Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Juniper Networks VSAs Supported by the AAA Service Framework

Table 1 describes Juniper Networks VSAs supported by the Junos OS AAA Service Framework. The AAA Service Framework uses vendor ID 4874, which is assigned to Juniper Networks by the Internet Assigned Numbers Authority (IANA).

Note: A “Yes” entry in the Dynamic CoA Support column indicates that the attribute can be dynamically configured by Access-Accept messages and dynamically modified by CoA-Request messages.

Table 1: Supported Juniper Networks VSAs

Attribute Number

Attribute Name

Description

Value

Dynamic CoA
Support

26-1

Virtual-Router

Client logical system:routing instance name. Allowed only from AAA server for “default” logical system:routing instance.

When this VSA is not included in the subscriber profile, the routing instance assigned to the subscriber—the one in which the subscriber session comes up—varies by subscriber type.

For DHCP and PPPoE subscribers, it is the default routing instance.

For L2TP tunnel subscribers, it is the routing instance in which the tunnel resides, whether default or non-default. If the tunnel routing instance is not default and you want the L2TP session to be in the default routing instance, you must use the Virtual-Router VSA to set the desired routing instance.

string: logical system:routing instance

No

26-4

Primary-DNS

Client DNS address negotiated during IPCP.

integer: 4-byte primary-dns-address

No

26-5

Secondary-DNS

Client DNS address negotiated during IPCP

integer: 4-byte secondary-dns-address

No

26-6

Primary-WINS

Client WINS (NBNS) address negotiated during IPCP.

integer: 4-byte primary-wins-address

No

26-7

Secondary-WINS

Client WINS (NBNS) address negotiated during IPCP.

integer: 4-byte secondary-wins-address

No

26-8

Tunnel-Virtual-Router

Virtual router name for tunnel connection.

string: tunnel-virtual-router

No

26-9

Tunnel-Password

Tunnel password in cleartext.

Do not use both this VSA and the standard RADIUS attribute Tunnel-Password [69]. The standard attribute is recommended because the password is encrypted when that attribute is used.

string: tunnel-password

No

26-10

Ingress-Policy-Name

Input policy name to apply to client interface.

string: input-policy-name

Yes

26-11

Egress-Policy-Name

Output policy name to apply to client interface.

string: output-policy-name

Yes

26-23

IGMP-Enable

Whether IGMP is enabled or disabled on a client interface.

integer:

  • 0=disable
  • 1=enable

Yes

26-25

Redirect-VRouter-Name

Client logical system:routing instance name indicating to which logical system:routing instance the request is redirected for user authentication.

string: logical-system:routing-instance

No

26-33

Tunnel-Max-Sessions

Maximum number of sessions allowed in a tunnel.

integer: 4-octet

No

26-34

Framed-IP-Route-Tag

Route tag to apply to returned framed-ip-address.

integer: 4-octet

No

26-42

Input-Gigapackets

Number of times the input-packets attribute rolls over its 4-octet field.

Integer

No

26-43

Output-Gigapackets

Number of times the output-packets attribute rolls over its 4-octet field.

Integer

No

26-47

Ipv6-Primary-DNS

Client primary IPv6 DNS address negotiated by DHCP.

hexadecimal string: ipv6-primary-dns-address

No

26-48

Ipv6-Secondary-DNS

Client secondary IPv6 DNS address negotiated by DHCP.

hexadecimal string: ipv6-secondary-dns-address

No

26-55

DHCP-Options

Client DHCP options.

string: dhcp-options

No

26-56

DHCP-MAC-Address

Client MAC address.

string: mac-address

No

26-57

DHCP-GI-Address

DHCP relay agent IP address.

integer: 4-octet

No

26-58

LI-Action

Traffic mirroring action.

For dynamic CoA, VSA 26-58 changes the action on the mirrored traffic identified by VSA 26–59.

Salt-encrypted integer

0=stop mirroring

1=start mirroring

2=no action

Yes
(together with 26-59)

26-59

Med-Dev-Handle

Identifier that associates mirrored traffic to a specific subscriber.

For dynamic CoA, VSA 26-58 changes the action on the mirrored traffic identified by VSA 26–59.

Salt-encrypted string

Yes
(together with 26-58)

26-60

Med-Ip-Address

IP address of content destination device to which mirrored traffic is forwarded.

Salt-encrypted IP address

No

26-61

Med-Port-Number

UDP port in the content destination device to which mirrored traffic is forwarded.

