone-Unprotected-Policy 2
VALUE	MS-AFW-Zone			MS-AFW-Zone-Protected-Policy 3

ATTRIBUTE	MS-AFW-Protection-Level			49	integer

VALUE	MS-AFW-Protection-Level		HECP-Response-Sign-Only	1
VALUE	MS-AFW-Protection-Level		HECP-Response-Sign-And-Encrypt 2

ATTRIBUTE	MS-Machine-Name				50	string
ATTRIBUTE	MS-IPv6-Filter				51	octets
ATTRIBUTE	MS-IPv4-Remediation-Servers		52	octets
ATTRIBUTE	MS-IPv6-Remediation-Servers		53	octets
ATTRIBUTE	MS-RNAP-Not-Quarantine-Capable		54	integer

VALUE	MS-RNAP-Not-Quarantine-Capable	SoH-Sent		0
VALUE	MS-RNAP-Not-Quarantine-Capable	SoH-Not-Sent		1

ATTRIBUTE	MS-Quarantine-SOH			55	octets
ATTRIBUTE	MS-RAS-Correlation			56	octets

#  Or this might be 56?
ATTRIBUTE	MS-Extended-Quarantine-State		57	integer

ATTRIBUTE	MS-HCAP-User-Groups			58	string
ATTRIBUTE	MS-HCAP-Location-Group-Name		59	string
ATTRIBUTE	MS-HCAP-User-Name			60	string
ATTRIBUTE	MS-User-IPv4-Address			61	ipaddr
ATTRIBUTE	MS-User-IPv6-Address			62	ipv6addr
ATTRIBUTE	MS-TSG-Device-Redirection		63	integer

#
#	Integer Translations
#

#	MS-BAP-Usage Values

VALUE	MS-BAP-Usage			Not-Allowed		0
VALUE	MS-BAP-Usage			Allowed			1
VALUE	MS-BAP-Usage			Required		2

#	MS-ARAP-Password-Change-Reason Values

VALUE	MS-ARAP-PW-Change-Reason	Just-Change-Password	1
VALUE	MS-ARAP-PW-Change-Reason	Expired-Password	2
VALUE	MS-ARAP-PW-Change-Reason	Admin-Requires-Password-Change 3
VALUE	MS-ARAP-PW-Change-Reason	Password-Too-Short	4

#	MS-Acct-Auth-Type Values

VALUE	MS-Acct-Auth-Type		PAP			1
VALUE	MS-Acct-Auth-Type		CHAP			2
VALUE	MS-Acct-Auth-Type		MS-CHAP-1		3
VALUE	MS-Acct-Auth-Type		MS-CHAP-2		4
VALUE	MS-Acct-Auth-Type		EAP			5

#	MS-Acct-EAP-Type Values

VALUE	MS-Acct-EAP-Type		MD5			4
VALUE	MS-Acct-EAP-Type		OTP			5
VALUE	MS-Acct-EAP-Type		Generic-Token-Card	6
VALUE	MS-Acct-EAP-Type		TLS			13

#  MS-Identity-Type Values

VALUE	MS-Identity-Type		Machine-Health-Check	1
VALUE	MS-Identity-Type		Ignore-User-Lookup-Failure 2

#  MS-Quarantine-State Values

VALUE	MS-Quarantine-State		Full-Access		0
VALUE	MS-Quarantine-State		Quarantine		1
VALUE	MS-Quarantine-State		Probation		2

#  MS-Network-Access-Server-Type Values

VALUE	MS-Network-Access-Server-Type	Unspecified		0
VALUE	MS-Network-Access-Server-Type	Terminal-Server-Gateway	1
VALUE	MS-Network-Access-Server-Type	Remote-Access-Server	2
VALUE	MS-Network-Access-Server-Type	DHCP-Server		3
VALUE	MS-Network-Access-Server-Type	Wireless-Access-Point	4
VALUE	MS-Network-Access-Server-Type	HRA			5
VALUE	MS-Network-Access-Server-Type	HCAP-Server		6

#  MS-Extended-Quarantine-State Values

VALUE	MS-Extended-Quarantine-State	Transition		1
VALUE	MS-Extended-Quarantine-State	Infected		2
VALUE	MS-Extended-Quarantine-State	Unknown			3
VALUE	MS-Extended-Quarantine-State	No-Data			4

END-VENDOR Microsoft

#
# Cisco
#

VENDOR		Cisco				9

#
#	Standard attribute
#
BEGIN-VENDOR	Cisco

ATTRIBUTE	Cisco-AVPair				1	string
ATTRIBUTE	Cisco-NAS-Port				2	string

#
#  T.37 Store-and-Forward attributes.
#
ATTRIBUTE	Cisco-Fax-Account-Id-Origin		3	string
ATTRIBUTE	Cisco-Fax-Msg-Id			4	string
ATTRIBUTE	Cisco-Fax-Pages				5	string
ATTRIBUTE	Cisco-Fax-Coverpage-Flag		6	string
ATTRIBUTE	Cisco-Fax-Modem-Time			7	string
ATTRIBUTE	Cisco-Fax-Connect-Speed			8	string
ATTRIBUTE	Cisco-Fax-Recipient-Count		9	string
ATTRIBUTE	Cisco-Fax-Process-Abort-Flag		10	string
ATTRIBUTE	Cisco-Fax-Dsn-Address			11	string
ATTRIBUTE	Cisco-Fax-Dsn-Flag			12	string
ATTRIBUTE	Cisco-Fax-Mdn-Address			13	string
ATTRIBUTE	Cisco-Fax-Mdn-Flag			14	string
ATTRIBUTE	Cisco-Fax-Auth-Status			15	string
ATTRIBUTE	Cisco-Email-Server-Address		16	string
ATTRIBUTE	Cisco-Email-Server-Ack-Flag		17	string
ATTRIBUTE	Cisco-Gateway-Id			18	string
ATTRIBUTE	Cisco-Call-Type				19	string
ATTRIBUTE	Cisco-Port-Used				20	string
ATTRIBUTE	Cisco-Abort-Cause			21	string

#
#  Voice over IP attributes.
#
ATTRIBUTE	h323-remote-address			23	string
ATTRIBUTE	h323-conf-id				24	string
ATTRIBUTE	h323-setup-time				25	string
ATTRIBUTE	h323-call-origin			26	string
ATTRIBUTE	h323-call-type				27	string
ATTRIBUTE	h323-connect-time			28	string
ATTRIBUTE	h323-disconnect-time			29	string
ATTRIBUTE	h323-disconnect-cause			30	string
ATTRIBUTE	h323-voice-quality			31	string
ATTRIBUTE	h323-gw-id				33	string
ATTRIBUTE	h323-incoming-conf-id			35	string

ATTRIBUTE	Cisco-Policy-Up				37	string
ATTRIBUTE	Cisco-Policy-Down			38	string

ATTRIBUTE	sip-conf-id				100	string
ATTRIBUTE	h323-credit-amount			101	string
ATTRIBUTE	h323-credit-time			102	string
ATTRIBUTE	h323-return-code			103	string
ATTRIBUTE	h323-prompt-id				104	string
ATTRIBUTE	h323-time-and-day			105	string
ATTRIBUTE	h323-redirect-number			106	string
ATTRIBUTE	h323-preferred-lang			107	string
ATTRIBUTE	h323-redirect-ip-address		108	string
ATTRIBUTE	h323-billing-model			109	string
ATTRIBUTE	h323-currency				110	string
ATTRIBUTE	subscriber				111	string
ATTRIBUTE	gw-rxd-cdn				112	string
ATTRIBUTE	gw-final-xlated-cdn			113	string
ATTRIBUTE	remote-media-address			114	string
ATTRIBUTE	release-source				115	string
ATTRIBUTE	gw-rxd-cgn				116	string
ATTRIBUTE	gw-final-xlated-cgn			117	string

# SIP Attributes
ATTRIBUTE	call-id					141	string
ATTRIBUTE	session-protocol			142	string
ATTRIBUTE	method					143	string
ATTRIBUTE	prev-hop-via				144	string
ATTRIBUTE	prev-hop-ip				145	string
ATTRIBUTE	incoming-req-uri			146	string
ATTRIBUTE	outgoing-req-uri			147	string
ATTRIBUTE	next-hop-ip				148	string
ATTRIBUTE	next-hop-dn				149	string
ATTRIBUTE	sip-hdr					150	string

#
#	Extra attributes sent by the Cisco, if you configure
#	"radius-server vsa accounting" (requires IOS11.2+).
#
ATTRIBUTE	Cisco-Multilink-ID			187	integer
ATTRIBUTE	Cisco-Num-In-Multilink			188	integer
ATTRIBUTE	Cisco-Pre-Input-Octets			190	integer
ATTRIBUTE	Cisco-Pre-Output-Octets			191	integer
ATTRIBUTE	Cisco-Pre-Input-Packets			192	integer
ATTRIBUTE	Cisco-Pre-Output-Packets		193	integer
ATTRIBUTE	Cisco-Maximum-Time			194	integer
ATTRIBUTE	Cisco-Disconnect-Cause			195	integer
ATTRIBUTE	Cisco-Data-Rate				197	integer
ATTRIBUTE	Cisco-PreSession-Time			198	integer
ATTRIBUTE	Cisco-PW-Lifetime			208	integer
ATTRIBUTE	Cisco-IP-Direct				209	integer
ATTRIBUTE	Cisco-PPP-VJ-Slot-Comp			210	integer
ATTRIBUTE	Cisco-PPP-Async-Map			212	integer
ATTRIBUTE	Cisco-IP-Pool-Definition		217	string
ATTRIBUTE	Cisco-Assign-IP-Pool			218	integer
ATTRIBUTE	Cisco-Route-IP				228	integer
ATTRIBUTE	Cisco-Link-Compression			233	integer
ATTRIBUTE	Cisco-Target-Util			234	integer
ATTRIBUTE	Cisco-Maximum-Channels			235	integer
ATTRIBUTE	Cisco-Data-Filter			242	integer
ATTRIBUTE	Cisco-Call-Filter			243	integer
ATTRIBUTE	Cisco-Idle-Limit			244	integer
ATTRIBUTE	Cisco-Subscriber-Password		249	string
ATTRIBUTE	Cisco-Account-Info			250	string
ATTRIBUTE	Cisco-Service-Info			251	string
ATTRIBUTE	Cisco-Command-Code			252	string
ATTRIBUTE	Cisco-Control-Info			253	string
ATTRIBUTE	Cisco-Xmit-Rate				255	integer

