comparison conf/opendiam.eap.testbed.aaa/opendiameter/diameternasreq/dictionary.xml @ 0:9e5a3c884de6

Initial import of the virtual testbed.
author Sebastien Decugis <sdecugis@nict.go.jp>
date Thu, 17 Jun 2010 11:00:32 +0900
parents
children
comparison
equal deleted inserted replaced
-1:000000000000 0:9e5a3c884de6
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE dictionary SYSTEM "dictionary.dtd">
3 <!--
4 $Log: dictionary.xml,v $
5 Revision 1.15 2006/05/31 17:53:32 vfajardo
6 xml migration
7
8 Revision 1.14 2006/05/02 14:29:03 vfajardo
9 interop changes
10
11 Revision 1.13 2006/05/02 14:20:21 vfajardo
12 EAP dictionary
13
14 Revision 1.12 2006/04/24 20:08:56 vfajardo
15 inband security id
16
17 Revision 1.11 2006/04/19 20:36:18 vfajardo
18 1298700
19
20 Revision 1.10 2006/04/05 17:53:25 vfajardo
21 Updates to dictionary
22
23 Revision 1.9 2005/06/29 14:44:15 vfajardo
24 test changes
25
26 Revision 1.8 2004/12/23 17:08:41 vfajardo
27 more fixes
28
29 Revision 1.7 2004/12/22 22:08:20 vfajardo
30 interim checkin
31
32 Revision 1.6 2004/12/10 22:53:03 vfajardo
33 next gen
34
35 Revision 1.5 2004/12/02 23:32:27 vfajardo
36 next gen bugs
37
38 Revision 1.4 2004/05/18 01:14:56 yohba
39 *** empty log message ***
40
41 Revision 1.18 2004/05/18 01:13:38 yohba
42 *** empty log message ***
43
44 Revision 1.17 2004/04/20 01:45:22 vfajardo
45 diameter_address_t changes
46
47 Revision 1.16 2004/04/08 14:19:53 vfajardo
48 Added protocol id parser to header
49
50 Revision 1.15 2004/01/04 12:01:55 yohba
51 added IPFilter-Rule type parser
52
53 Revision 1.14 2003/12/16 02:39:12 yohba
54 Bug fix to 858312.
55
56 Revision 1.13 2003/12/09 03:48:10 yohba
57 Minor change.
58
59 Revision 1.12 2003/12/04 21:20:28 yohba
60 *** empty log message ***
61
62 Revision 1.11 2003/12/04 20:10:28 yohba
63 *** empty log message ***
64
65 Revision 1.10 2003/11/27 00:03:46 vfajardo
66 Added test for multiple instance grouped AVP
67
68 Revision 1.9 2003/11/25 21:13:46 vfajardo
69 Added multiple proxy-info instance
70
71 Revision 1.8 2003/11/25 05:28:32 yohba
72 *** empty log message ***
73
74 Revision 1.6 2003/10/01 01:35:13 yohba
75 Added NASREQ dictionary.
76
77 Revision 1.5 2003/09/30 23:37:42 yohba
78 Added Mobile IPv4 Application dictionary.
79
80 Revision 1.4 2003/08/05 16:32:08 yohba
81 More efficient AAAMessageBlock management.
82
83 Revision 1.3 2003/07/09 17:58:40 vfajardo
84 Fixed accounting commands and AVP's, added Event-timestamp and removed RADUIS session
85
86 Revision 1.3 2003/07/09 17:57:48 vfajardo
87 Fixed accounting commands and AVP's, added Event-timestamp and removed RADUIS session
88
89 Revision 1.2 2003/03/13 21:01:12 vfajardo
90 Formalize dictionary XML files into one
91
92 Revision 1.1.1.1 2002/11/06 21:19:49 frascone
93 Imported sources
94
95 Revision 1.1.1.1 2002/09/19 00:57:42 ohba
96 no message
97
98 Revision 1.1.1.1 2002/09/18 13:51:53 ohba
99 no message
100
101 Revision 1.7 2002/09/17 14:03:13 ohba
102 no message
103
104 Revision 1.6 2002/08/02 18:41:07 victorf
105 spelling
106
107 Revision 1.5 2002/06/28 21:01:02 ohba
108 *** empty log message ***
109
110 Revision 1.4 2002/05/24 15:25:50 ohba
111 no message
112
113 Revision 1.3 2002/05/10 15:23:45 ohba
114 no message
115
116 Revision 1.2 2002/05/03 14:45:49 ohba
117 no message
118
119 Revision 1.1 2002/04/30 21:23:40 ohba
120 no message
121
122 Revision 1.15 2001/12/13 23:07:26 dave
123 Updated DTD and dictionary files with new changes. Please review
124 and send me e-mail with any comments.
