1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
|
# -*- text -*-
# Copyright (C) 2019 The FreeRADIUS Server project and contributors
# This work is licensed under CC-BY version 4.0 https://creativecommons.org/licenses/by/4.0
#
# Version $Id$
#
# 2024-06-27 Updated based upon FreeRadius v3.2.4 dictionary file
# - Added : rfc8045 (commented out for now), rfc8559
# - Uncommented : rfc7499, rfc7930
#
# DO NOT EDIT THE FILES IN THIS DIRECTORY
#
# The files in this directory are maintained and updated by
# the FreeRADIUS project. Newer releases of software may update
# or change these files.
#
# Use the main dictionary file (usually /etc/raddb/dictionary)
# for local system attributes and $INCLUDEs.
#
#
#
# This file contains dictionary translations for parsing
# requests and generating responses. All transactions are
# composed of Attribute/Value Pairs. The value of each attribute
# is specified as one of a few data types. Valid data types are:
#
# string - printable text, generally UTF-8 encoded. (The RFCs call this "text")
# ipaddr - 4 octets in network byte order
# ipv4prefix - 1 octet reserved, one octet prefix, 4 octets ipaddr
# integer - 32 bit value in big endian order
# [wireshark uses this type for non-standard 1-2-3 and 8 byte integers as well]
# integer64 - 64 bit value in big endian order
# date - 32 bit value in big endian order - seconds since
# 00:00:00 GMT, Jan. 1, 1970
# ifid - 8 octets in network byte order
# ipv6addr - 16 octets in network byte order
# ipv6prefix - 1 octet reserved, one octet prefix, 16 octets ipv6addr
# tlv - type-length-value
#
# FreeRADIUS includes data types which are not defined
# in the RFC's. These data types are:
#
# abinary - Ascend's binary filter format.
# byte - 8 bit unsigned integer
# ether - 6 octets of hh:hh:hh:hh:hh:hh
# where 'h' is hex digits, upper or lowercase.
# short - 16-bit unsigned integer in network byte order
# signed - 32-bit signed integer in network byte order
# octets - raw octets, printed and input as hex strings.
# e.g.: 0x123456789abcdef The RFCs call this "string".
#
# FreeRADIUS uses a number of data types which are defined in
# RFC 6929. These data types should NEVER be used in any other
# dictionary. We won't even list them here.
#
#
# Enumerated values are stored in the user file with dictionary
# VALUE translations for easy administration.
#
# Example:
#
# ATTRIBUTE VALUE
# --------------- -----
# Framed-Protocol = PPP
# 7 = 1 (integer encoding)
#
#
# Include compatibility dictionary for older users file. Move
# this directive to the end of this file if you want to see the
# old names in the logfiles, instead of the new names.
#
$INCLUDE dictionary.compat
#
# IETF allocated attributes and values. Split out into
# the RFC which defined them.
#
# For a complete list of the standard attributes and values,
# see:
# http://www.iana.org/assignments/radius-types
#
$INCLUDE dictionary.rfc2865
$INCLUDE dictionary.rfc2866
$INCLUDE dictionary.rfc2867
$INCLUDE dictionary.rfc2868
$INCLUDE dictionary.rfc2869
$INCLUDE dictionary.rfc3162
$INCLUDE dictionary.rfc3576
$INCLUDE dictionary.rfc3580
$INCLUDE dictionary.rfc4072
$INCLUDE dictionary.rfc4372
$INCLUDE dictionary.rfc4603
$INCLUDE dictionary.rfc4675
$INCLUDE dictionary.rfc4679
$INCLUDE dictionary.rfc4818
$INCLUDE dictionary.rfc4849
$INCLUDE dictionary.rfc5176
$INCLUDE dictionary.rfc5447
$INCLUDE dictionary.rfc5580
$INCLUDE dictionary.rfc5607
$INCLUDE dictionary.rfc5904
$INCLUDE dictionary.rfc6519
$INCLUDE dictionary.rfc6572
$INCLUDE dictionary.rfc6677
$INCLUDE dictionary.rfc6911
$INCLUDE dictionary.rfc6929
$INCLUDE dictionary.rfc6930
$INCLUDE dictionary.rfc7055
$INCLUDE dictionary.rfc7155
$INCLUDE dictionary.rfc7268