VALUE	Cisco-Disconnect-Cause		No-Reason		0
VALUE	Cisco-Disconnect-Cause		No-Disconnect		1
VALUE	Cisco-Disconnect-Cause		Unknown			2
VALUE	Cisco-Disconnect-Cause		Call-Disconnect		3
VALUE	Cisco-Disconnect-Cause		CLID-Authentication-Failure 4
VALUE	Cisco-Disconnect-Cause		No-Modem-Available	9
VALUE	Cisco-Disconnect-Cause		No-Carrier		10
VALUE	Cisco-Disconnect-Cause		Lost-Carrier		11
VALUE	Cisco-Disconnect-Cause		No-Detected-Result-Codes 12
VALUE	Cisco-Disconnect-Cause		User-Ends-Session	20
VALUE	Cisco-Disconnect-Cause		Idle-Timeout		21
VALUE	Cisco-Disconnect-Cause		Exit-Telnet-Session	22
VALUE	Cisco-Disconnect-Cause		No-Remote-IP-Addr	23
VALUE	Cisco-Disconnect-Cause		Exit-Raw-TCP		24
VALUE	Cisco-Disconnect-Cause		Password-Fail		25
VALUE	Cisco-Disconnect-Cause		Raw-TCP-Disabled	26
VALUE	Cisco-Disconnect-Cause		Control-C-Detected	27
VALUE	Cisco-Disconnect-Cause		EXEC-Program-Destroyed	28
VALUE	Cisco-Disconnect-Cause		Close-Virtual-Connection	29
VALUE	Cisco-Disconnect-Cause		End-Virtual-Connection	30
VALUE	Cisco-Disconnect-Cause		Exit-Rlogin 		31
VALUE	Cisco-Disconnect-Cause		Invalid-Rlogin-Option	32
VALUE	Cisco-Disconnect-Cause		Insufficient-Resources	33
VALUE	Cisco-Disconnect-Cause		Timeout-PPP-LCP		40
VALUE	Cisco-Disconnect-Cause		Failed-PPP-LCP-Negotiation 41
VALUE	Cisco-Disconnect-Cause		Failed-PPP-PAP-Auth-Fail 42
VALUE	Cisco-Disconnect-Cause		Failed-PPP-CHAP-Auth	43
VALUE	Cisco-Disconnect-Cause		Failed-PPP-Remote-Auth	44
VALUE	Cisco-Disconnect-Cause		PPP-Remote-Terminate	45
VALUE	Cisco-Disconnect-Cause		PPP-Closed-Event	46
VALUE	Cisco-Disconnect-Cause		NCP-Closed-PPP		47
VALUE	Cisco-Disconnect-Cause		MP-Error-PPP		48
VALUE	Cisco-Disconnect-Cause		PPP-Maximum-Channels	49
VALUE	Cisco-Disconnect-Cause		Tables-Full		50
VALUE	Cisco-Disconnect-Cause		Resources-Full		51
VALUE	Cisco-Disconnect-Cause		Invalid-IP-Address	52
VALUE	Cisco-Disconnect-Cause		Bad-Hostname		53
VALUE	Cisco-Disconnect-Cause		Bad-Port		54
VALUE	Cisco-Disconnect-Cause		Reset-TCP		60
VALUE	Cisco-Disconnect-Cause		TCP-Connection-Refused	61
VALUE	Cisco-Disconnect-Cause		Timeout-TCP		62
VALUE	Cisco-Disconnect-Cause		Foreign-Host-Close-TCP	63
VALUE	Cisco-Disconnect-Cause		TCP-Network-Unreachable	64
VALUE	Cisco-Disconnect-Cause		TCP-Host-Unreachable	65
VALUE	Cisco-Disconnect-Cause		TCP-Network-Admin-Unreachable	66
VALUE	Cisco-Disconnect-Cause		TCP-Port-Unreachable	67
VALUE	Cisco-Disconnect-Cause		Session-Timeout		100
VALUE	Cisco-Disconnect-Cause		Session-Failed-Security	101
VALUE	Cisco-Disconnect-Cause		Session-End-Callback	102
VALUE	Cisco-Disconnect-Cause		Invalid-Protocol	120
VALUE	Cisco-Disconnect-Cause		RADIUS-Disconnect	150
VALUE	Cisco-Disconnect-Cause		Local-Admin-Disconnect	151
VALUE	Cisco-Disconnect-Cause		SNMP-Disconnect		152
VALUE	Cisco-Disconnect-Cause		V110-Retries		160
VALUE	Cisco-Disconnect-Cause		PPP-Authentication-Timeout	170
VALUE	Cisco-Disconnect-Cause		Local-Hangup		180
VALUE	Cisco-Disconnect-Cause		Remote-Hangup		185
VALUE	Cisco-Disconnect-Cause		T1-Quiesced		190
VALUE	Cisco-Disconnect-Cause		Call-Duration		195
VALUE	Cisco-Disconnect-Cause		VPN-User-Disconnect	600
VALUE	Cisco-Disconnect-Cause		VPN-Carrier-Loss	601
VALUE	Cisco-Disconnect-Cause		VPN-No-Resources	602
VALUE	Cisco-Disconnect-Cause		VPN-Bad-Control-Packet	603
VALUE	Cisco-Disconnect-Cause		VPN-Admin-Disconnect	604
VALUE	Cisco-Disconnect-Cause		VPN-Tunnel-Shut		605
VALUE	Cisco-Disconnect-Cause		VPN-Local-Disconnect	606
VALUE	Cisco-Disconnect-Cause		VPN-Session-Limit	607
VALUE	Cisco-Disconnect-Cause		VPN-Call-Redirect	608