125
126 Revision 1.14 2001/09/26 19:55:21 mjones
127 Added type-parent for Time.
128 Moved User-Name, Class and Session-Timeout AVPs from nasreq.xml to dictionary.xml
129 Corrected Proxy-Info to be Grouped instead of OctetString.
130 Corrected data types for Accounting-Multi-Session-Id and Accounting-Session-Id from Unsigned32 to UTF8String.
131 Corrected data type for Authorization-Lifetime from Integer32 to Unsigned32.
132 Corrected numerous data types from Integer32 to Unsigned32 in nasreq.xml
133
134 Revision 1.13 2001/09/26 13:58:56 mjones
135 Typo vendir instead of vendor in AVP 266.
136
137 Revision 1.12 2001/09/21 01:13:16 mjones
138 Corrected replacement of vendor-id with vendor-label in some AVPs
139
140 Revision 1.11 2001/09/20 18:27:58 mjones
141 Removed vendor-bit attribute from elements.
142
143 Revision 1.10 2001/09/19 21:38:57 mjones
144 Removed #PCDATA from command element.
145
146 Revision 1.9 2001/09/19 19:46:38 mjones
147 Moved the vendor element to be the same level as base and application.
148 Modified vendor-id to be SMI Private Enterprise Code instead of a label.
149 Removed vendor-id="None" since vendor-id was IMPLIED.
150 Added type attribute to command (request or answer).
151 Removed duplicate AVPs from nasreq.xml (Acct-Session-Id, Acct-Multi-Session-Id)
152 Corrected typos in enum codes for Auth-Session-State and Disconnect-Cause.
153
154 Revision 1.4 2001/09/19 00:49:48 mjones
155 Removed vendor-label.
156
157 Revision 1.3 2001/09/18 00:08:02 mjones
158 Fixed command parsing and moved some parsing logic around.
159
160 Revision 1.2 2001/09/14 00:40:35 mjones
161 Moved Vendor to root in DTD
162
163 Revision 1.1 2001/09/08 23:46:45 mjones
164 Initial commit of renamed dictionary classes.
165
166 Revision 1.2 2001/09/07 23:59:54 mjones
167 Daily commit: added test harness
168
169 Revision 1.1 2001/09/07 13:15:48 mjones
170 Complete remaining classes and add dictionary files.
171
172 Revision 1.8 2001/08/28 21:33:56 chaos
173 Added a couple of AVPs, and fixed a typo
174
175 Revision 1.7 2001/08/24 18:03:24 chaos
176 Mark's Changes
177
178 Revision 1.6 2001/07/31 19:13:55 chaos
179 Missed a couple of MIP AVPs
180
181 Revision 1.5 2001/07/31 19:09:22 chaos
182 Added Mobile-Ip and Sun Ping Extension
183
184 Revision 1.4 2001/07/31 17:43:25 chaos
185 Oops, forgot to turn on validity checking. Fixed some errors found with validity checking turned on
186
187 Revision 1.3 2001/07/31 16:56:31 chaos
188 Added commands, and validated with xmllint
189
190 Revision 1.2 2001/07/31 16:29:34 chaos
191 Checking in some changes to verify log and ident strings
192
193 -->
194
195 <dictionary>
196 <!-- ************************* Vendors **************************** -->
197 <vendor id="61" name="Merit Networks"/>
198 <vendor id="42" name="Sun Microsystems, Inc."/>
199 <vendor id="429" name="US Robotics Corp."/>
200 <!-- *********************** End Vendors ************************** -->
201
202 <!-- ***************** Base Protocol Definition ******************* -->
203 <base uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-diameter-08.txt">
204
205 <!-- *********************** Commands *************************** -->
206 <!-- Diameter Base Protocol Command Codes -->
207 <command name="PROXYABLE-ERROR" code="0" pbit="1">
208 <answerrules>
209 <fixed>
210 <avprule name="Session-Id" maximum="1"/>
211 </fixed>
212 <required>
213 <avprule name="Origin-Host" maximum="1" minimum="1"/>
214 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
