Add additional attributes to support features on the 7750 service router

diff --git a/share/dictionary.alcatel.sr b/share/dictionary.alcatel.sr
index ac39125b9a4614fbd908bce6fcd16d6bf81ce4e2..1457a527b145e35d7e68c27622c524aec6097613 100644 (file)
--- a/share/dictionary.alcatel.sr
+++ b/share/dictionary.alcatel.sr
@@ -1,5 +1,5 @@
 # -*- text -*-
-# Copyright (C) 2011 The FreeRADIUS Server project and contributors
+# Copyright (C) 2012 The FreeRADIUS Server project and contributors
 ##############################################################################
 #
 #      Alcatel-Lucent Service Router dictionary.
@@ -36,19 +36,19 @@ VALUE       Timetra-Default-Action          none                    3
 VALUE  Timetra-Action                  permit                  1
 VALUE  Timetra-Action                  deny                    2
 
-# Alcatel Timetra authorization and CoA VSA
+# RADIUS subscriber authorization and CoA VSAs
 ATTRIBUTE      Alc-Primary-Dns                         9       ipaddr
 ATTRIBUTE      Alc-Secondary-Dns                       10      ipaddr
 ATTRIBUTE      Alc-Subsc-ID-Str                        11      string
 ATTRIBUTE      Alc-Subsc-Prof-Str                      12      string
 ATTRIBUTE      Alc-SLA-Prof-Str                        13      string
 ATTRIBUTE      Alc-Force-Renew                         14      string
-ATTRIBUTE      Alc-Create-Host                         15      string
-ATTRIBUTE      Alc-ANCP-Str                            16      string
-ATTRIBUTE      Alc-Retail-Serv-Id                      17      integer
+ATTRIBUTE      Alc-Create-Host                         15      string  # CoA
+ATTRIBUTE      Alc-ANCP-Str                            16      string  # CoA
 ATTRIBUTE      Alc-Retail-Serv-Id                      17      integer
 ATTRIBUTE      Alc-Default-Router                      18      ipaddr
 ATTRIBUTE      Alc-Client-Hardware-Addr                27      string
+ATTRIBUTE      Alc-Force-Nak                           98      string  # CoA
 
 # RADIUS subscriber accounting VSAs
 ATTRIBUTE      Alc-Acct-I-Inprof-Octets-64             19      integer
@@ -60,4 +60,180 @@ ATTRIBUTE   Alc-Acct-I-Outprof-Pkts-64              24      integer
 ATTRIBUTE      Alc-Acct-O-Inprof-Pkts-64               25      integer
 ATTRIBUTE      Alc-Acct-O-Outprof-Pkts-64              26      integer
 
+ATTRIBUTE      Alc-Int-Dest-Id-Str                     28      string
+ATTRIBUTE      Alc-Primary-Nbns                        29      ipaddr
+ATTRIBUTE      Alc-Secondary-Nbns                      30      ipaddr
+ATTRIBUTE      Alc-MSAP-Serv-Id                        31      integer
+ATTRIBUTE      Alc-MSAP-Policy                         32      string
+ATTRIBUTE      Alc-MSAP-Interface                      33      string
+ATTRIBUTE      Alc-PPPoE-PADO-Delay                    34      integer
+ATTRIBUTE      Alc-PPPoE-Service-Name                  35      string
+ATTRIBUTE      Alc-DHCP-Vendor-Class-Id                36      string
+
+# RADIUS subscriber accounting VSAs (HSMDA override counters)
+ATTRIBUTE      Alc-Acct-OC-I-Inprof-Octets-64          37      octets
+ATTRIBUTE      Alc-Acct-OC-I-Outprof-Octets-64         38      octets
+ATTRIBUTE      Alc-Acct-OC-O-Inprof-Octets-64          39      octets
+ATTRIBUTE      Alc-Acct-OC-O-Outprof-Octets-64         40      octets
+ATTRIBUTE      Alc-Acct-OC-I-Inprof-Pkts-64            41      octets
+ATTRIBUTE      Alc-Acct-OC-I-Outprof-Pkts-64           42      octets
+ATTRIBUTE      Alc-Acct-OC-O-Inprof-Pkts-64            43      octets
+ATTRIBUTE      Alc-Acct-OC-O-Outprof-Pkts-64           44      octets
+
+ATTRIBUTE      Alc-App-Prof-Str                        45      string
+ATTRIBUTE      Alc-Tunnel-Group                        46      string
+ATTRIBUTE      Alc-Tunnel-Algorithm                    47      integer
+
+VALUE  Alc-Tunnel-Algorithm            weighted-access         1
+VALUE  Alc-Tunnel-Algorithm            existing-first          2
+
+ATTRIBUTE      Alc-Tunnel-Max-Sessions                 48      integer has_tag
+ATTRIBUTE      Alc-Tunnel-Idle-Timeout                 49      integer has_tag