END-VENDOR	Cisco

#
# Cisco-ASA
#

VENDOR Cisco-ASA 3076

BEGIN-VENDOR Cisco-ASA

ATTRIBUTE	ASA-Simultaneous-Logins			2	integer
ATTRIBUTE	ASA-Primary-DNS				5	string
ATTRIBUTE	ASA-Secondary-DNS			6	string
ATTRIBUTE	ASA-Primary-WINS			7	string
ATTRIBUTE	ASA-Secondary-WINS			8	string
ATTRIBUTE	ASA-SEP-Card-Assignment			9	integer
ATTRIBUTE	ASA-Tunneling-Protocols			11	integer
ATTRIBUTE	ASA-IPsec-Sec-Association		12	string
ATTRIBUTE	ASA-IPsec-Authentication		13	integer
ATTRIBUTE	ASA-Banner1				15	string
ATTRIBUTE	ASA-IPsec-Allow-Passwd-Store		16	integer
ATTRIBUTE	ASA-Use-Client-Address			17	integer
ATTRIBUTE	ASA-PPTP-Encryption			20	integer
ATTRIBUTE	ASA-L2TP-Encryption			21	integer
ATTRIBUTE	ASA-Group-Policy			25	string
ATTRIBUTE	ASA-IPsec-Split-Tunnel-List		27	string
ATTRIBUTE	ASA-IPsec-Default-Domain		28	string
ATTRIBUTE	ASA-IPsec-Split-DNS-Names		29	string
ATTRIBUTE	ASA-IPsec-Tunnel-Type			30	integer
ATTRIBUTE	ASA-IPsec-Mode-Config			31	integer
ATTRIBUTE	ASA-IPsec-Over-UDP			34	integer
ATTRIBUTE	ASA-IPsec-Over-UDP-Port			35	integer
ATTRIBUTE	ASA-Banner2				36	string
ATTRIBUTE	ASA-PPTP-MPPC-Compression		37	integer
ATTRIBUTE	ASA-L2TP-MPPC-Compression		38	integer
ATTRIBUTE	ASA-IPsec-IP-Compression		39	integer
ATTRIBUTE	ASA-IPsec-IKE-Peer-ID-Check		40	integer
ATTRIBUTE	ASA-IKE-Keep-Alives			41	integer
ATTRIBUTE	ASA-IPsec-Auth-On-Rekey			42	integer
ATTRIBUTE	ASA-Required-Client-Firewall-Vendor-Code 45	integer
ATTRIBUTE	ASA-Required-Client-Firewall-Product-Code 46	integer
ATTRIBUTE	ASA-Required-Client-Firewall-Description 47	string
ATTRIBUTE	ASA-Require-HW-Client-Auth		48	integer
ATTRIBUTE	ASA-Required-Individual-User-Auth	49	integer
ATTRIBUTE	ASA-Authenticated-User-Idle-Timeout	50	integer
ATTRIBUTE	ASA-Cisco-IP-Phone-Bypass		51	integer
ATTRIBUTE	ASA-IPsec-Split-Tunneling-Policy	55	integer
ATTRIBUTE	ASA-IPsec-Required-Client-Firewall-Capability 56	integer
ATTRIBUTE	ASA-IPsec-Client-Firewall-Filter-Name	57	string
ATTRIBUTE	ASA-IPsec-Client-Firewall-Filter-Optional 58	integer
ATTRIBUTE	ASA-IPsec-Backup-Servers		59	integer
ATTRIBUTE	ASA-IPsec-Backup-Server-List		60	string
ATTRIBUTE	ASA-DHCP-Network-Scope			61	string
ATTRIBUTE	ASA-Intercept-DHCP-Configure-Msg	62	integer
ATTRIBUTE	ASA-MS-Client-Subnet-Mask		63	integer
ATTRIBUTE	ASA-Allow-Network-Extension-Mode	64	integer
ATTRIBUTE	ASA-Authorization-Type			65	integer
ATTRIBUTE	ASA-Authorization-Required		66	integer
ATTRIBUTE	ASA-Authorization-DN-Field		67	string
ATTRIBUTE	ASA-Authorization-DN-Field		67	string
ATTRIBUTE	ASA-IKE-KeepAlive-Confidence-Interval	68	integer
ATTRIBUTE	ASA-WebVPN-Content-Filter-Parameters	69	integer
ATTRIBUTE	ASA-WebVPN-HTML-Filter			69	integer
ATTRIBUTE	ASA-WebVPN-URL-List			71	string
ATTRIBUTE	ASA-WebVPN-Port-Forwarding-List		72	string
ATTRIBUTE	ASA-WebVPN-Access-List			73	string
ATTRIBUTE	ASA-WebVPNACL				73	string
ATTRIBUTE	ASA-WebVPN-HTTP-Proxy-IP-Address	74	string
ATTRIBUTE	ASA-Cisco-LEAP-Bypass			75	integer
ATTRIBUTE	ASA-WebVPN-Default-Homepage		76	string
ATTRIBUTE	ASA-Client-Type-Version-Limiting	77	string
ATTRIBUTE	ASA-WebVPN-Group-based-HTTP/HTTPS-Proxy-Exception-List	78	string
ATTRIBUTE	ASA-WebVPN-Port-Forwarding-Name		79	string
ATTRIBUTE	ASA-IE-Proxy-Server			80	string
ATTRIBUTE	ASA-IE-Proxy-Server-Policy		81	integer
ATTRIBUTE	ASA-IE-Proxy-Exception-List		82	string
ATTRIBUTE	ASA-IE-Proxy-Bypass-Local		83	integer
ATTRIBUTE	ASA-IKE-Keepalive-Retry-Interval	84	integer
ATTRIBUTE	ASA-Tunnel-Group-Lock			85	string
ATTRIBUTE	ASA-Access-List-Inbound			86	string
ATTRIBUTE	ASA-Access-List-Outbound		87	string
ATTRIBUTE	ASA-Perfect-Forward-Secrecy-Enable	88	integer
ATTRIBUTE	ASA-NAC-Enable				89	integer
ATTRIBUTE	ASA-NAC-Status-Query-Timer		90	integer
ATTRIBUTE	ASA-NAC-Revalidation-Timer		91	integer
ATTRIBUTE	ASA-NAC-Default-ACL			92	string
ATTRIBUTE	ASA-WebVPN-URL-Entry-Enable		93	integer
ATTRIBUTE	ASA-WebVPN-File-Access-Enable		94	integer
ATTRIBUTE	ASA-WebVPN-File-Server-Entry-Enable	95	integer
ATTRIBUTE	ASA-WebVPN-File-Server-Browsing-Enable	96	integer
ATTRIBUTE	ASA-WebVPN-Port-Forwarding-Enable	97	integer
ATTRIBUTE	ASA-WebVPN-Port-Forwarding-Exchange-Proxy-Enable 98	integer
ATTRIBUTE	ASA-WebVPN-Port-Forwarding-HTTP-Proxy	99	integer
ATTRIBUTE	ASA-WebVPN-Citrix-Metaframe-Enable	101	integer
ATTRIBUTE	ASA-WebVPN-Apply-ACL			102	integer
ATTRIBUTE	ASA-WebVPN-SSL-VPN-Client-Enable	103	integer
ATTRIBUTE	ASA-WebVPN-SSL-VPN-Client-Required	104	integer
ATTRIBUTE	ASA-WebVPN-SSL-VPN-Client-Keep-Installation 105	integer
ATTRIBUTE	ASA-SVC-Keepalive			107	integer
ATTRIBUTE	ASA-WebVPN-SVC-Keepalive-Frequency	107	integer
ATTRIBUTE	ASA-SVC-DPD-Interval-Client		108	integer
ATTRIBUTE	ASA-WebVPN-SVC-Client-DPD-Frequency	108	integer
ATTRIBUTE	ASA-SVC-DPD-Interval-Gateway		109	integer
ATTRIBUTE	ASA-WebVPN-SVC-Gateway-DPD-Frequency	109	integer
ATTRIBUTE	ASA-SVC-Rekey-Time			110	integer
ATTRIBUTE	ASA-WebVPN-SVC-Rekey-Time		110	integer
ATTRIBUTE	ASA-WebVPN-SVC-Rekey-Method		111	integer
ATTRIBUTE	ASA-WebVPN-SVC-Compression		112	integer
ATTRIBUTE	ASA-WebVPN-Customization		113	string
ATTRIBUTE	ASA-WebVPN-SSO-Server-Name		114	string
ATTRIBUTE	ASA-WebVPN-Deny-Message			116	string
ATTRIBUTE	ASA-WebVPN-HTTP-Compression		120	integer
ATTRIBUTE	ASA-WebVPN-Keepalive-Ignore		121	integer
ATTRIBUTE	ASA-Extended-Authentication-On-Rekey	122	integer
ATTRIBUTE	ASA-SVC-DTLS				123	integer
ATTRIBUTE	ASA-WebVPN-SVC-DTLS-Enable		123	integer
ATTRIBUTE	ASA-WebVPN-Auto-HTTP-Signon		124	string
ATTRIBUTE	ASA-SVC-MTU				125	integer
ATTRIBUTE	ASA-WebVPN-SVC-DTLS-MTU			125	integer
ATTRIBUTE	ASA-WebVPN-Hidden-Shares		126	integer
ATTRIBUTE	ASA-SVC-Modules				127	string
ATTRIBUTE	ASA-SVC-Profiles			128	string
ATTRIBUTE	ASA-SVC-Ask				131	integer
ATTRIBUTE	ASA-SVC-Ask-Timeout			132	integer
ATTRIBUTE	ASA-IE-Proxy-PAC-URL			133	string
ATTRIBUTE	ASA-Strip-Realm				135	integer
ATTRIBUTE	ASA-Smart-Tunnel			136	string
ATTRIBUTE	ASA-WebVPN-Smart-Tunnel			136	string
ATTRIBUTE	ASA-WebVPN-ActiveX-Relay		137	integer
ATTRIBUTE	ASA-Smart-Tunnel-Auto			138	integer
ATTRIBUTE	ASA-WebVPN-Smart-Tunnel-Auto-Start	138	integer
ATTRIBUTE	ASA-Smart-Tunnel-Auto-Signon-Enable	139	string
ATTRIBUTE	ASA-WebVPN-Smart-Tunnel-Auto-Sign-On	139	string
ATTRIBUTE	ASA-VLAN				140	integer
ATTRIBUTE	ASA-NAC-Settings			141	string
ATTRIBUTE	ASA-Member-Of				145	string
ATTRIBUTE	ASA-TunnelGroupName			146	string
ATTRIBUTE	ASA-WebVPN-Idle-Timeout-Alert-Interval	148	integer
ATTRIBUTE	ASA-WebVPN-Session-Timeout-Alert-Interval 149	integer
ATTRIBUTE	ASA-ClientType				150	integer
ATTRIBUTE	ASA-SessionType				151	integer
ATTRIBUTE	ASA-SessionSubtype			152	integer
ATTRIBUTE	ASA-WebVPN-Download_Max-Size		157	integer
ATTRIBUTE	ASA-WebVPN-Upload-Max-Size		158	integer
ATTRIBUTE	ASA-WebVPN-Post-Max-Size		159	integer
ATTRIBUTE	ASA-WebVPN-User-Storage			160	string
ATTRIBUTE	ASA-WebVPN-Storage-Objects		161	string
ATTRIBUTE	ASA-WebVPN-Storage-Key			162	string
ATTRIBUTE	ASA-WebVPN-VDI				163	string
ATTRIBUTE	ASA-Address-Pools			217	string
ATTRIBUTE	ASA-IPv6-Address-Pools			218	string
ATTRIBUTE	ASA-IPv6-VPN-Filter			219	string
ATTRIBUTE	ASA-Privilege-Level			220	integer
ATTRIBUTE	ASA-WebVPN-UNIX-User-ID			221	integer
ATTRIBUTE	ASA-WebVPN-UNIX-Group-ID		222	integer
ATTRIBUTE	ASA-WebVPN-Macro-Substitution-Value1	223	string
ATTRIBUTE	ASA-WebVPN-Macro-Substitution-Value2	224	string
ATTRIBUTE	ASA-WebVPNSmart-Card-Removal-Disconnect	225	integer
ATTRIBUTE	ASA-WebVPN-Smart-Tunnel-Tunnel-Policy	227	string
ATTRIBUTE	ASA-WebVPN-Home-Page-Use-Smart-Tunnel	228	integer

VALUE	ASA-Authorization-Required	No			0
VALUE	ASA-Authorization-Required	Yes			1

VALUE	ASA-Authorization-Type		None			0
VALUE	ASA-Authorization-Type		Radius			1
VALUE	ASA-Authorization-Type		LDAP			2

VALUE	ASA-Cisco-IP-Phone-Bypass	Disabled		0
VALUE	ASA-Cisco-IP-Phone-Bypass	Enabled			1

VALUE	ASA-Cisco-LEAP-Bypass		Disabled		0
VALUE	ASA-Cisco-LEAP-Bypass		Enabled			1

VALUE	ASA-ClientType			Cisco-VPN-Client-IKEv1	1
VALUE	ASA-ClientType			AnyConnect-Client-SSL-VPN 2
VALUE	ASA-ClientType			Clientless-SSL-VPN	3
VALUE	ASA-ClientType			Cut-Through-Proxy	4
VALUE	ASA-ClientType			L2TP/IPsec-SSL-VPN	5
VALUE	ASA-ClientType			AnyConnect-Client-IPSec-VPN-IKEv2 6

VALUE	ASA-Extended-Authentication-On-Rekey Disabled		0
VALUE	ASA-Extended-Authentication-On-Rekey Enabled		1

VALUE	ASA-IE-Proxy-Bypass-Local	None			0
VALUE	ASA-IE-Proxy-Bypass-Local	Local			1

VALUE	ASA-IE-Proxy-Server-Policy	No-Modify		1
VALUE	ASA-IE-Proxy-Server-Policy	No-Proxy		2
VALUE	ASA-IE-Proxy-Server-Policy	Auto-detect		3
VALUE	ASA-IE-Proxy-Server-Policy	Use-Concentrator-Setting 4

VALUE	ASA-IKE-Keep-Alives		Disabled		0
VALUE	ASA-IKE-Keep-Alives		Enabled			1

VALUE	ASA-Allow-Network-Extension-Mode Disabled		0
VALUE	ASA-Allow-Network-Extension-Mode Enabled		1

VALUE	ASA-Intercept-DHCP-Configure-Msg Disabled		0
VALUE	ASA-Intercept-DHCP-Configure-Msg Enabled		1

VALUE	ASA-IPsec-Allow-Passwd-Store	Disabled		0
VALUE	ASA-IPsec-Allow-Passwd-Store	Enabled			1

VALUE	ASA-IPsec-Authentication	None			0
VALUE	ASA-IPsec-Authentication	RADIUS			1
VALUE	ASA-IPsec-Authentication	LDAP-Authorization-only	2
VALUE	ASA-IPsec-Authentication	NT-Domain		3
VALUE	ASA-IPsec-Authentication	SDI			4
VALUE	ASA-IPsec-Authentication	Internal		5
VALUE	ASA-IPsec-Authentication	RADIUS-with-Expiry	6
VALUE	ASA-IPsec-Authentication	Kerberos/Active-Directory 7

VALUE	ASA-IPsec-Auth-On-Rekey		Disabled		0
VALUE	ASA-IPsec-Auth-On-Rekey		Enabled			1

VALUE	ASA-IPsec-Backup-Servers	Use-Client-Configured-List 1
VALUE	ASA-IPsec-Backup-Servers	Disable-and-clear-client-list 2
VALUE	ASA-IPsec-Backup-Servers	Use-Backup-Server-List	3

VALUE	ASA-IPsec-Client-Firewall-Filter-Optional Required	0
VALUE	ASA-IPsec-Client-Firewall-Filter-Optional Optional	1

VALUE	ASA-IPsec-IKE-Peer-ID-Check	Required		1
VALUE	ASA-IPsec-IKE-Peer-ID-Check	If-Supported-By-Peer-Certificate 2
VALUE	ASA-IPsec-IKE-Peer-ID-Check	Do-Not-Check		3

VALUE	ASA-IPsec-IP-Compression	Disabled		0
VALUE	ASA-IPsec-IP-Compression	Enabled			1

VALUE	ASA-IPsec-Mode-Config		Disabled		0
VALUE	ASA-IPsec-Mode-Config		Enabled			1

VALUE	ASA-IPsec-Over-UDP		Disabled		0
VALUE	ASA-IPsec-Over-UDP		Enabled			1

VALUE	ASA-IPsec-Required-Client-Firewall-Capability None	0
VALUE	ASA-IPsec-Required-Client-Firewall-Capability Policy-Remotely-Defined 1
VALUE	ASA-IPsec-Required-Client-Firewall-Capability Policy-Pushed 2
VALUE	ASA-IPsec-Required-Client-Firewall-Capability Policy-from-Server 4