215 <avprule name="Result-Code" maximum="1" minimum="1"/>
216 </required>
217 <optional>
218 <avprule name="Origin-State-Id" maximum="1" minimum="1"/>
219 <avprule name="Error-Reporting-Host" maximum="1"/>
220 <avprule name="Redirect-Host"/>
221 <avprule name="Redirect-Host-Usage" maximum="1"/>
222 <avprule name="Proxy-Info" maximum="1"/>
223 <avprule name="AVP"/>
224 </optional>
225 </answerrules>
226 </command>
227
228 <command name="NON-PROXYABLE-ERROR" code="0">
229 <answerrules>
230 <fixed>
231 <avprule name="Session-Id" maximum="1"/>
232 </fixed>
233 <required>
234 <avprule name="Origin-Host" maximum="1" minimum="1"/>
235 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
236 <avprule name="Result-Code" maximum="1" minimum="1"/>
237 </required>
238 <optional>
239 <avprule name="Origin-State-Id" maximum="1"/>
240 <avprule name="Error-Reporting-Host" maximum="1"/>
241 <avprule name="Redirect-Host"/>
242 <avprule name="Redirect-Host-Usage" maximum="1"/>
243 <avprule name="Proxy-Info" maximum="1"/>
244 <avprule name="AVP"/>
245 </optional>
246 </answerrules>
247 </command>
248
249 <command name="Example" code="9999999" pbit="1">
250 <requestrules>
251 <required>
252 <avprule name="Destination-Host" maximum="1" minimum="1"/>
253 </required>
254 <optional>
255 <avprule name="Acct-Application-Id" minimum="0"/>
256 <avprule name="Proxy-Info" minimum="0" maximum="10" />
257 <avprule name="Route-Record"/>
258 <avprule name="Example-URI" maximum="1" />
259 <avprule name="Example-IPFilterRule" maximum="1" />
260 <avprule name="AVP"/>
261 </optional>
262 </requestrules>
263 <answerrules>
264 <required>
265 <avprule name="Destination-Host" maximum="1" minimum="1"/>
266 </required>
267 <optional>
268 <avprule name="Acct-Application-Id" minimum="0"/>
269 <avprule name="Proxy-Info" minimum="0" maximum="10" />
270 <avprule name="Route-Record"/>
271 <avprule name="Example-URI" maximum="1" />
272 <avprule name="Example-IPFilterRule" maximum="1" />
273 <avprule name="AVP"/>
274 </optional>
275 </answerrules>
276 </command>
277
278 <command name="Abort-Session" code="274" pbit="1">
279 <requestrules>
280 <fixed>
281 <avprule name="Session-Id" maximum="1" minimum="1"/>
282 </fixed>
283 <required>
284 <avprule name="Origin-Host" maximum="1" minimum="1"/>
285 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
286 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
287 <avprule name="Destination-Host" maximum="1" minimum="1"/>
288 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
289 </required>
290 <optional>
291 <avprule name="User-Name" maximum="1"/>
292 <avprule name="Origin-State-Id" maximum="1"/>
293 <avprule name="AVP"/>
294 <avprule name="Proxy-Info"/>
295 <avprule name="Route-Record"/>
296 </optional>
297 </requestrules>
298 <answerrules>
299 <fixed>
300 <avprule name="Session-Id" maximum="1" minimum="1"/>
301 </fixed>
302 <required>
303 <avprule name="Result-Code" maximum="1" minimum="1"/>
304 <avprule name="Origin-Host" maximum="1" minimum="1"/>
305 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
306 </required>
307 <optional>
308 <avprule name="User-Name" maximum="1"/>
309 <avprule name="Origin-State-Id" maximum="1"/>
310 <avprule name="Error-Message" maximum="1"/>
311 <avprule name="Error-Reporting-Host" maximum="1"/>
312 <avprule name="Failed-AVP"/>
313 <avprule name="Redirect-Host"/>
314 <avprule name="Redirect-Host-Usage" maximum="1"/>
315 <avprule name="Proxy-Info"/>
