CoovaChilli RADIUS Attributes
| Attribute | Num | Type | Access Req | Access Resp | Acct Req | Acct Resp | CoA /Disc | Description |
|---|---|---|---|---|---|---|---|---|
| User-name | 1 | String | X | - | X | - | R | Full username as entered by the user. |
| User-Password | 2 | String | X | - | - | - | - | Used for UAM as alternative to CHAP-Password and CHAP-Challenge. |
| CHAP-Password | 3 | String | X | - | - | - | - | Used for UAM CHAP Authentication |
| CHAP-Challenge | 60 | String | X | - | - | - | - | Used for UAM CHAP Authentication |
| EAP-Message | 79 | String | X | X | - | - | - | Used for WPA Authentication |
| NAS-IP-Address | 4 | IPaddr | X | - | X | - | - | IP address of Chilli (set by the nasip or radiuslisten option). If neither radiuslisten nor nasipaddress are set NAS-IP-Address is set to "0.0.0.0". |
| Service-Type | 6 | Integer | X | - | X | - | - | Set to Login (1) for normal authentication requests. The Access-Accept message from the radius server for configuration management messages must also be set to Administrative-User. |
| Framed-IP-Address | 8 | IPaddr | X | X | X | - | - | IP address of the user, which is configurable during MAC authentication in the Access-Accept. |
| Filter-ID | 11 | String | - | X | - | X | X | Filter ID pass on to scripts possibly. |
| Reply-Message | 18 | String | - | X | - | - | - | Reason of reject if present. |
| State | 24 | String | X | X | - | - | - | Sent to chilli in Access-Accept or Access-Challenge. Used transparently in subsequent Access-Request. |
| Class | 25 | String | - | X | X | - | - | Copied transparently by chilli from Access-Accept to Accounting-Request. |
| Session-Timeout | 27 | Integer | - | X | - | X | X | Logout once session timeout is reached (seconds) |
| Idle-Timeout | 28 | Integer | - | X | - | X | X | Logout once idle timeout is reached (seconds) |
| Called-Station-ID | 30 | String | X | - | X | - | - | Set to the nasmac command line option or the MAC address of ChilliSpot if not present. |
| Calling-Station-ID | 31 | String | X | - | X | - | - | MAC address of client |
| NAS-Identifier | 32 | String | X | - | X | - | - | Set to radiusnasid option if present. |
| Acct-Status-Type | 40 | Integer | - | - | X | - | - | 1=Start, 2=Stop, 3=Interim-Update |
| Acct-Input-Octets | 42 | Integer | - | - | X | - | - | Number of octets received from client. |
| Acct-Output-Octets | 43 | Integer | - | - | X | - | - | Number of octets transmitted to client. |
| Acct-Session-ID | 44 | String | X | - | X | - | X | Unique ID to link Access-Request and Accounting-Request messages. |
| Acct-Session-Time | 46 | Integer | - | - | X | - | - | Session duration in seconds. |
| Acct-Input-Packets | 47 | Integer | - | - | X | - | - | Number of packets received from client. |
| Acct-Output-Packets | 48 | Integer | - | - | X | - | - | Number of packets transmitted to client. |
| Acct-Terminate-Cause | 49 | Integer | - | - | X | - | - | 1=User-Request, 2=Lost-Carrier, 4=Idle-Timeout, 5=Session-Timeout, 11=NAS-Reboot |
| Acct-Input-Gigawords | 52 | Integer | - | - | X | - | - | Number of times the Acct-Input-Octets counter has wrapped around. |
| Acct-Output-Gigawords | 53 | Integer | - | - | X | - | - | Number of times the Acct-Output-Octets counter has wrapped around. |
| NAS-Port-Type | 61 | Integer | X | - | X | - | - | 19=Wireless-IEEE-802.11 |
| Message-Authenticator | 80 | String | X | - | X | - | - | Is always included in Access-Request. If present in Access-Accept, Access-Challenge or Access-reject chilli will validate that the Message-Authenticator is correct. |
| Acct-Interim-Interval | 85 | Integer | - | X | - | X | X | If present in Access-Accept chilli will generate interim accounting records with the specified interval (seconds). |
| WISPr-Location-ID | 14122, 1 | String | X | - | X | - | - | Location ID is set to the radiuslocationid option if present. Should be in the format: isocc=<ISO_Country_Code>, cc=<E.164_Country_Code>, ac=<E164_Area_Code>, network=<ssid/ZONE> |
| WISPr-Location-Name | 14122, 2 | String | X | - | X | - | - | Location Name is set to the radiuslocationname option if present. Should be in the format: <HOTSPOT_OPERATOR_NAME>,<LOCATION> |
| WISPr-Logoff-URL | 14122, 3 | String | X | - | - | - | - | Chilli includes this attribute in Access-Request messages in order to notify the operator of the log off URL to use for logging off clients. Defaults to "http://192.168.182.1:3990/logoff". |
| WISPr-Redirection-URL | 14122, 4 | String | - | X | - | - | - | If present the client will be redirected to this URL once authenticated. This URL should include a link to WISPr-Logoff-URL in order to enable the client to log off. |
| WISPr-Bandwidth-Max-Up | 14122, 7 | Integer | - | X | - | X | X | Maximum transmit rate (b/s). Limits the bandwidth of the connection. Note that this attribute is specified in bits per second. |
| WISPr-Bandwidth-Max-Down | 14122, 8 | Integer | - | X | - | X | X | Maximum receive rate (b/s). Limits the bandwidth of the connection. Note that this attribute is specified in bits per second. |
| WISPr-Session-Terminate-Time | 14122, 9 | String | - | X | - | X | X | The time when the user should be disconnected in ISO 8601 format (YYYY-MM-DDThh:mm:ssTZD). If TZD is not specified local time is assumed. For example a disconnect on 18 December 2001 at 7:00 PM UTC would be specified as 2001-12-18T19:00:00+00:00. |
| ChilliSpot-Max-Input-Octets | 14559, 1 | Integer | - | X | - | X | X | Maximum number of octets the user is allowed to transmit. After this limit has been reached the user will be disconnected. |
| ChilliSpot-Max-Output-Octets | 14559, 2 | Integer | - | X | - | X | X | Maximum number of octets the user is allowed to receive. After this limit has been reached the user will be disconnected. |
| ChilliSpot-Max-Total-Octets | 14559, 3 | Integer | - | X | - | X | X | Maximum total octets the user is allowed to send or receive. After this limit has been reached the user will be disconnected. |
| ChilliSpot-Bandwidth-Max-Up | 14559, 4 | Integer | - | X | - | X | X | Maximum bandwidth up |
| ChilliSpot-Bandwidth-Max-Down | 14559, 5 | Integer | - | X | - | X | X | Maximum bandwidth down |
| ChilliSpot-Config | 14559, 6 | String | X | X | - | X | X | Configurations passed between chilli and back-end as name value pairs |
| ChilliSpot-Lang | 14559, 7 | String | X | - | - | - | - | Language selected in user interface |
| ChilliSpot-Version | 14559, 8 | String | X | - | - | - | - | Version of Chilli sending this AccessRequest |
| MS-MPPE-Send-Key | 311,16 | String | - | X | - | - | - | Used for WPA |
| MS-MPPE-Recv-Key | 311,17 | String | - | X | - | - | - | Used for WPA |
Notes
- Attributes returned in an Accounting-Response are not supported by RFC and only used by chilli if the acctupdate option is used
- The RADIUS CoA (Change of Authorization) and Disconnect feature requires options coaport and perhaps coanoipcheck
![[Main Page]](/wiki/skins/common/images/coova.gif)