`NAS-Port` or `NAS-Port-Id`. In other scenarios identifiers based on the NAS
port may be shared by several devices and are unsuitable for uniquely
identifying devices. In some cases a circuit-specific identifier such as
-`ADSL-Agent-Circuit-Id` may be present.
+`Vendor-Specific.ADSL-Forum.Agent-Circuit-ID` may be present.
CAUTION: However, a circuit-specific identifier is unsuitable if there are
multiple hosts on the circuit with which you issue individual addresses (for
as a hardware address). You should consider the provenance of the data and
whether you trust it, e.g. does it report a MAC address that is under an
untrusted user's control. Sometimes a combination of attributes including one
-that you trust (such as "%{ADSL-Agent-Circuit-Id}:%{Calling-Station-Id}") may
+that you trust (such as "%{Vendor-Specific.ADSL-Forum.Agent-Circuit-ID}:%{Calling-Station-Id}") may
be appropriate.
The `pool_key` is used to issue indexed lookups into the `radippool` table so for
# On a hostile network it SHOULD include a component that you trust,
# arranged such that the overall key cannot be spoofed by manipulation
# of the user-controlled data. For example you might determine that
- # ADSL-Agent-Circuit-Id is trusted but that Calling-Station-Id is
+ # Vendor-Specific.ADSL-Forum.Agent-Circuit-ID is trusted but that Calling-Station-Id is
# formatted as a user-controlled MAC address:
#
-# owner = "%{ADSL-Agent-Circuit-Id} %{Calling-Station-Id}"
+# owner = "%{Vendor-Specific.ADSL-Forum.Agent-Circuit-ID} %{Calling-Station-Id}"
#
# requested_address:: The IP address being renewed or released.
# manipulation of the user-controlled data (i.e. the mac or identifier)
# provided by the user's device.
#
- # For example it might be that the value `ADSL-Agent-Circuit-Id` is
+ # For example it might be that the value `Vendor-Specific.ADSL-Forum.Agent-Circuit-ID` is
# considered trusted as it's set by a controlled device at the edge of
# the network. Calling-Station-Id however, is usually provided by
# the user's device so may be spoofed.
# that it contains both the trusted and untrusted attributes, or if
# the trusted attribute is sufficiently stable and unique, only the
# trusted attribute.
- # One example would be `%{ADSL-Agent-Circuit-Id}.%{Calling-Station-Id}`.`
+ # One example would be `%{Vendor-Specific.ADSL-Forum.Agent-Circuit-ID}.%{Calling-Station-Id}`.`
#
owner = "%{radius.Calling-Station-ID}"
-# owner = "%{radius.ADSL-Agent-Circuit-Id}.%{radius.Calling-Station-Id}"
+# owner = "%{radius.Vendor-Specific.ADSL-Forum.Agent-Circuit-ID}.%{radius.Calling-Station-Id}"
# owner = "%{%{dhcpv4.DHCP-Client-Identifier}:-%{dhcpv4.DHCP-Client-Hardware-Address}}"
BEGIN-VENDOR ADSL-Forum
-#
-# Glue attribute to allow decoding of ADSL-Form vendor specific
-# DHCP options.
-#
-ATTRIBUTE ADSL-Forum-DHCP-Vendor-Specific 0 tlv
-
#
# The first two attributes are prefixed with "ADSL-" because of
# conflicting names in dictionary.redback.
#
-ATTRIBUTE ADSL-Agent-Circuit-Id 1 octets
-ATTRIBUTE ADSL-Agent-Remote-Id 2 octets
+ATTRIBUTE Agent-Circuit-Id 1 octets
+ATTRIBUTE Agent-Remote-Id 2 octets
ATTRIBUTE Actual-Data-Rate-Upstream 129 integer
ATTRIBUTE Actual-Data-Rate-Downstream 130 integer
ATTRIBUTE Minimum-Data-Rate-Upstream 131 integer