VALUE	ASA-IPsec-Split-Tunneling-Policy No-Split-Tunneling	0
VALUE	ASA-IPsec-Split-Tunneling-Policy Split-Tunneling	1
VALUE	ASA-IPsec-Split-Tunneling-Policy Local-LAN-Permitted	2

VALUE	ASA-IPsec-Tunnel-Type		LAN-to-LAN		1
VALUE	ASA-IPsec-Tunnel-Type		Remote-Access		2

VALUE	ASA-L2TP-MPPC-Compression	Disabled		0
VALUE	ASA-L2TP-MPPC-Compression	Enabled			1

VALUE	ASA-NAC-Enable			No			0
VALUE	ASA-NAC-Enable			Yes			1

VALUE	ASA-Perfect-Forward-Secrecy-Enable No			0
VALUE	ASA-Perfect-Forward-Secrecy-Enable Yes			1

VALUE	ASA-PPTP-MPPC-Compression	Disabled		0
VALUE	ASA-PPTP-MPPC-Compression	Enabled			1

VALUE	ASA-Required-Client-Firewall-Vendor-Code Cisco-CIC	1
VALUE	ASA-Required-Client-Firewall-Vendor-Code Zone-Labs	2
VALUE	ASA-Required-Client-Firewall-Vendor-Code NetworkICE	3
VALUE	ASA-Required-Client-Firewall-Vendor-Code Sygate		4
VALUE	ASA-Required-Client-Firewall-Vendor-Code Cisco-IPSA	5

VALUE	ASA-Required-Individual-User-Auth Disabled		0
VALUE	ASA-Required-Individual-User-Auth Enabled		1

VALUE	ASA-Require-HW-Client-Auth	Disabled		0
VALUE	ASA-Require-HW-Client-Auth	Enabled			1

VALUE	ASA-SessionSubtype		None			0
VALUE	ASA-SessionSubtype		Clientless		1
VALUE	ASA-SessionSubtype		Client			2
VALUE	ASA-SessionSubtype		Client-Only		3

VALUE	ASA-SessionType			None			0
VALUE	ASA-SessionType			AnyConnect-Client-SSL-VPN 1
VALUE	ASA-SessionType			AnyConnect-Client-IPSec-VPN/IKEv2 2
VALUE	ASA-SessionType			Clientless-SSL-VPN	3
VALUE	ASA-SessionType			Clientless-Email-Proxy	4
VALUE	ASA-SessionType			Cisco-VPN-Client/IKEv1	5
VALUE	ASA-SessionType			IKEv1-LAN-to-LAN	6
VALUE	ASA-SessionType			IKEv2-LAN-to-LAN	7
VALUE	ASA-SessionType			VPN-Load-Balancing	8

VALUE	ASA-Smart-Tunnel-Auto		Disabled		0
VALUE	ASA-Smart-Tunnel-Auto		Enabled			1
VALUE	ASA-Smart-Tunnel-Auto		AutoStart		2

VALUE	ASA-Strip-Realm			Disabled		0
VALUE	ASA-Strip-Realm			Enabled			1

VALUE	ASA-SVC-Ask			Disabled		0
VALUE	ASA-SVC-Ask			Enabled			1
VALUE	ASA-SVC-Ask			Enable-Default-Service	3
VALUE	ASA-SVC-Ask			Enable-Default-Clientless 5

VALUE	ASA-SVC-DTLS			FALSE			0
VALUE	ASA-SVC-DTLS			TRUE			1

VALUE	ASA-Use-Client-Address		Disabled		0
VALUE	ASA-Use-Client-Address		Enabled			1

VALUE	ASA-WebVPN-Apply-ACL		Disabled		0
VALUE	ASA-WebVPN-Apply-ACL		Enabled			1

VALUE	ASA-WebVPN-Citrix-Metaframe-Enable Disabled		0
VALUE	ASA-WebVPN-Citrix-Metaframe-Enable Enabled		1

VALUE	ASA-WebVPN-File-Access-Enable	Disabled		0
VALUE	ASA-WebVPN-File-Access-Enable	Enabled			1

VALUE	ASA-WebVPN-File-Server-Browsing-Enable Disabled		0
VALUE	ASA-WebVPN-File-Server-Browsing-Enable Enabled		1

VALUE	ASA-WebVPN-File-Server-Entry-Enable Disabled		0
VALUE	ASA-WebVPN-File-Server-Entry-Enable Enabled		1

VALUE	ASA-WebVPN-Hidden-Shares	None			0
VALUE	ASA-WebVPN-Hidden-Shares	Visible			1

VALUE	ASA-WebVPN-HTTP-Compression	Off			0
VALUE	ASA-WebVPN-HTTP-Compression	Deflate-Compression	1

VALUE	ASA-WebVPN-Port-Forwarding-Enable Disabled		0
VALUE	ASA-WebVPN-Port-Forwarding-Enable Enabled		1

VALUE	ASA-WebVPN-Port-Forwarding-Exchange-Proxy-Enable Disabled 0
VALUE	ASA-WebVPN-Port-Forwarding-Exchange-Proxy-Enable Enabled 1

VALUE	ASA-WebVPN-Port-Forwarding-HTTP-Proxy Disabled		0
VALUE	ASA-WebVPN-Port-Forwarding-HTTP-Proxy Enabled		1

VALUE	ASA-WebVPNSmart-Card-Removal-Disconnect Disabled	0
VALUE	ASA-WebVPNSmart-Card-Removal-Disconnect Enabled		1

VALUE	ASA-WebVPN-Smart-Tunnel-Auto-Start Disabled		0
VALUE	ASA-WebVPN-Smart-Tunnel-Auto-Start Enabled		1
VALUE	ASA-WebVPN-Smart-Tunnel-Auto-Start AutoStart		2

VALUE	ASA-WebVPN-SSL-VPN-Client-Enable Disabled		0
VALUE	ASA-WebVPN-SSL-VPN-Client-Enable Enabled		1

VALUE	ASA-WebVPN-SSL-VPN-Client-Keep-Installation Disabled	0
VALUE	ASA-WebVPN-SSL-VPN-Client-Keep-Installation Enabled	1

VALUE	ASA-WebVPN-SSL-VPN-Client-Required Disabled		0
VALUE	ASA-WebVPN-SSL-VPN-Client-Required Enabled		1

VALUE	ASA-WebVPN-SVC-DTLS-Enable	Disabled		0
VALUE	ASA-WebVPN-SVC-DTLS-Enable	Enabled			1

VALUE	ASA-WebVPN-SVC-Rekey-Method	Off			0
VALUE	ASA-WebVPN-SVC-Rekey-Method	SSL			1
VALUE	ASA-WebVPN-SVC-Rekey-Method	New-Tunnel		2

VALUE	ASA-WebVPN-SVC-Compression	Off			0
VALUE	ASA-WebVPN-SVC-Compression	Deflate-Compression	1

VALUE	ASA-WebVPN-URL-Entry-Enable	Disabled		0
VALUE	ASA-WebVPN-URL-Entry-Enable	Enabled			1

END-VENDOR Cisco-ASA

#
# Citrix
#

VENDOR		Citrix				66

BEGIN-VENDOR	Citrix

ATTRIBUTE	Citrix-UID				10	integer
ATTRIBUTE	Citrix-GID				11	integer
ATTRIBUTE	Citrix-Home				12	string
ATTRIBUTE	Citrix-Shell				13	string
ATTRIBUTE	Citrix-Group-Names			14	string
ATTRIBUTE	Citrix-Group-Ids			15	string
ATTRIBUTE	Citrix-User-Groups			16	string

END-VENDOR Citrix

#
# Huawei
#

VENDOR		Huawei				2011

BEGIN-VENDOR	Huawei

ATTRIBUTE	Huawei-Input-Burst-Size			1	integer
ATTRIBUTE	Huawei-Input-Average-Rate		2	integer
ATTRIBUTE	Huawei-Input-Peak-Rate			3	integer
ATTRIBUTE	Huawei-Output-Burst-Size		4	integer
ATTRIBUTE	Huawei-Output-Average-Rate		5	integer
ATTRIBUTE	Huawei-Output-Peak-Rate			6	integer
ATTRIBUTE	Huawei-In-Kb-Before-T-Switch		7	integer
ATTRIBUTE	Huawei-Out-Kb-Before-T-Switch		8	integer
ATTRIBUTE	Huawei-In-Pkt-Before-T-Switch		9	integer
ATTRIBUTE	Huawei-Out-Pkt-Before-T-Switch		10	integer
ATTRIBUTE	Huawei-In-Kb-After-T-Switch		11	integer
ATTRIBUTE	Huawei-Out-Kb-After-T-Switch		12	integer
ATTRIBUTE	Huawei-In-Pkt-After-T-Switch		13	integer
ATTRIBUTE	Huawei-Out-Pkt-After-T-Switch		14	integer
ATTRIBUTE	Huawei-Remanent-Volume			15	integer
ATTRIBUTE	Huawei-Tariff-Switch-Interval		16	integer
ATTRIBUTE	Huawei-ISP-ID				17	string
ATTRIBUTE	Huawei-Max-Users-Per-Logic-Port		18	integer
ATTRIBUTE	Huawei-Command				20	integer
ATTRIBUTE	Huawei-Priority				22	integer
ATTRIBUTE	Huawei-Control-Identifier		24	integer

ATTRIBUTE	Huawei-Result-Code			25	integer

# > 0 indicates an error.
VALUE	Huawei-Result-Code		Succeeded		0

ATTRIBUTE	Huawei-Connect-ID			26	integer
ATTRIBUTE	Huawei-PortalURL			27	string
ATTRIBUTE	Huawei-FTP-Directory			28	string
ATTRIBUTE	Huawei-Exec-Privilege			29	integer
ATTRIBUTE	Huawei-IP-Address			30	integer
ATTRIBUTE	Huawei-Qos-Profile-Name			31	string
ATTRIBUTE	Huawei-SIP-Server			32	string
ATTRIBUTE	Huawei-User-Password			33	string
ATTRIBUTE	Huawei-Command-Mode			34	string
ATTRIBUTE	Huawei-Renewal-Time			35	integer
ATTRIBUTE	Huawei-Rebinding-Time			36	integer
ATTRIBUTE	Huawei-IGMP-Enable			37	integer
ATTRIBUTE	Huawei-Destnation-IP-Addr		39	string
ATTRIBUTE	Huawei-Destnation-Volume		40	string
ATTRIBUTE	Huawei-Startup-Stamp			59	integer
ATTRIBUTE	Huawei-IPHost-Addr			60	string
ATTRIBUTE	Huawei-Up-Priority			61	integer
ATTRIBUTE	Huawei-Down-Priority			62	integer
ATTRIBUTE	Huawei-Tunnel-VPN-Instance		63	string
ATTRIBUTE	Huawei-VT-Name				64	integer
ATTRIBUTE	Huawei-User-Date			65	string
ATTRIBUTE	Huawei-User-Class			66	string
ATTRIBUTE	Huawei-PPP-NCP-Type			70	integer
ATTRIBUTE	Huawei-VSI-Name				71	string
ATTRIBUTE	Huawei-Subnet-Mask			72	ipaddr
ATTRIBUTE	Huawei-Gateway-Address			73	ipaddr
ATTRIBUTE	Huawei-Lease-Time			74	integer
ATTRIBUTE	Huawei-Primary-WINS			75	ipaddr
ATTRIBUTE	Huawei-Secondary-WINS			76	ipaddr
ATTRIBUTE	Huawei-Input-Peak-Burst-Size		77	integer
ATTRIBUTE	Huawei-Output-Peak-Burst-Size		78	integer
ATTRIBUTE	Huawei-Reduced-CIR			79	integer
ATTRIBUTE	Huawei-Tunnel-Session-Limit		80	integer
ATTRIBUTE	Huawei-Zone-Name			81	string
ATTRIBUTE	Huawei-Data-Filter			82	string
ATTRIBUTE	Huawei-Access-Service			83	string
ATTRIBUTE	Huawei-Accounting-Level			84	integer
ATTRIBUTE	Huawei-Portal-Mode			85	integer