316 <avprule name="AVP"/>
317 </optional>
318 </answerrules>
319 </command>
320
321 <command name="Capabilities-Exchange" code="257">
322 <requestrules>
323 <required>
324 <avprule name="Origin-Host" maximum="1" minimum="1"/>
325 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
326 <avprule name="Host-IP-Address" minimum="1"/>
327 <avprule name="Vendor-Id" maximum="1" minimum="1"/>
328 <avprule name="Product-Name" maximum="1" minimum="1"/>
329 </required>
330 <optional>
331 <avprule name="Origin-State-Id" maximum="1"/>
332 <avprule name="Supported-Vendor-Id"/>
333 <avprule name="Auth-Application-Id"/>
334 <avprule name="Acct-Application-Id"/>
335 <avprule name="Vendor-Specific-Application-Id"/>
336 <avprule name="Firmware-Revision" maximum="1"/>
337 <avprule name="Inband-Security-Id" maximum="1"/>
338 <avprule name="AVP"/>
339 </optional>
340 </requestrules>
341 <answerrules>
342 <required>
343 <avprule name="Result-Code" maximum="1" minimum="1"/>
344 <avprule name="Origin-Host" maximum="1" minimum="1"/>
345 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
346 <avprule name="Host-IP-Address" minimum="1"/>
347 <avprule name="Vendor-Id" maximum="1" minimum="1"/>
348 <avprule name="Product-Name" maximum="1" minimum="1"/>
349 </required>
350 <optional>
351 <avprule name="Origin-State-Id" maximum="1"/>
352 <avprule name="Error-Message" maximum="1"/>
353 <avprule name="Failed-AVP"/>
354 <avprule name="Supported-Vendor-Id"/>
355 <avprule name="Auth-Application-Id"/>
356 <avprule name="Acct-Application-Id"/>
357 <avprule name="Vendor-Specific-Application-Id"/>
358 <avprule name="Firmware-Revision" maximum="1"/>
359 <avprule name="AVP"/>
360 </optional>
361 </answerrules>
362 </command>
363
364 <command name="Device-Watchdog" code="280">
365 <requestrules>
366 <required>
367 <avprule name="Origin-Host" maximum="1" minimum="1"/>
368 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
369 </required>
370 <optional>
371 <avprule name="Origin-State-Id" maximum="1"/>
372 </optional>
373 </requestrules>
374 <answerrules>
375 <required>
376 <avprule name="Result-Code" maximum="1" minimum="1"/>
377 <avprule name="Origin-Host" maximum="1" minimum="1"/>
378 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
379 </required>
380 <optional>
381 <avprule name="Error-Message" maximum="1"/>
382 <avprule name="Failed-AVP"/>
383 <avprule name="Origin-State-Id" maximum="1"/>
384 </optional>
385 </answerrules>
386 </command>
387
388 <command name="Disconnect-Peer" code="282">
389 <requestrules>
390 <required>
391 <avprule name="Origin-Host" maximum="1" minimum="1"/>
392 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
393 <avprule name="Disconnect-Cause" maximum="1" minimum="1"/>
394 </required>
395 </requestrules>
396 <answerrules>
397 <required>
398 <avprule name="Result-Code" maximum="1" minimum="1"/>
399 <avprule name="Origin-Host" maximum="1" minimum="1"/>
400 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
401 </required>
402 <optional>
403 <avprule name="Error-Message" maximum="1"/>
404 <avprule name="Failed-AVP"/>
405 </optional>
406 </answerrules>
407 </command>
408
409 <command name="Re-Auth" code="258">
410 <requestrules>
411 <fixed>
412 <avprule name="Session-Id" maximum="1" minimum="1"/>
413 </fixed>
414 <required>
415 <avprule name="Origin-Host" maximum="1" minimum="1"/>
416 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
417 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
418 <avprule name="Destination-Host" maximum="1" minimum="1"/>