+ATTRIBUTE      Alc-Tunnel-Hello-Interval               50      integer has_tag
+ATTRIBUTE      Alc-Tunnel-Destruct-Timeout             51      integer has_tag
+ATTRIBUTE      Alc-Tunnel-Max-Retries-Estab            52      integer has_tag
+ATTRIBUTE      Alc-Tunnel-Max-Retries-Not-Estab        53      integer has_tag
+ATTRIBUTE      Alc-Tunnel-AVP-Hiding                   54      integer has_tag
+
+VALUE  Alc-Tunnel-AVP-Hiding           nothing                 1
+VALUE  Alc-Tunnel-AVP-Hiding           sensitive-only          2
+VALUE  Alc-Tunnel-AVP-Hiding           all                     3
+
+ATTRIBUTE      Alc-BGP-Policy                          55      string
+ATTRIBUTE      Alc-BGP-Auth-Keychain                   56      string
+ATTRIBUTE      Alc-BGP-Auth-Key                        57      octets
+ATTRIBUTE      Alc-BGP-Export-Policy                   58      string
+ATTRIBUTE      Alc-BGP-Import-Policy                   59      string
+ATTRIBUTE      Alc-BGP-PeerAS                          60      integer
+ATTRIBUTE      Alc-IPsec-Serv-Id                       61      integer
+ATTRIBUTE      Alc-IPsec-Interface                     62      string
+ATTRIBUTE      Alc-IPsec-Tunnel-Template-Id            63      integer
+ATTRIBUTE      Alc-IPsec-SA-Lifetime                   64      integer
+ATTRIBUTE      Alc-IPsec-SA-PFS-Group                  65      integer
+
+# Match TC TmnxIkePolicyDHGroup in TIMETRA-IPSEC-MIB
+VALUE  Alc-IPsec-SA-PFS-Group          group1                  1
+VALUE  Alc-IPsec-SA-PFS-Group          group2                  2
+VALUE  Alc-IPsec-SA-PFS-Group          group5                  5
+
+ATTRIBUTE      Alc-IPsec-SA-Encr-Algorithm             66      integer
+
+# Match TC TmnxEncrAlgorithm in TIMETRA-IPSEC-MIB
+VALUE  Alc-IPsec-SA-Encr-Algorithm     null                    1
+VALUE  Alc-IPsec-SA-Encr-Algorithm     des                     2
+VALUE  Alc-IPsec-SA-Encr-Algorithm     des3                    3
+VALUE  Alc-IPsec-SA-Encr-Algorithm     aes128                  4
+VALUE  Alc-IPsec-SA-Encr-Algorithm     aes192                  5
+VALUE  Alc-IPsec-SA-Encr-Algorithm     aes256                  6
+
+ATTRIBUTE      Alc-IPsec-SA-Auth-Algorithm             67      integer
+
+# Match TC TmnxAuthAlgorithm in TIMETRA-IPSEC-MIB
+VALUE  Alc-IPsec-SA-Auth-Algorithm     null                    1
+VALUE  Alc-IPsec-SA-Auth-Algorithm     md5                     2
+VALUE  Alc-IPsec-SA-Auth-Algorithm     sha1                    3
+
+ATTRIBUTE      Alc-IPsec-SA-Replay-Window              68      integer
+
+# RADIUS subscriber accounting VSAs (custom records)
+ATTRIBUTE      Alc-Acct-I-High-Octets-Drop_64          69      octets
+ATTRIBUTE      Alc-Acct-I-Low-Octets-Drop_64           70      octets
+ATTRIBUTE      Alc-Acct-I-High-Pack-Drop_64            71      octets
+ATTRIBUTE      Alc-Acct-I-Low-Pack-Drop_64             72      octets
+ATTRIBUTE      Alc-Acct-I-High-Octets-Offer_64         73      octets
+ATTRIBUTE      Alc-Acct-I-Low-Octets-Offer_64          74      octets
+ATTRIBUTE      Alc-Acct-I-High-Pack-Offer_64           75      octets
+ATTRIBUTE      Alc-Acct-I-Low-Pack-Offer_64            76      octets
+ATTRIBUTE      Alc-Acct-I-Unc-Octets-Offer_64          77      octets
+ATTRIBUTE      Alc-Acct-I-Unc-Pack-Offer_64            78      octets
+ATTRIBUTE      Alc-Acct-I-All-Octets-Offer_64          79      octets
+ATTRIBUTE      Alc-Acct-I-All-Pack-Offer_64            80      octets
+ATTRIBUTE      Alc-Acct-O-Inprof-Pack-Drop_64          81      octets
+ATTRIBUTE      Alc-Acct-O-Outprof-Pack-Drop_64         82      octets
+ATTRIBUTE      Alc-Acct-O-Inprof-Octs-Drop_64          83      octets
+ATTRIBUTE      Alc-Acct-O-Outprof-Octs-Drop_64         84      octets
+
+# RADIUS subscriber accounting VSAs (custom records, HSMDA)
+ATTRIBUTE      Alc-Acct-OC-I-All-Octs-Offer_64         85      octets
+ATTRIBUTE      Alc-Acct-OC-I-All-Pack-Offer_64         86      octets
+ATTRIBUTE      Alc-Acct-OC-I-Inpr-Octs-Drop_64         87      octets
+ATTRIBUTE      Alc-Acct-OC-I-Outpr-Octs-Drop_64        88      octets
+ATTRIBUTE      Alc-Acct-OC-I-Inpr-Pack-Drop_64         89      octets