VALUE	Huawei-Portal-Mode		PADM			0
VALUE	Huawei-Portal-Mode		Redirectional		1
VALUE	Huawei-Portal-Mode		Non-captive		2

ATTRIBUTE	Huawei-DPI-Policy-Name			86	string
ATTRIBUTE	huawei-Policy-Route			87	ipaddr
ATTRIBUTE	Huawei-Framed-Pool			88	string
ATTRIBUTE	Huawei-L2TP-Terminate-Cause		89	string
ATTRIBUTE	Huawei-Multi-Account-Mode		90	integer
ATTRIBUTE	Huawei-Queue-Profile			91	string
ATTRIBUTE	Huawei-Layer4-Session-Limit		92	integer
ATTRIBUTE	Huawei-Multicast-Profile		93	string
ATTRIBUTE	Huawei-VPN-Instance			94	string
ATTRIBUTE	Huawei-Policy-Name			95	string
ATTRIBUTE	Huawei-Tunnel-Group-Name		96	string
ATTRIBUTE	Huawei-Multicast-Source-Group		97	string
ATTRIBUTE	Huawei-Multicast-Receive-Group		98	ipaddr
ATTRIBUTE	Huawei-User-Multicast-Type		99	integer
ATTRIBUTE	Huawei-Reduced-PIR			100	integer
ATTRIBUTE	Huawei-LI-ID				101	string
ATTRIBUTE	Huawei-LI-Md-Address			102	ipaddr
ATTRIBUTE	Huawei-LI-Md-Port			103	integer
ATTRIBUTE	Huawei-LI-Md-VpnInstance		104	string
ATTRIBUTE	Huawei-Service-Chg-Cmd			105	integer
ATTRIBUTE	Huawei-Acct-Packet-Type			106	integer
ATTRIBUTE	Huawei-Call-Reference			107	integer
ATTRIBUTE	Huawei-PSTN-Port			108	integer
ATTRIBUTE	Huawei-Voip-Service-Type		109	integer
ATTRIBUTE	Huawei-Acct-Connection-Time		110	integer
ATTRIBUTE	Huawei-Error-Reason			112	integer
ATTRIBUTE	Huawei-Remain-Monney			113	integer
ATTRIBUTE	Huawei-Org-GK-ipaddr			123	ipaddr
ATTRIBUTE	Huawei-Org-GW-ipaddr			124	ipaddr
ATTRIBUTE	Huawei-Dst-GK-ipaddr			125	ipaddr
ATTRIBUTE	Huawei-Dst-GW-ipaddr			126	ipaddr
ATTRIBUTE	Huawei-Access-Num			127	string
ATTRIBUTE	Huawei-Remain-Time			128	integer
ATTRIBUTE	Huawei-Codec-Type			131	integer
ATTRIBUTE	Huawei-Transfer-Num			132	string
ATTRIBUTE	Huawei-New-User-Name			133	string
ATTRIBUTE	Huawei-Transfer-Station-Id		134	string
ATTRIBUTE	Huawei-Primary-DNS			135	ipaddr
ATTRIBUTE	Huawei-Secondary-DNS			136	ipaddr
ATTRIBUTE	Huawei-ONLY-Account-Type		137	integer
ATTRIBUTE	Huawei-Domain-Name			138	string
ATTRIBUTE	Huawei-ANCP-Profile			139	string
ATTRIBUTE	Huawei-HTTP-Redirect-URL		140	string
ATTRIBUTE	Huawei-Loopback-Address			141	string
ATTRIBUTE	Huawei-QoS-Profile-Type			142	integer

VALUE	Huawei-QoS-Profile-Type		Original		0
VALUE	Huawei-QoS-Profile-Type		L2TP-Inbound		1
VALUE	Huawei-QoS-Profile-Type		L2TP-Outbound		2
VALUE	Huawei-QoS-Profile-Type		L2TP			3

ATTRIBUTE	Huawei-Max-List-Num			143	integer
ATTRIBUTE	Huawei-Acct-IPv6-Input-Octets		144	integer
ATTRIBUTE	Huawei-Acct-IPv6-Output-Octets		145	integer
ATTRIBUTE	Huawei-Acct-IPv6-Input-Packets		146	integer
ATTRIBUTE	Huawei-Acct-IPv6-Output-Packets		147	integer
ATTRIBUTE	Huawei-Acct-IPv6-Input-Gigawords	148	integer
ATTRIBUTE	Huawei-Acct-IPv6-Output-Gigawords	149	integer
ATTRIBUTE	Huawei-DHCPv6-Option37			150	string
ATTRIBUTE	Huawei-DHCPv6-Option38			151	string
ATTRIBUTE	Huawei-User-Mac				153	string
ATTRIBUTE	Huawei-DNS-Server-IPv6-address		154	ipv6addr
ATTRIBUTE	Huawei-DHCPv4-Option121			155	string
ATTRIBUTE	Huawei-DHCPv4-Option43			156	string
ATTRIBUTE	Huawei-Framed-Pool-Group		157	string
ATTRIBUTE	Huawei-Framed-IPv6-Address		158	ipv6addr
ATTRIBUTE	Huawei-Acct-Update-Address		159	integer
ATTRIBUTE	Huawei-NAT-Policy-Name			160	string
ATTRIBUTE	Huawei-NAT-Public-Address		161	ipaddr
ATTRIBUTE	Huawei-NAT-Start-Port			162	integer
ATTRIBUTE	Huawei-NAT-End-Port			163	integer
ATTRIBUTE	Huawei-NAT-Port-Forwarding		164	integer
ATTRIBUTE	Huawei-NAT-Port-Range-Update		165	integer
ATTRIBUTE	Huawei-DS-Lite-Tunnel-Name		166	string
ATTRIBUTE	Huawei-PCP-Server-Name			167	string # manual says text?
ATTRIBUTE	Huawei-Public-IP-Addr-State		168	integer

VALUE	Huawei-Public-IP-Addr-State	Safe			0
VALUE	Huawei-Public-IP-Addr-State	Warning			1
VALUE	Huawei-Public-IP-Addr-State	Danger			2

ATTRIBUTE	Huawei-Auth-Type			180	integer

VALUE	Huawei-Auth-Type		PPP			1
VALUE	Huawei-Auth-Type		Web			2
VALUE	Huawei-Auth-Type		Dot1x			3
VALUE	Huawei-Auth-Type		Fast			4
VALUE	Huawei-Auth-Type		Bind			5
VALUE	Huawei-Auth-Type		WLAN			6
VALUE	Huawei-Auth-Type		Administrative		7
VALUE	Huawei-Auth-Type		Tunnel			8
VALUE	Huawei-Auth-Type		MIP			9
VALUE	Huawei-Auth-Type		None			10

ATTRIBUTE	Huawei-Acct-Terminate-Subcause		181	string
ATTRIBUTE	Huawei-Down-QOS-Profile-Name		182	string
ATTRIBUTE	Huawei-Port-Mirror			183	integer

VALUE	Huawei-Port-Mirror		Disable			0
VALUE	Huawei-Port-Mirror		Uplink-Enable		1
VALUE	Huawei-Port-Mirror		Downlink-Enable		2
VALUE	Huawei-Port-Mirror		Enable			3

ATTRIBUTE	Huawei-Account-Info			184	string
ATTRIBUTE	Huawei-Service-Info			185	string
ATTRIBUTE	Huawei-DHCP-Option			187	octets
ATTRIBUTE	Huawei-AVpair				188	string
ATTRIBUTE	Huawei-Delegated-IPv6-Prefix-Pool	191	string
ATTRIBUTE	Huawei-IPv6-Prefix-Lease		192	octets
ATTRIBUTE	Huawei-IPv6-Address-Lease		193	octets
ATTRIBUTE	Huawei-IPv6-Policy-Route		194	ipv6prefix # manual says string?
ATTRIBUTE	Huawei-MNG-IPv6				196	integer

VALUE	Huawei-MNG-IPv6			Unsupported		0
VALUE	Huawei-MNG-IPv6			Supported		1

#
#  Huawei supports supplying a DPSK by setting the Attribute HW-DPSK-Info
#
#  https://support.huawei.com/hedex/hdx.do?docid=EDOC1100192518&id=EN-US_CONCEPT_0277881327
#
ATTRIBUTE	Huawei-DPSK-Info			206	string

ATTRIBUTE	Huawei-Flow-Info			211	string
ATTRIBUTE	Huawei-Flow-Id				212	integer
ATTRIBUTE	Huawei-DHCP-Server-IP			214	ipaddr
ATTRIBUTE	Huawei-Application-Type			215	integer

VALUE	Huawei-Application-Type		Fixed			1
VALUE	Huawei-Application-Type		Nomadic			2
VALUE	Huawei-Application-Type		Portable		3
VALUE	Huawei-Application-Type		Simple-Mobile		4
VALUE	Huawei-Application-Type		Full-Mobile		5

ATTRIBUTE	Huawei-Indication-Flag			216	octets # integer??
ATTRIBUTE	Huawei-Original_NAS-IP_Address		217	ipaddr
ATTRIBUTE	Huawei-User-Priority			218	integer

VALUE	Huawei-User-Priority		Common			0
VALUE	Huawei-User-Priority		Copper			1
VALUE	Huawei-User-Priority		Silver			2
VALUE	Huawei-User-Priority		Gold			3

ATTRIBUTE	Huawei-ACS-Url				219	string
ATTRIBUTE	Huawei-Provision-Code			220	string
ATTRIBUTE	Huawei-Application-Scene		221	octets
ATTRIBUTE	Huawei-MS-Maximum-MAC-Study-Number	222	octets # ether??
ATTRIBUTE	Huawei-GGSN-Vendor			232	string
ATTRIBUTE	Huawei-GGSN-Version			233	string
ATTRIBUTE	Huawei-Ext-Specific			238	string
ATTRIBUTE	Huawei-Web-URL				253	string
ATTRIBUTE	Huawei-Version				254	string
ATTRIBUTE	Huawei-Product-ID			255	string