Salt-encrypted integer

No

26-63

Interface-Desc

Text string that identifies the subscriber’s access interface.

string: interface-description

No

26-64

Tunnel-Group

Name of the tunnel group (profile) assigned to a domain map.

string: tunnel-group-name

No

26-65

Activate-Service

Service to activate for the subscriber. Tagged VSA, which supports 8 tags (1-8).

string: service-name

Yes

26-66

Deactivate-Service

Service to deactivate for the subscriber.

string: service-name

No

26-69

Service-Statistics

Whether statistics for the service is enabled or disabled. Tagged VSA, which supports 8 tags (1-8).

  • 0 = disable
  • 1 = enable time statistics
  • 2 = enable time and volume statistics

Yes

26-71

IGMP-Access-Name

Access list to use for the group (G) filter.

string: 32-octet

Yes

26-72

IGMP-Access-Src-Name

Access list to use for the source-group (S,G) filter.

string: 32-octet

Yes

26-74

MLD-Access-Name

Access list to use for the group (G) filter.

string: 32-octet

Yes

26-75

MLD-Access-Src-Name

Access list to use for the source-group (S,G) filter.

string: 32-octet

Yes

26-77

MLD-Version

MLD protocol version.

integer: 1-octet

  • 1=MLD version 1
  • 2=MLD version 2

Yes

26-78

IGMP-Version

IGMP protocol version.

integer: 1-octet

  • 1=IGMP version 1
  • 2=IGMP version 2
  • 3=IGMP version 3

Yes

26-83

Service-Session

Name of the service.

string: service-name

No

26–84

Mobile-IP-Algorithm

Authentication algorithm used for Mobile IP registration.

integer: 4-octet

No

26–85

Mobile-IP-SPI

Security parameter index number for Mobile IP registration.

integer: 4-octet

No

26–86

Mobile-IP-Key

Security association MD5 key for Mobile IP registration.

string: key

No

26–87

Mobile-IP-Replay

Replay timestamp for Mobile IP registration.

integer: 4-octet

No

26–89

Mobile-IP-Lifetime

Registration lifetime for Mobile IP registration.

integer: 4-octet

No

26–92

L2C-Up-Stream-Data

Actual upstream rate access loop parameter (ASCII encoded) as defined in GSMP extensions for layer2 control (L2C) Topology Discovery and Line Configuration.

string: actual upstream rate access loop parameter (ASCII encoded)

26–93

L2C-Down-Stream-Data

Actual downstream rate access loop parameter (ASCII encoded) as defined in GSMP extensions for layer2 control (L2C) Topology Discovery and Line Configuration.

string: actual downstream rate access loop parameter (ASCII encoded)

26-97

IGMP-Immediate-Leave

IGMP Immediate Leave.

integer: 4-octet

  • 0=disable
  • 1=enable

Yes

26-100

MLD-Immediate-Leave

MLD Immediate Leave.

integer: 4-octet

  • 0=disable
  • 1=enable

Yes

26-106

IPv6-Ingress-Policy-Name

Input policy name to apply to a user IPv6 interface.

string: policy-name

Yes

26-107

IPv6-Egress-Policy-Name

Output policy name to apply to a user IPv6 interface.

string: policy-name

Yes

26-108

CoS-Traffic-Control-
Profile-Parameter-Type

CoS traffic-shaping parameter type and description:

  • T01: Scheduler-map name
  • T02: Shaping rate
  • T03: Guaranteed rate
  • T04: Delay-buffer rate
  • T05: Excess rate
  • T06Traffic-control profile
  • T07: Shaping mode
  • T08: Byte adjust
  • T09: Adjust minimum
  • T10: Excess-rate high
  • T11: Excess-rate low
  • T12: Shaping rate burst
  • T13: Guaranteed rate burst

Two parts, delimited by white space:

  • Parameter type
  • Parameter value

Examples:

  • T01 smap_basic
  • T02 50m
  • T03 1m
  • T04 2000
  • T05 200
  • T06 tcp-gold
  • T07 frame-mode
  • T08 50

Yes

26-109

DHCP-Guided-Relay-Server

IP address of DHCP server that DHCP relay agent uses to forward the discover PDUs.

integer: 4-byte ip-address

No

26–110

Acc-Loop-Cir-Id

Identification of the subscriber node connection to the access node.

string: up to 63 ASCII characters

26–111

Acc-Aggr-Cir-Id-Bin

Unique identification of the DSL line.

integer: 8-octet

26–112

Acc-Aggr-Cir-Id-Asc

Identification of the uplink on the access node, as in the following examples:

  • Ethernet access aggregation—ethernet slot/port [:inner-vlan-id] [:outer-vlan-id]
  • ATM aggregation—atm slot/port:vpi.vci

string: up to 63 ASCII characters

26–113

Act-Data-Rate-Up

Actual upstream data rate of the subscriber’s synchronized DSL link.