$INCLUDE dictionary.rfc7499
$INCLUDE dictionary.rfc7930
#$INCLUDE dictionary.rfc8045
$INCLUDE dictionary.rfc8559
#
# Mostly values which have been allocated by IANA under
# "expert review", but which don't have an RFC associated with them.
#
$INCLUDE dictionary.iana
#
# These dictionaries define attributes in the IETF managed space.
# (i.e. 1..255). This is wrong. We include them here to allow them.
# The IETF allocated ones are listed below, which gives them priority.
# i.e. don't do this. Don't use these attributes
#
# [wireshark: We move this section after the IETF managed dictionaries
# so that if uncommented they override the conflicting IETF allocated
# attributes. It would be nice to have this as a Wireshark pref instead
# of forcing people to uncomment or include a file.]
#
#$INCLUDE dictionary.usr.illegal
#$INCLUDE dictionary.ascend.illegal
#$INCLUDE dictionary.motorola.illegal
#
# Commented out because of attribute conflicts.
#
#$INCLUDE dictionary.alvarion.wimax.v2_2
#$INCLUDE dictionary.nokia.conflict
#$INCLUDE dictionary.openser
#enabled in lieu of dictionary.starent by request in #10688
$INCLUDE dictionary.starent.vsa1
#$INCLUDE dictionary.wimax.alvarion
#$INCLUDE dictionary.wimax.wichorus
#
# Vendor dictionaries are listed after the standard ones.
#
$INCLUDE dictionary.3com
$INCLUDE dictionary.3gpp
$INCLUDE dictionary.3gpp2
$INCLUDE dictionary.5x9
$INCLUDE dictionary.acc
$INCLUDE dictionary.acme
$INCLUDE dictionary.actelis
$INCLUDE dictionary.adtran
$INCLUDE dictionary.adva
$INCLUDE dictionary.aerohive
$INCLUDE dictionary.airespace
$INCLUDE dictionary.alcatel
$INCLUDE dictionary.alcatel-lucent.aaa
$INCLUDE dictionary.alcatel.esam
$INCLUDE dictionary.alcatel.sr
$INCLUDE dictionary.alphion
$INCLUDE dictionary.alteon
#$INCLUDE dictionary.altiga
$INCLUDE dictionary.alvarion
$INCLUDE dictionary.apc
$INCLUDE dictionary.aptilo
$INCLUDE dictionary.aptis
$INCLUDE dictionary.arbor
$INCLUDE dictionary.arista
$INCLUDE dictionary.aruba
$INCLUDE dictionary.ascend
$INCLUDE dictionary.asn
$INCLUDE dictionary.audiocodes
$INCLUDE dictionary.avaya
$INCLUDE dictionary.azaire
$INCLUDE dictionary.bay
$INCLUDE dictionary.bigswitch
$INCLUDE dictionary.bintec
$INCLUDE dictionary.bluecoat
$INCLUDE dictionary.boingo
$INCLUDE dictionary.bristol
$INCLUDE dictionary.broadsoft
$INCLUDE dictionary.brocade
$INCLUDE dictionary.bskyb
$INCLUDE dictionary.bt
$INCLUDE dictionary.cablelabs
$INCLUDE dictionary.cabletron
$INCLUDE dictionary.calix
$INCLUDE dictionary.cambium
$INCLUDE dictionary.camiant
$INCLUDE dictionary.centec
$INCLUDE dictionary.checkpoint
$INCLUDE dictionary.chillispot
$INCLUDE dictionary.ciena
$INCLUDE dictionary.cisco
#$INCLUDE dictionary.cisco.asa
#
# The Cisco VPN300 dictionary uses the same Vendor ID as the ASA one.
# You shouldn't use both at the same time.
#
# Note : the altiga dictionary, not listed here, also uses the same Vendor ID
# [wireshark: We enable the Cisco VPN3000 dictionary by default]
#
$INCLUDE dictionary.cisco.vpn3000
$INCLUDE dictionary.cisco.bbsm
$INCLUDE dictionary.cisco.vpn5000
$INCLUDE dictionary.citrix
$INCLUDE dictionary.ckey
$INCLUDE dictionary.clavister
$INCLUDE dictionary.cnergee
$INCLUDE dictionary.colubris
$INCLUDE dictionary.columbia_university
$INCLUDE dictionary.compatible
$INCLUDE dictionary.cosine
$INCLUDE dictionary.covaro
$INCLUDE dictionary.dante
$INCLUDE dictionary.dellemc
$INCLUDE dictionary.digium
$INCLUDE dictionary.dlink
$INCLUDE dictionary.dragonwave
$INCLUDE dictionary.efficientip
$INCLUDE dictionary.eleven
$INCLUDE dictionary.eltex
$INCLUDE dictionary.enterasys
$INCLUDE dictionary.epygi
$INCLUDE dictionary.equallogic
$INCLUDE dictionary.ericsson
$INCLUDE dictionary.ericsson.ab