END-VENDOR	Huawei

#
# HP
#

VENDOR		HP				11

#
# Attributes supported by HP ProCurve wired networking devices
#
BEGIN-VENDOR	HP

# Management authorization
ATTRIBUTE	HP-Privilege-Level			1	integer
ATTRIBUTE	HP-Command-String			2	string
ATTRIBUTE	HP-Command-Exception			3	integer
ATTRIBUTE	HP-Management-Protocol			26	integer

# Dynamic port-access attributes
ATTRIBUTE	HP-Port-Client-Limit-Dot1x		10	integer
ATTRIBUTE	HP-Port-Client-Limit-MA			11	integer
ATTRIBUTE	HP-Port-Client-Limit-WA			12	integer
ATTRIBUTE	HP-Port-Auth-Mode-Dot1x			13	integer
ATTRIBUTE	HP-Port-Bounce-Host			23	integer

# Client QoS attributes
ATTRIBUTE	HP-Port-Priority-Regeneration-Table	40	string

# Access control
ATTRIBUTE	HP-Cos					40	string
#ATTRIBUTE	HP-Rate-Limit				46	integer

ATTRIBUTE	HP-Bandwidth-Max-Ingress		46	integer
ATTRIBUTE	HP-Bandwidth-Max-Egress			48	integer

ATTRIBUTE	HP-Ip-Filter-Raw			61	string

# Client ACL attributes
ATTRIBUTE	HP-Nas-Filter-Rule			61	string
ATTRIBUTE	HP-Nas-Rules-IPv6			63	integer

# VLAN assignment attributes
ATTRIBUTE	HP-Egress-VLANID			64	integer
ATTRIBUTE	HP-Egress-VLAN-Name			65	string

# See http://wiki.freeradius.org/vendor/HP#Capability-advertisements
ATTRIBUTE	HP-Capability-Advert			255	octets

# Captival Portal
ATTRIBUTE	HP-Captive-Portal-URL			24	string

# HP-Port-Auth-Mode-Dot1x Attribute Values
VALUE	HP-Port-Auth-Mode-Dot1x		Port-Based		1
VALUE	HP-Port-Auth-Mode-Dot1x		User-Based		2

# HP-Command-Exception Attribute Values
VALUE	HP-Command-Exception		Permit-List		0
VALUE	HP-Command-Exception		Deny-List		1

# HP-Management-Protocol
VALUE	HP-Management-Protocol		HTTP			5
VALUE	HP-Management-Protocol		HTTPS			6

#
#  Conflicting attributes are commented out.
#
#ATTRIBUTE	HP-Management-Role			26	integer

# HP-Management-Role
#VALUE	HP-Management-Role		SuperUser		1
#VALUE	HP-Management-Role		Monitor			2
#VALUE	HP-Management-Role		HelpDeskManager		16
#VALUE	HP-Management-Role		NetworkAdministrator	17
#VALUE	HP-Management-Role		SystemAdministrator	18
#VALUE	HP-Management-Role		WebUserAdminstrator	19

#	Privilege attributes for HP-GbE2c, HP 1:10Gb, and HP 10Gb
#	Ethernet Blade Switches
#
VALUE	Service-Type			HP-Oper			252
VALUE	Service-Type			HP-User			255

END-VENDOR	HP

#
# Mikrotik
#

VENDOR Mikrotik 14988

BEGIN-VENDOR Mikrotik

ATTRIBUTE       Mikrotik-Recv-Limit             1   integer
ATTRIBUTE       Mikrotik-Xmit-Limit             2   integer
ATTRIBUTE       Mikrotik-Group                  3   string
ATTRIBUTE       Mikrotik-Wireless-Forward       4   integer
ATTRIBUTE       Mikrotik-Wireless-Skip-Dot1x    5   integer
ATTRIBUTE       Mikrotik-Wireless-Enc-Algo      6   integer
ATTRIBUTE       Mikrotik-Wireless-Enc-Key       7   string
ATTRIBUTE       Mikrotik-Rate-Limit             8   string
ATTRIBUTE       Mikrotik-Realm                  9   string
ATTRIBUTE       Mikrotik-Host-IP                10  ipaddr
ATTRIBUTE       Mikrotik-Mark-Id                11  string
ATTRIBUTE       Mikrotik-Advertise-URL          12  string
ATTRIBUTE       Mikrotik-Advertise-Interval     13  integer
ATTRIBUTE       Mikrotik-Recv-Limit-Gigawords   14  integer
ATTRIBUTE       Mikrotik-Xmit-Limit-Gigawords   15  integer
ATTRIBUTE       Mikrotik-Wireless-PSK           16  string
ATTRIBUTE       Mikrotik-Total-Limit            17  integer
ATTRIBUTE       Mikrotik-Total-Limit-Gigawords  18  integer
ATTRIBUTE       Mikrotik-Address-List           19  string
ATTRIBUTE       Mikrotik-Wireless-MPKey         20  string
ATTRIBUTE       Mikrotik-Wireless-Comment       21  string
ATTRIBUTE       Mikrotik-Delegated-IPv6-Pool    22  string
ATTRIBUTE       Mikrotik-DHCP-Option-Set        23  string
ATTRIBUTE       Mikrotik-DHCP-Option-Param-STR1 24  string
ATTRIBUTE       Mikrotik-DHCP-Option-Param-STR2 25  string
ATTRIBUTE       Mikrotik-Wireless-VLANID        26  integer
ATTRIBUTE       Mikrotik-Wireless-VLANIDtype    27  integer
ATTRIBUTE       Mikrotik-Wireless-Minsignal     28  string
ATTRIBUTE       Mikrotik-Wireless-Maxsignal     29  string
ATTRIBUTE       Mikrotik-Switching-Filter       30  string

# MikroTik Values

VALUE           Mikrotik-Wireless-Enc-Algo            No-encryption                  0
VALUE           Mikrotik-Wireless-Enc-Algo            40-bit-WEP                     1
VALUE           Mikrotik-Wireless-Enc-Algo            104-bit-WEP                    2
VALUE           Mikrotik-Wireless-Enc-Algo            AES-CCM                        3
VALUE           Mikrotik-Wireless-Enc-Algo            TKIP                           4
VALUE           Mikrotik-Wireless-VLANIDtype          802.1q                         0
VALUE           Mikrotik-Wireless-VLANIDtype          802.1ad                        1

END-VENDOR Mikrotik

#
# Acme (Oracle)
#

VENDOR		Acme				9148
BEGIN-VENDOR	Acme

#
#  Voice over IP attributes.
#
ATTRIBUTE	Acme-FlowID_FS1_F			1	string
ATTRIBUTE	Acme-FlowType_FS1_F			2	string
ATTRIBUTE	Acme-Session-Ingress-CallId		3	string
ATTRIBUTE	Acme-Session-Egress-CallId		4	string

ATTRIBUTE	Acme-Flow-In-Realm_FS1_F		10	string
ATTRIBUTE	Acme-Flow-In-Src-Addr_FS1_F		11	ipaddr
ATTRIBUTE	Acme-Flow-In-Src-Port_FS1_F		12	integer
ATTRIBUTE	Acme-Flow-In-Dst-Addr_FS1_F		13	ipaddr
ATTRIBUTE	Acme-Flow-In-Dst-Port_FS1_F		14	integer

ATTRIBUTE	Acme-Flow-Out-Realm_FS1_F		20	string
ATTRIBUTE	Acme-Flow-Out-Src-Addr_FS1_F		21	ipaddr
ATTRIBUTE	Acme-Flow-Out-Src-Port_FS1_F		22	integer
ATTRIBUTE	Acme-Flow-Out-Dst-Addr_FS1_F		23	ipaddr
ATTRIBUTE	Acme-Flow-Out-Dst-Port_FS1_F		24	integer
ATTRIBUTE	Acme-Calling-Octets_FS1			28	integer
ATTRIBUTE	Acme-Calling-Packets_FS1		29	integer
ATTRIBUTE	Acme-Calling-RTCP-Packets-Lost_FS1	32	integer
ATTRIBUTE	Acme-Calling-RTCP-Avg-Jitter_FS1	33	integer
ATTRIBUTE	Acme-Calling-RTCP-Avg-Latency_FS1	34	integer
ATTRIBUTE	Acme-Calling-RTCP-MaxJitter_FS1		35	integer
ATTRIBUTE	Acme-Calling-RTCP-MaxLatency_FS1	36	integer
ATTRIBUTE	Acme-Calling-RTP-Packets-Lost_FS1	37	integer
ATTRIBUTE	Acme-Calling-RTP-Avg-Jitter_FS1		38	integer
ATTRIBUTE	Acme-Calling-RTP-MaxJitter_FS1		39	integer

ATTRIBUTE	Acme-Session-Generic-Id			40	string
ATTRIBUTE	Acme-Session-Ingress-Realm		41	string
ATTRIBUTE	Acme-Session-Egress-Realm		42	string
ATTRIBUTE	Acme-Session-Protocol-Type		43	string

ATTRIBUTE	Acme-Called-Octets_FS1			44	integer
ATTRIBUTE	Acme-Called-Packets_FS1			45	integer
ATTRIBUTE	Acme-Called-RTCP-Packets-Lost_FS1	46	integer
ATTRIBUTE	Acme-Called-RTCP-Avg-Jitter_FS1		47	integer
ATTRIBUTE	Acme-Called-RTCP-Avg-Latency_FS1	48	integer
ATTRIBUTE	Acme-Called-RTCP-MaxJitter_FS1		49	integer
ATTRIBUTE	Acme-Called-RTCP-MaxLatency_FS1		50	integer
ATTRIBUTE	Acme-Called-RTP-Packets-Lost_FS1	51	integer
ATTRIBUTE	Acme-Called-RTP-Avg-Jitter_FS1		52	integer
ATTRIBUTE	Acme-Called-RTP-MaxJitter_FS1		53	integer

ATTRIBUTE	Acme-Session-Charging-Vector		54	string
ATTRIBUTE	Acme-Session-Charging-Function_Address	55	string

ATTRIBUTE	Acme-Firmware-Version			56	string
ATTRIBUTE	Acme-Local-Time-Zone			57	string

ATTRIBUTE	Acme-Post-Dial-Delay			58	integer
ATTRIBUTE	Acme-CDR-Sequence-Number		59	integer
ATTRIBUTE	Acme-Session-Disposition		60	integer
ATTRIBUTE	Acme-Disconnect-Initiator		61	integer
ATTRIBUTE	Acme-Disconnect-Cause			62	integer
ATTRIBUTE	Acme-Intermediate_Time			63	string
ATTRIBUTE	Acme-Primary-Routing-Number		64	string
ATTRIBUTE	Acme-Originating-Trunk-Group		65	string
ATTRIBUTE	Acme-Terminating-Trunk-Group		66	string
ATTRIBUTE	Acme-Originating-Trunk-Context		67	string
ATTRIBUTE	Acme-Terminating-Trunk-Context		68	string
ATTRIBUTE	Acme-P-Asserted-ID			69	string
ATTRIBUTE	Acme-SIP-Diversion			70	string
ATTRIBUTE	Acme-SIP-Status				71	integer
# 72 unused
# 73 unused
ATTRIBUTE	Acme-Ingress-Local-Addr			74	string
ATTRIBUTE	Acme-Ingress-Remote-Addr		75	string
ATTRIBUTE	Acme-Egress-Local-Addr			76	string
ATTRIBUTE	Acme-Egress-Remote-Addr			77	string