419 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
420 <avprule name="Re-Auth-Request-Type" maximum="1" minimum="1"/>
421 </required>
422 <optional>
423 <avprule name="User-Name" maximum="1"/>
424 <avprule name="Origin-State-Id" maximum="1"/>
425 <avprule name="Proxy-Info"/>
426 <avprule name="Route-Record"/>
427 <avprule name="AVP"/>
428 </optional>
429 </requestrules>
430 <answerrules>
431 <fixed>
432 <avprule name="Session-Id" maximum="1" minimum="1"/>
433 </fixed>
434 <required>
435 <avprule name="Result-Code" maximum="1" minimum="1"/>
436 <avprule name="Origin-Host" maximum="1" minimum="1"/>
437 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
438 </required>
439 <optional>
440 <avprule name="User-Name" maximum="1"/>
441 <avprule name="Origin-State-Id" maximum="1"/>
442 <avprule name="Error-Message" maximum="1"/>
443 <avprule name="Error-Reporting-Host" maximum="1"/>
444 <avprule name="Failed-AVP"/>
445 <avprule name="Redirect-Host"/>
446 <avprule name="Redirect-Host-Usage" maximum="1"/>
447 <avprule name="Redirect-Max-Cache-Time" maximum="1"/>
448 <avprule name="Proxy-Info"/>
449 <avprule name="AVP"/>
450 </optional>
451 </answerrules>
452 </command>
453
454 <command name="Session-Termination" code="275">
455 <requestrules>
456 <fixed>
457 <avprule name="Session-Id" maximum="1" minimum="1"/>
458 </fixed>
459 <required>
460 <avprule name="Origin-Host" maximum="1" minimum="1"/>
461 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
462 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
463 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
464 <avprule name="Termination-Cause" maximum="1" minimum="1"/>
465 </required>
466 <optional>
467 <avprule name="User-Name" maximum="1"/>
468 <avprule name="Destination-Host" maximum="1"/>
469 <avprule name="Class"/>
470 <avprule name="Origin-State-Id" maximum="1"/>
471 <avprule name="Proxy-Info"/>
472 <avprule name="Route-Record"/>
473 <avprule name="AVP"/>
474 </optional>
475 </requestrules>
476 <answerrules>
477 <fixed>
478 <avprule name="Session-Id" maximum="1" minimum="1"/>
479 </fixed>
480 <required>
481 <avprule name="Result-Code" maximum="1" minimum="1"/>
482 <avprule name="Origin-Host" maximum="1" minimum="1"/>
483 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
484 </required>
485 <optional>
486 <avprule name="User-Name" maximum="1"/>
487 <avprule name="Class"/>
488 <avprule name="Error-Message" maximum="1"/>
489 <avprule name="Error-Reporting-Host" maximum="1"/>
490 <avprule name="Failed-AVP"/>
491 <avprule name="Origin-State-Id" maximum="1"/>
492 <avprule name="Redirect-Host"/>
493 <avprule name="Redirect-Host-Usage" maximum="1"/>
494 <avprule name="Redirect-Max-Cache-Time" maximum="1"/>
495 <avprule name="Proxy-Info"/>
496 <avprule name="AVP"/>
497 </optional>
498 </answerrules>
499 </command>
500
501 <!-- ********************** End Commands ************************ -->
502 <!-- ************************ typedefn's ************************ -->
503 <typedefn type-name="Any"/> <!-- Added by Ohba-->
504 <typedefn type-name="OctetString"/>
505 <typedefn type-name="UTF8String" type-parent="OctetString"/>
506 <typedefn type-name="Address" type-parent="OctetString"/>
507 <typedefn type-name="DiameterIdentity" type-parent="OctetString"/>
508 <typedefn type-name="DiameterURI" type-parent="UTF8String"/>
509 <typedefn type-name="IPFilterRule" type-parent="OctetString"/>
510 <typedefn type-name="QOSFilterRule" type-parent="OctetString"/>