$INCLUDE dictionary.ericsson.packet.core.networks
$INCLUDE dictionary.erx
$INCLUDE dictionary.extreme
$INCLUDE dictionary.f5
$INCLUDE dictionary.fdxtended
$INCLUDE dictionary.force10
$INCLUDE dictionary.fortinet
$INCLUDE dictionary.foundry
$INCLUDE dictionary.freeradius
$INCLUDE dictionary.freeradius.evs5
$INCLUDE dictionary.freeswitch
$INCLUDE dictionary.gandalf
$INCLUDE dictionary.garderos
$INCLUDE dictionary.gemtek
$INCLUDE dictionary.h3c
$INCLUDE dictionary.hillstone
$INCLUDE dictionary.hp
$INCLUDE dictionary.huawei
$INCLUDE dictionary.identity_engines
$INCLUDE dictionary.iea
$INCLUDE dictionary.infinera
$INCLUDE dictionary.infoblox
$INCLUDE dictionary.infonet
$INCLUDE dictionary.ipunplugged
$INCLUDE dictionary.issanni
$INCLUDE dictionary.itk
$INCLUDE dictionary.juniper
$INCLUDE dictionary.jradius
$INCLUDE dictionary.karlnet
$INCLUDE dictionary.kineto
$INCLUDE dictionary.lancom
$INCLUDE dictionary.lantronix
$INCLUDE dictionary.livingston
$INCLUDE dictionary.localweb
$INCLUDE dictionary.lucent
$INCLUDE dictionary.manzara
$INCLUDE dictionary.meinberg
$INCLUDE dictionary.mellanox
$INCLUDE dictionary.meraki
$INCLUDE dictionary.merit
$INCLUDE dictionary.meru
$INCLUDE dictionary.microsemi
$INCLUDE dictionary.microsoft
$INCLUDE dictionary.mikrotik
$INCLUDE dictionary.mimosa
$INCLUDE dictionary.motorola
$INCLUDE dictionary.motorola.wimax
$INCLUDE dictionary.navini
$INCLUDE dictionary.net
$INCLUDE dictionary.netelastic
$INCLUDE dictionary.netscreen
$INCLUDE dictionary.networkphysics
$INCLUDE dictionary.nexans
$INCLUDE dictionary.nile
$INCLUDE dictionary.nokia
$INCLUDE dictionary.nomadix
$INCLUDE dictionary.nortel
$INCLUDE dictionary.ntua
$INCLUDE dictionary.openwifi
$INCLUDE dictionary.packeteer
$INCLUDE dictionary.paloalto
$INCLUDE dictionary.patton
$INCLUDE dictionary.perle
$INCLUDE dictionary.pfsense
$INCLUDE dictionary.pica8
$INCLUDE dictionary.propel
$INCLUDE dictionary.prosoft
$INCLUDE dictionary.proxim
$INCLUDE dictionary.purewave
$INCLUDE dictionary.quiconnect
$INCLUDE dictionary.quintum
$INCLUDE dictionary.rcntec
$INCLUDE dictionary.redcreek
$INCLUDE dictionary.riverbed
$INCLUDE dictionary.riverstone
$INCLUDE dictionary.roaringpenguin
$INCLUDE dictionary.ruckus
$INCLUDE dictionary.ruggedcom
$INCLUDE dictionary.sangoma
$INCLUDE dictionary.sg
$INCLUDE dictionary.shasta
$INCLUDE dictionary.shiva
$INCLUDE dictionary.siemens
$INCLUDE dictionary.slipstream
$INCLUDE dictionary.smartsharesystems
$INCLUDE dictionary.sofaware
$INCLUDE dictionary.softbank
$INCLUDE dictionary.sonicwall
$INCLUDE dictionary.springtide
#$INCLUDE dictionary.starent Make the "old" one above the default (#10688)
$INCLUDE dictionary.surfnet
$INCLUDE dictionary.symbol
$INCLUDE dictionary.t_systems_nova
$INCLUDE dictionary.telebit
$INCLUDE dictionary.telkom
$INCLUDE dictionary.telrad
$INCLUDE dictionary.terena
$INCLUDE dictionary.tplink
$INCLUDE dictionary.trapeze
$INCLUDE dictionary.travelping
$INCLUDE dictionary.tripplite
$INCLUDE dictionary.tropos
$INCLUDE dictionary.ukerna
$INCLUDE dictionary.unisphere
$INCLUDE dictionary.unix
$INCLUDE dictionary.usr
$INCLUDE dictionary.utstarcom
$INCLUDE dictionary.valemount
$INCLUDE dictionary.vasexperts
$INCLUDE dictionary.verizon
$INCLUDE dictionary.versanet
$INCLUDE dictionary.walabi
$INCLUDE dictionary.waverider
$INCLUDE dictionary.wichorus
$INCLUDE dictionary.wifialliance
$INCLUDE dictionary.wimax
$INCLUDE dictionary.wispr
$INCLUDE dictionary.xedia
$INCLUDE dictionary.xylan
$INCLUDE dictionary.yubico
$INCLUDE dictionary.zeus
$INCLUDE dictionary.zte
$INCLUDE dictionary.zyxel
$INCLUDE custom.includes
#
# And finally the server internal attributes.
# These are attributes which NEVER go into a RADIUS packet.
#
###$INCLUDE dictionary.freeradius.internal
|