ATTRIBUTE	Acme-FlowID_FS1_R			78	string
ATTRIBUTE	Acme-FlowType_FS1_R			79	string
ATTRIBUTE	Acme-Flow-In-Realm_FS1_R		80	string
ATTRIBUTE	Acme-Flow-In-Src-Addr_FS1_R		81	ipaddr
ATTRIBUTE	Acme-Flow-In-Src-Port_FS1_R		82	integer
ATTRIBUTE	Acme-Flow-In-Dst-Addr_FS1_R		83	ipaddr
ATTRIBUTE	Acme-Flow-In-Dst-Port_FS1_R		84	integer
ATTRIBUTE	Acme-Flow-Out-Realm_FS1_R		85	string
ATTRIBUTE	Acme-Flow-Out-Src-Addr_FS1_R		86	ipaddr
ATTRIBUTE	Acme-Flow-Out-Src-Port_FS1_R		87	integer
ATTRIBUTE	Acme-Flow-Out-Dst-Addr_FS1_R		88	ipaddr
ATTRIBUTE	Acme-Flow-Out-Dst-Port_FS1_R		89	integer
ATTRIBUTE	Acme-FlowID_FS2_F			90	string
ATTRIBUTE	Acme-FlowType_FS2_F			91	string
ATTRIBUTE	Acme-Flow-In-Realm_FS2_F		92	string
ATTRIBUTE	Acme-Flow-In-Src-Addr_FS2_F		93	ipaddr
ATTRIBUTE	Acme-Flow-In-Src-Port_FS2_F		94	integer
ATTRIBUTE	Acme-Flow-In-Dst-Addr_FS2_F		95	ipaddr
ATTRIBUTE	Acme-Flow-In-Dst-Port_FS2_F		96	integer
ATTRIBUTE	Acme-Flow-Out-Realm_FS2_F		97	string
ATTRIBUTE	Acme-Flow-Out-Src-Addr_FS2_F		98	ipaddr
ATTRIBUTE	Acme-Flow-Out-Src-Port_FS2_F		99	integer
ATTRIBUTE	Acme-Flow-Out-Dst-Addr_FS2_F		100	ipaddr
ATTRIBUTE	Acme-Flow-Out-Dst-Port_FS2_F		101	integer
ATTRIBUTE	Acme-Calling-Octets_FS2			102	integer
ATTRIBUTE	Acme-Calling-Packets_FS2		103	integer
ATTRIBUTE	Acme-Calling-RTCP-Packets-Lost_FS2	104	integer
ATTRIBUTE	Acme-Calling-RTCP-Avg-Jitter_FS2	105	integer
ATTRIBUTE	Acme-Calling-RTCP-Avg-Latency_FS2	106	integer
ATTRIBUTE	Acme-Calling-RTCP-MaxJitter_FS2		107	integer
ATTRIBUTE	Acme-Calling-RTCP-MaxLatency_FS2	108	integer
ATTRIBUTE	Acme-Calling-RTP-Packets-Lost_FS2	109	integer
ATTRIBUTE	Acme-Calling-RTP-Avg-Jitter_FS2		110	integer
ATTRIBUTE	Acme-Calling-RTP-MaxJitter_FS2		111	integer

ATTRIBUTE	Acme-FlowID_FS2_R			112	string
ATTRIBUTE	Acme-FlowType_FS2_R			113	string
ATTRIBUTE	Acme-Flow-In-Realm_FS2_R		114	string
ATTRIBUTE	Acme-Flow-In-Src-Addr_FS2_R		115	ipaddr
ATTRIBUTE	Acme-Flow-In-Src-Port_FS2_R		116	integer
ATTRIBUTE	Acme-Flow-In-Dst-Addr_FS2_R		117	ipaddr
ATTRIBUTE	Acme-Flow-In-Dst-Port_FS2_R		118	integer
ATTRIBUTE	Acme-Flow-Out-Realm_FS2_R		119	string
ATTRIBUTE	Acme-Flow-Out-Src-Addr_FS2_R		120	ipaddr
ATTRIBUTE	Acme-Flow-Out-Src-Port_FS2_R		121	integer
ATTRIBUTE	Acme-Flow-Out-Dst-Addr_FS2_R		122	ipaddr
ATTRIBUTE	Acme-Flow-Out-Dst-Port_FS2_R		123	integer
ATTRIBUTE	Acme-Called-Octets_FS2			124	integer
ATTRIBUTE	Acme-Called-Packets_FS2			125	integer
ATTRIBUTE	Acme-Called-RTCP-Packets-Lost_FS2	126	integer
ATTRIBUTE	Acme-Called-RTCP-Avg-Jitter_FS2		127	integer
ATTRIBUTE	Acme-Called-RTCP-Avg-Latency_FS2	128	integer
ATTRIBUTE	Acme-Called-RTCP-MaxJitter_FS2		129	integer
ATTRIBUTE	Acme-Called-RTCP-MaxLatency_FS2		130	integer
ATTRIBUTE	Acme-Called-RTP-Packets-Lost_FS2	131	integer
ATTRIBUTE	Acme-Called-RTP-Avg-Jitter_FS2		132	integer
ATTRIBUTE	Acme-Called-RTP-MaxJitter_FS2		133	integer

ATTRIBUTE	Acme-Egress-Final-Routing-Number	134	string
ATTRIBUTE	Acme-Session-Ingress-RPH		135	string
ATTRIBUTE	Acme-Session-Egress-RPH			136	string
ATTRIBUTE	Acme-Ingress-Network-Interface-Id	137	string
ATTRIBUTE	Acme-Ingress-Vlan-Tag-Value		138	integer
ATTRIBUTE	Acme-Egress-Network-Interface-Id	139	string
ATTRIBUTE	Acme-Egress-Vlan-Tag-Value		140	integer
ATTRIBUTE	Acme-Refer-Call-Transfer-Id		141	string

# Transcoding attributes
ATTRIBUTE	Acme-FlowMediaType_FS1_F		142	string
ATTRIBUTE	Acme-FlowMediaType_FS1_R		143	string
ATTRIBUTE	Acme-FlowMediaType_FS2_F		144	string
ATTRIBUTE	Acme-FlowMediaType_FS2_R		145	string
ATTRIBUTE	Acme-Flow-PTime_FS1_F			146	integer
ATTRIBUTE	Acme-Flow-PTime_FS1_R			147	integer
ATTRIBUTE	Acme-Flow-PTime_FS2_F			148	integer
ATTRIBUTE	Acme-Flow-PTime_FS2_R			149	integer
ATTRIBUTE	Acme-Session-Media-Process		150	string

# QoS measurement attributes
ATTRIBUTE	Acme-Calling-R-Factor			151	integer
ATTRIBUTE	Acme-Calling-MOS			152	integer
ATTRIBUTE	Acme-Called-R-Factor			153	integer
ATTRIBUTE	Acme-Called-MOS				154	integer

# IPV6 attributes
ATTRIBUTE	Acme-Flow-In-Src-IPv6_Addr_FS1_F	155	ipv6addr
ATTRIBUTE	Acme-Flow-In-Dst-IPv6_Addr_FS1_F	156	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Src-IPv6_Addr_FS1_F	157	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Dst-IPv6_Addr_FS1_F	158	ipv6addr
ATTRIBUTE	Acme-Flow-In-Src-IPv6_Addr_FS1_R	159	ipv6addr
ATTRIBUTE	Acme-Flow-In-Dst-IPv6_Addr_FS1_R	160	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Src-IPv6_Addr_FS1_R	161	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Dst-IPv6_Addr_FS1_R	162	ipv6addr
ATTRIBUTE	Acme-Flow-In-Src-IPv6_Addr_FS2_F	163	ipv6addr
ATTRIBUTE	Acme-Flow-In-Dst-IPv6_Addr_FS2_F	164	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Src-IPv6_Addr_FS2_F	165	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Dst-IPv6_Addr_FS2_F	166	ipv6addr
ATTRIBUTE	Acme-Flow-In-Src-IPv6_Addr_FS2_R	167	ipv6addr
ATTRIBUTE	Acme-Flow-In-Dst-IPv6_Addr_FS2_R	168	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Src-IPv6_Addr_FS2_R	169	ipv6addr
ATTRIBUTE	Acme-Flow-Out-Dst-IPv6_Addr_FS2_R	170	ipv6addr

ATTRIBUTE	Acme-Session-Forked-Call-Id		171	string

#
# Customizable attributes - all strings, but content based on system config
#
ATTRIBUTE	Acme-Custom-VSA-200			200	string
ATTRIBUTE	Acme-Custom-VSA-201			201	string
ATTRIBUTE	Acme-Custom-VSA-202			202	string
ATTRIBUTE	Acme-Custom-VSA-203			203	string
ATTRIBUTE	Acme-Custom-VSA-204			204	string
ATTRIBUTE	Acme-Custom-VSA-205			205	string
ATTRIBUTE	Acme-Custom-VSA-206			206	string
ATTRIBUTE	Acme-Custom-VSA-207			207	string
ATTRIBUTE	Acme-Custom-VSA-208			208	string
ATTRIBUTE	Acme-Custom-VSA-209			209	string
ATTRIBUTE	Acme-Custom-VSA-210			210	string
ATTRIBUTE	Acme-Custom-VSA-211			211	string
ATTRIBUTE	Acme-Custom-VSA-212			212	string
ATTRIBUTE	Acme-Custom-VSA-213			213	string
ATTRIBUTE	Acme-Custom-VSA-214			214	string
ATTRIBUTE	Acme-Custom-VSA-215			215	string
ATTRIBUTE	Acme-Custom-VSA-216			216	string
ATTRIBUTE	Acme-Custom-VSA-217			217	string
ATTRIBUTE	Acme-Custom-VSA-218			218	string
ATTRIBUTE	Acme-Custom-VSA-219			219	string
ATTRIBUTE	Acme-Custom-VSA-220			220	string
ATTRIBUTE	Acme-Custom-VSA-221			221	string
ATTRIBUTE	Acme-Custom-VSA-222			222	string
ATTRIBUTE	Acme-Custom-VSA-223			223	string
ATTRIBUTE	Acme-Custom-VSA-224			224	string
ATTRIBUTE	Acme-Custom-VSA-225			225	string
ATTRIBUTE	Acme-Custom-VSA-226			226	string
ATTRIBUTE	Acme-Custom-VSA-227			227	string
ATTRIBUTE	Acme-Custom-VSA-228			228	string
ATTRIBUTE	Acme-Custom-VSA-229			229	string
ATTRIBUTE	Acme-Custom-VSA-230			230	string
ATTRIBUTE	Acme-User-Class				254	string