+ATTRIBUTE      Alc-Acct-OC-I-Outpr-Pack-Drop_64        90      octets
+ATTRIBUTE      Alc-Acct-OC-O-Inpr-Pack-Drop_64         91      octets
+ATTRIBUTE      Alc-Acct-OC-O-Outpr-Pack-Drop_64        92      octets
+ATTRIBUTE      Alc-Acct-OC-O-Inpr-Octs-Drop_64         93      octets
+ATTRIBUTE      Alc-Acct-OC-O-Outpr-Octs-Drop_64        94      octets
+
+# Credit control VSAs
+ATTRIBUTE      Alc-Credit-Control-CategoryMap          95      string
+ATTRIBUTE      Alc-Credit-Control-Quota                96      string
+
+ATTRIBUTE      Alc-Tunnel-Challenge                    97      integer has_tag
+
+VALUE  Alc-Tunnel-Challenge             never                  1
+VALUE  Alc-Tunnel-Challenge             always                 2
+
+ATTRIBUTE      Alc-Ipv6-Address                        99      ipv6addr
+ATTRIBUTE      Alc-Serv-Id                             100     integer
+ATTRIBUTE      Alc-Interface                           101     string
+ATTRIBUTE      Alc-ToServer-Dhcp-Options               102     octets
+ATTRIBUTE      Alc-ToClient-Dhcp-Options               103     octets
+ATTRIBUTE      Alc-Tunnel-Serv-Id                      104     integer
+ATTRIBUTE      Alc-Ipv6-Primary-Dns                    105     ipv6addr
+ATTRIBUTE      Alc-Ipv6-Secondary-Dns                  106     ipv6addr
+
+# RADIUS subscriber accounting VSAs (Policers)
+ATTRIBUTE      Alc-Acct-I-statmode                     107     string
+ATTRIBUTE      Alc-Acct-I-Hiprio-Octets_64             108     octets
+ATTRIBUTE      Alc-Acct-I-Lowprio-Octets_64            109     octets
+ATTRIBUTE      Alc-Acct-O-Hiprio-Octets_64             110     octets
+ATTRIBUTE      Alc-Acct-O-Lowprio-Octets_64            111     octets
+ATTRIBUTE      Alc-Acct-I-Hiprio-Packets_64            112     octets
+ATTRIBUTE      Alc-Acct-I-Lowprio-Packets_64           113     octets
+ATTRIBUTE      Alc-Acct-O-Hiprio-Packets_64            114     octets
+ATTRIBUTE      Alc-Acct-O-Lowprio-Packets_64           115     octets
+ATTRIBUTE      Alc-Acct-I-All-Octets_64                116     octets
+ATTRIBUTE      Alc-Acct-O-All-Octets_64                117     octets
+ATTRIBUTE      Alc-Acct-I-All-Packets_64               118     octets
+ATTRIBUTE      Alc-Acct-O-All-Packets_64               119     octets
+
+ATTRIBUTE      Alc-Tunnel-Rx-Window-Size               120     integer has_tag
+
+# NAT Subscriber
+ATTRIBUTE      Alc-Nat-Port-Range                      121     string
+
+# Lawful intercept VSAs
+ATTRIBUTE      Alc-LI-Action                           122     integer encrypt=2
+ATTRIBUTE      Alc-LI-Destination                      123     string  encrypt=2
+
+# This VSA can occur multiple times (for each FC that must be intercepted)
+# If this VSA is not present, all FCs will be intercepted.
+ATTRIBUTE      Alc-LI-FC                               124     integer encrypt=2
+
+# If this VSA is not present, both directions will be intercepted.
+ATTRIBUTE      Alc-LI-Direction                        125     integer encrypt=2
+
+VALUE  Alc-LI-Action                   no-action               1
+VALUE  Alc-LI-Action                   enable                  2
+VALUE  Alc-LI-Action                   disable                 3
+
+VALUE  Alc-LI-FC                       be                      0
+VALUE  Alc-LI-FC                       l2                      1
+VALUE  Alc-LI-FC                       af                      2
+VALUE  Alc-LI-FC                       l1                      3
+VALUE  Alc-LI-FC                       h2                      4
+VALUE  Alc-LI-FC                       ef                      5
+VALUE  Alc-LI-FC                       h1                      6
+VALUE  Alc-LI-FC                       nc                      7
+
+VALUE  Alc-LI-Direction                ingress                 1
+VALUE  Alc-LI-Direction                egress                  2
+
+# Subscriber QoS overrides
+ATTRIBUTE      Alc-Subscriber-QoS-Override             126     string
+
+# RADIUS subscriber accounting VSAs (Policers)
+ATTRIBUTE      Alc-Acct-O-statmode                     127     string
+
 END-VENDOR     Alcatel-Lucent-Service-Router