integer: 4-octet

26–114

Act-Data-Rate-Dn

Actual downstream data rate of the subscriber’s synchronized DSL link.

integer: 4-octet

26–115

Min-Data-Rate-Up

Minimum upstream data rate configured for the subscriber.

integer: 4-octet

26–116

Min-Data-Rate-Dn

Minimum downstream data rate configured for the subscriber.

integer: 4-octet

26–117

Att-Data-Rate-Up

Maximum upstream data rate that the subscriber can attain.

integer: 4-octet

26–118

Att-Data-Rate-Dn

Maximum downstream data rate that the subscriber can attain.

integer: 4-octet

26–119

Max-Data-Rate-Up

Maximum upstream data rate configured for the subscriber.

integer: 4-octet

26–120

Max-Data-Rate-Dn

Maximum downstream data rate configured for the subscriber.

integer: 4-octet

26–121

Min-LP-Data-Rate-Up

Minimum upstream data rate in low power state configured for the subscriber.

integer: 4-octet

26–122

Min-LP-Data-Rate-Dn

Minimum downstream data rate in low power state configured for the subscriber.

integer: 4-octet

26–123

Max-Interlv-Delay-Up

Maximum one-way upstream interleaving delay configured for the subscriber.

integer: 4-octet

26–124

Act-Interlv-Delay-Up

Subscriber’s actual one-way upstream interleaving delay..

integer: 4-octet

26–125

Max-Interlv-Delay-Dn

Maximum one-way downstream interleaving delay configured for the subscriber.

integer: 4-octet

26–126

Act-Interlv-Delay-Dn

Subscriber’s actual one-way downstream interleaving delay.

integer: 4-octet

26–127

DSL-Line-State

State of the DSL line.

integer: 4-octet

  • 1 = Show uptime
  • 2 = Idle
  • 3 = Silent

26–128

DSL-Type

Encapsulation used by the subscriber associated with the DSLAM interface from which requests are initiated.

26-130

Qos-Set-Name

Interface set to apply to the dynamic profile.

string: interface-set-name

No

26-140

Service-Interim-Acct-Interval

Amount of time between interim accounting updates for this service. Tagged VSA, which supports 8 tags (1-8).

  • range = 600 through 86400 seconds
  • 0 = disabled

Note: Values are rounded up to the next higher multiple of 10 minutes. For example, a setting of 900 seconds (15 minutes) is rounded up to 20 minutes (1200 seconds).

Yes

26–141

Downstream-Calculated-
QoS-Rate

Calculated (adjusted) downstream QoS rate in Kbps as set by the ANCP configuration.

range = 1000 through 4,294,967,295

26–142

Upstream-Calculated-
QoS-Rate

Calculated (adjusted) upstream QoS rate in Kbps as set by the ANCP configuration.

range = 1000 through 4,294,967,295

26-143

Max-Clients-Per-Interface

Maximum allowable client sessions per interface. For DHCP clients, this value is the maximum sessions per logical interface. For PPPoE clients, this value is the maximum sessions (PPPoE interfaces) per PPPoE underlying interface.

integer: 4-octet

No

26-146

CoS-Scheduler-Pmt-Type

CoS scheduler parameter type and description:

  • Null: CoS scheduler name
  • T01: CoS scheduler transmit rate
  • T02: CoS scheduler buffer size
  • T03: CoS scheduler priority
  • T04: CoS scheduler drop-profile low
  • T05: CoS scheduler drop-profile medium-low
  • T06: CoS scheduler drop-profile medium-high
  • T07: CoS scheduler drop-profile high
  • T08: CoS scheduler drop-profile any

Three parts, delimited by white space:

  • Scheduler name
  • Parameter type
  • Parameter value

Examples:

  • be_sched
  • be_sched T01 12m
  • be_sched T02 26

Yes

26-151

IPv6-Acct-Input-Octets

IPv6 receive octets.

integer

No

26-152

IPv6-Acct-Output-Octets

IPv6 transmit octets.

integer

No

26-153

IPv6-Acct-Input-Packets

IPv6 receive packets.

integer

No

26-154

IPv6-Acct-Output-Packets

IPv6 transmit packets.

integer

No

26-155

IPv6-Acct-Input-Gigawords

IPv6 receive gigawords.

integer

No

26-156

IPv6-Acct-Output-Gigawords

IPv6 transmit gigawords.

integer

No

26-158

PPPoE-Padn

Route add for PPPoE sessions

string

No

26-161

IPv6-Delegated-Pool-Name

Address pool used to locally allocate a delegated prefix (IA_PD).

string

No

Published: 2013-02-11