RADIUS (radius)
- Layer: Application and control
- Header: variable length
- Notes: Application protocols
Reached from
Fields
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
code | enum(8) | 1 (access_request) | RADIUS packet type (Access-Request, Access-Accept, Accounting-Request, …). | |
identifier | uint(8) | 0 | Identifier matching requests and replies. | |
length | uint(16) | Length of the header and payload in octets | Length of the whole RADIUS packet, in octets (Auto). | |
authenticator | bytes(16) | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 16-octet Request / Response Authenticator (Manual). | |
attributes | tlv — length - 20 octets | 2 items | RADIUS attributes (8-bit type, 8-bit length including the header). |
code
| Value | Name |
|---|---|
| 1 (0x01) | access_request |
| 2 (0x02) | access_accept |
| 3 (0x03) | access_reject |
| 4 (0x04) | accounting_request |
| 5 (0x05) | accounting_response |
| 11 (0x0b) | access_challenge |
| 12 (0x0c) | status_server |
| 40 (0x28) | disconnect_request |
| 41 (0x29) | disconnect_ack |
| 42 (0x2a) | disconnect_nak |
| 43 (0x2b) | coa_request |
| 44 (0x2c) | coa_ack |
| 45 (0x2d) | coa_nak |
attributes
- Type 8 bits, length 8 bits.
- The length counts the type and length fields too.
- Unknown types are kept as raw value octets.
| Type | Name | Value fields | Description |
|---|---|---|---|
| 1 (0x01) | user_name | ||
| 2 (0x02) | user_password | ||
| 3 (0x03) | chap_password | ||
| 4 (0x04) | nas_ip_address | address | |
| 5 (0x05) | nas_port | value | |
| 6 (0x06) | service_type | value | |
| 7 (0x07) | framed_protocol | value | |
| 8 (0x08) | framed_ip_address | address | |
| 18 (0x12) | reply_message | ||
| 24 (0x18) | state | ||
| 25 (0x19) | class | ||
| 26 (0x1a) | vendor_specific | vendor_id, value | |
| 27 (0x1b) | session_timeout | value | |
| 30 (0x1e) | called_station_id | ||
| 31 (0x1f) | calling_station_id | ||
| 32 (0x20) | nas_identifier | ||
| 40 (0x28) | acct_status_type | value | |
| 44 (0x2c) | acct_session_id | ||
| 61 (0x3d) | nas_port_type | value | |
| 79 (0x4f) | eap_message | ||
| 80 (0x50) | message_authenticator |
attributes › nas_ip_address
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
address | ipv4 |
attributes › nas_port
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
value | uint(32) |
attributes › service_type
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
value | uint(32) |
attributes › framed_protocol
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
value | uint(32) |
attributes › framed_ip_address
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
address | ipv4 |
attributes › vendor_specific
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
vendor_id | uint(32) | |||
value | bytes — rest of the PDU |
attributes › session_timeout
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
value | uint(32) |
attributes › acct_status_type
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
value | uint(32) |
attributes › nas_port_type
| Field | Type | Default | Auto | Description |
|---|---|---|---|---|
value | uint(32) |
Constraints
| Level | Rule |
|---|---|
| warning | length within 20..4096 |
Sample templates
- radius-access-request —
templates/protocols/app/radius-access-request.wpg.yaml