END-VENDOR Acme

#
# Extreme Networks
#

VENDOR		Extreme				1916

BEGIN-VENDOR	Extreme

ATTRIBUTE	Extreme-CLI-Authorization		201	integer
ATTRIBUTE	Extreme-Shell-Command			202	string
ATTRIBUTE	Extreme-Netlogin-Vlan			203	string
ATTRIBUTE	Extreme-Netlogin-Url			204	string
ATTRIBUTE	Extreme-Netlogin-Url-Desc		205	string
ATTRIBUTE	Extreme-Netlogin-Only			206	integer
ATTRIBUTE	Extreme-User-Location			208	string
ATTRIBUTE	Extreme-Netlogin-Vlan-Tag		209	integer
ATTRIBUTE	Extreme-Netlogin-Extended-Vlan		211	string
ATTRIBUTE	Extreme-Security-Profile		212	string
ATTRIBUTE	Extreme-VM-Name				213	string
ATTRIBUTE	Extreme-VM-VPP-Name			214	string
ATTRIBUTE	Extreme-VM-IP-Addr			215	ipaddr
ATTRIBUTE	Extreme-VM-VLAN-ID			216	integer
ATTRIBUTE	Extreme-VM-VR-Name			217	string

VALUE	Extreme-CLI-Authorization	Disabled		0
VALUE	Extreme-CLI-Authorization	Enabled			1

VALUE	Extreme-Netlogin-Only		Disabled		0
VALUE	Extreme-Netlogin-Only		Enabled			1

END-VENDOR	Extreme

#
# Enterasys
#

VENDOR		Enterasys			5624

BEGIN-VENDOR	Enterasys

ATTRIBUTE       Enterasys-Auth-Client-Type                 1    integer

# NAC Internal-Attributes, can be changed at any time.
ATTRIBUTE       ETS-NTLM-Auth-Allowed                    201    integer
ATTRIBUTE       ETS-NTLM-Auth-Username                   202    string
ATTRIBUTE       ETS-NTLM-Auth-Domain                     203    string
ATTRIBUTE       ETS-Proxy-Failed                         204    integer
ATTRIBUTE       ETS-NAC-Reject                           205    integer
ATTRIBUTE       ETS-Outer-Tunnel-Username                206    string
ATTRIBUTE       ETS-Inner-Tunnel-Username                207    string
ATTRIBUTE       ETS-Replace-MsCHAP-Username              208    integer
ATTRIBUTE       ETS-Ignore-MsCHAP-Username               209    integer

ATTRIBUTE       ETS-Cleartext-Password                   220    string
ATTRIBUTE       ETS-SHA-Password                         221    string
ATTRIBUTE       ETS-SSHA-Password                        222    string
ATTRIBUTE       ETS-LM-Password                          223    string
ATTRIBUTE       ETS-NT-Password                          224    string
ATTRIBUTE       ETS-MD5-Password                         225    string
ATTRIBUTE       ETS-SMD5-Password                        226    string
ATTRIBUTE       ETS-Crypt-Password                       227    string

ATTRIBUTE       ETS-TLS-Client-Cert-Fingerprint          230    string
ATTRIBUTE       ETS-TLS-Cert-Fingerprint                 231    string
ATTRIBUTE       ETS-TLS-Verify-Error-Code                232    integer

# Value definitions

VALUE           Enterasys-Auth-Client-Type               802.1X             1
VALUE           Enterasys-Auth-Client-Type               PWA                2
VALUE           Enterasys-Auth-Client-Type               MAC                3
VALUE           Enterasys-Auth-Client-Type               CEP                4
VALUE           Enterasys-Auth-Client-Type               RADIUS-Snooping    5
VALUE           Enterasys-Auth-Client-Type               Auto-Auth          6
VALUE           Enterasys-Auth-Client-Type               Quarantine         7

END-VENDOR	Enterasys

#
# SonicWall
#

VENDOR		SonicWall			8741

#  Backwards compatibility.
BEGIN-VENDOR	SonicWall

ATTRIBUTE	SS3-Firewall-User-Privilege		1	integer

#  New names.
ATTRIBUTE	SonicWall-User-Privilege		1	integer
VALUE	SonicWall-User-Privilege	Remote-Access		1 # deprecated
VALUE	SonicWall-User-Privilege	Bypass-Filters		2
VALUE	SonicWall-User-Privilege	VPN-Client-Access	3 # standard
VALUE	SonicWall-User-Privilege	Access-To-VPN		4 # standard
VALUE	SonicWall-User-Privilege	Limited-Management	5
VALUE	SonicWall-User-Privilege	L2TP-Client-Access	6 # standard
VALUE	SonicWall-User-Privilege	Wireless-Guest		7 # standard
VALUE	SonicWall-User-Privilege	Wireless-Add-ACL	8
VALUE	SonicWall-User-Privilege	Internet-Access		9 # standard

# Those values indicated as "standard" are applicable only on a SonicWall
# firewall running standard firmware and not on one running enhanced firmware.

#
# This attribute is to use in place of SonicWall-User-Privilege with RADIUS
# servers that allow only one instance of a Vendor-Specific attribute to be
# set (such as the ACE Server from RSA). Note that it is commented out in this
# file because it is not needed in any servers that support multiple VSA's.
#
# The value of this attribute is a text string giving a comma-separated list
# of one or more privileges, each corresponding to a value of the
# SonicWall-User-Privilege attribute above (and note that some are applicable
# only on a SonicWall firewall running standard firmware as indicated above):
#   "BF,VC,VA,LM,LA,WG,WA,IA"
#   "RA" for "Remote-Access" is now deprecated.
# ATTRIBUTE	SonicWall-User-Privileges   	2	string	SonicWall

# Multiple of these can be set for a user, each specifying the name of a
# user group to which that user has membership. Note that this can
# alternatively be achieved by use of the Filter-Id attribute.
# This is applicable only on a SonicWall firewall running enhanced firmware.
#
ATTRIBUTE	SonicWall-User-Group			3	string

# This attribute is to use in place of SonicWall-User-Group with RADIUS
# servers that allow only one instance of a Vendor-Specific attribute to be
# set (such as the ACE Server from RSA). Note that it is commented out in this
# file because it is not needed in any servers that support multiple VSA's.
#
# The value of this attribute is a text string giving a comma-separated list
# of the names of one or more user groups to which that user has membership.
# This is applicable only on a SonicWall firewall running enhanced firmware.
#
# ATTRIBUTE SonicWall-User-Groups		4	string	SonicWall.

END-VENDOR	SonicWall

#
# F5 Networks
#

VENDOR F5 3375
BEGIN-VENDOR F5

ATTRIBUTE	F5-LTM-User-Role			1	integer
ATTRIBUTE	F5-LTM-User-Role-Universal		2	integer    # enable/disable
ATTRIBUTE	F5-LTM-User-Partition			3	string
ATTRIBUTE	F5-LTM-User-Console			4	integer    # enable/disable
ATTRIBUTE	F5-LTM-User-Shell			5	string     # supported values are disable, tmsh, and bpsh
ATTRIBUTE	F5-LTM-User-Context-1			10	integer
ATTRIBUTE	F5-LTM-User-Context-2			11	integer
ATTRIBUTE	F5-LTM-User-Info-1			12	string
ATTRIBUTE	F5-LTM-User-Info-2			13	string

VALUE	F5-LTM-User-Role		Administrator		0
VALUE	F5-LTM-User-Role		Resource-Admin		20
VALUE	F5-LTM-User-Role		User-Manager		40
VALUE	F5-LTM-User-Role		Auditor			80
VALUE	F5-LTM-User-Role		Manager			100
VALUE	F5-LTM-User-Role		App-Editor		300
VALUE	F5-LTM-User-Role		Operator		400
VALUE	F5-LTM-User-Role		Guest			700
VALUE	F5-LTM-User-Role		Policy-Editor		800
VALUE	F5-LTM-User-Role		No-Access		900

VALUE	F5-LTM-User-Role-Universal	Disabled		0
VALUE	F5-LTM-User-Role-Universal	Enabled			1

VALUE	F5-LTM-User-Console		Disabled		0
VALUE	F5-LTM-User-Console		Enabled			1

END-VENDOR F5

#
# CheckPoint
#
VENDOR		CheckPoint			2620

BEGIN-VENDOR	CheckPoint

ATTRIBUTE	Gaia-User-Role				229	string
ATTRIBUTE	Gaia-SuperUser-Access			230	integer

END-VENDOR	CheckPoint
ALIAS		CheckPoint				Vendor-Specific.CheckPoint

#
# Juniper
#
VENDOR		Juniper				2636

BEGIN-VENDOR	Juniper

ATTRIBUTE	Local-User-Name				1	string
ATTRIBUTE	Allow-Commands				2	string
ATTRIBUTE	Deny-Commands				3	string
ATTRIBUTE	Allow-Configuration			4	string
ATTRIBUTE	Deny-Configuration			5	string

ATTRIBUTE	Interactive-Command			8	string
ATTRIBUTE	Configuration-Change			9	string
ATTRIBUTE	User-Permissions			10	string
ATTRIBUTE	Junosspace-Profile			11	string

ATTRIBUTE	CTP-Group				21	integer
ATTRIBUTE	CTPView-APP-Group			22	integer
ATTRIBUTE	CTPView-OS-Group			23	integer

ATTRIBUTE	Primary-Dns				31	ipaddr
ATTRIBUTE	Primary-Wins				32	ipaddr
ATTRIBUTE	Secondary-Dns				33	ipaddr
ATTRIBUTE	Secondary-Wins				34	ipaddr
ATTRIBUTE	Interface-id				35	string
ATTRIBUTE	Ip-Pool-Name				36	string
ATTRIBUTE	Keep-Alive				37	integer
ATTRIBUTE	CoS-Traffic-Control-Profile		38	string
ATTRIBUTE	CoS-Parameter				39	string
ATTRIBUTE	encapsulation-overhead			40	integer
ATTRIBUTE	cell-overhead				41	integer
ATTRIBUTE	tx-connect-speed			42	integer
ATTRIBUTE	rx-connect-speed			43	integer
ATTRIBUTE	Firewall-filter-name			44	string
ATTRIBUTE	Policer-Parameter			45	string
ATTRIBUTE	Local-Group-Name			46	string
ATTRIBUTE	Local-Interface				47	string
ATTRIBUTE	Switching-Filter			48	string
ATTRIBUTE	VoIP-Vlan				49	string
ATTRIBUTE	CWA-Redirect				50	string

ATTRIBUTE	AV-Pair					52	string

VALUE	CTPView-APP-Group		Net_View		1
VALUE	CTPView-APP-Group		Net_Admin		2
VALUE	CTPView-APP-Group		Global_Admin		3

VALUE	CTP-Group			Read_Only		1
VALUE	CTP-Group			Admin			2
VALUE	CTP-Group			Privileged_Admin	3
VALUE	CTP-Group			Auditor			4

VALUE	CTPView-OS-Group		Web_Manager		1
VALUE	CTPView-OS-Group		System_Admin		2
VALUE	CTPView-OS-Group		Auditor			3

END-VENDOR	Juniper
ALIAS		Juniper					Vendor-Specific.Juniper