511 <typedefn type-name="Integer32"/>
512 <typedefn type-name="Integer64"/>
513 <typedefn type-name="Unsigned32"/>
514 <typedefn type-name="Time" type-parent="Unsigned32"/>
515 <typedefn type-name="Enumerated" type-parent="Unsigned32"/>
516 <typedefn type-name="Unsigned64"/>
517 <!-- *********************** End Typedefns ********************** -->
518
519 <!-- ***************** DIAMETER BASE PROTOCOL AVPS ************** -->
520 <avp name="AVP" code="0"> <!-- Added by Ohba -->
521 <type type-name="Any"/>
522 </avp>
523 <avp name="Acct-Interim-Interval" code="482" mandatory="must"
524 may-encrypt="yes">
525 <type type-name="Unsigned32"/>
526 </avp>
527 <avp name="Accounting-Realtime-Required" code="483" mandatory="must"
528 may-encrypt="yes">
529 <type type-name="Unsigned32"/>
530 </avp>
531 <avp name="Acct-Multi-Session-Id" code="50" mandatory="must"
532 protected="may" may-encrypt="yes">
533 <type type-name="UTF8String"/>
534 </avp>
535 <avp name="Accounting-Record-Number" code="485" mandatory="must"
536 may-encrypt="yes">
537 <type type-name="Unsigned32"/>
538 </avp>
539 <avp name="Accounting-Record-Type" code="480" mandatory="must"
540 may-encrypt="yes">
541 <type type-name="Unsigned32"/>
542 <enum name="Event Record" code="1"/>
543 <enum name="Start Record" code="2"/>
544 <enum name="Interim Record" code="3"/>
545 <enum name="Stop Record" code="4"/>
546 </avp>
547 <avp name="Accounting-Session-Id" code="44" mandatory="must"
548 protected="may" may-encrypt="yes">
549 <type type-name="OctetString"/>
550 </avp>
551 <avp name="Accounting-Sub-Session-Id" code="287" mandatory="must"
552 protected="may" may-encrypt="yes">
553 <type type-name="Unsigned64"/>
554 </avp>
555 <avp name="Acct-Application-Id" code="259" mandatory="must"
556 protected="mustnot" may-encrypt="no">
557 <type type-name="Unsigned32"/>
558 </avp>
559 <avp name="Alternate-Peer" code="275" mandatory="must"
560 protected="mustnot" may-encrypt="no">
561 <type type-name="DiameterIdentity"/>
562 </avp>
563 <avp name="Auth-Application-Id" code="258" mandatory="must"
564 protected="mustnot" may-encrypt="no">
565 <type type-name="Unsigned32"/>
566 </avp>
567 <avp name="Auth-Type" code="274" mandatory="must"
568 protected="mustnot" may-encrypt="no">
569 <type type-name="Unsigned32"/>
570 <enum name="Authenticate Only" code="1"/>
571 <enum name="Authorize Only" code="2"/>
572 <enum name="Authorize Authenticate" code="3"/>
573 </avp>
574 <avp name="Authorization-Lifetime" code="291" mandatory="must"
575 may-encrypt="no">
576 <type type-name="Unsigned32"/>
577 </avp>
578 <avp name="Auth-Grace-Period" code="276" mandatory="must"
579 may-encrypt="no">
580 <type type-name="Unsigned32"/>
581 </avp>
582 <avp name="Auth-Session-State" code="277" mandatory="must"
583 may-encrypt="no">
584 <type type-name="Enumerated"/>
585 <enum name="State Maintained" code="0"/>
586 <enum name="No State Maintained" code="1"/>
587 </avp>
588 <avp name="Class" code="25">
589 <type type-name="OctetString"/>
590 </avp>
591 <avp name="Destination-Host" code="293" mandatory="must"
592 protected="mustnot" may-encrypt="no">
593 <type type-name="DiameterIdentity"/>
594 </avp>
595 <avp name="Destination-Realm" code="283" mandatory="must"
596 protected="mustnot" may-encrypt="no">
597 <type type-name="DiameterIdentity"/>
598 </avp>
599 <avp name="Disconnect-Cause" code="273" mandatory="must"
600 protected="mustnot" may-encrypt="no">
601 <type type-name="Unsigned32"/>
602 <enum name="Rebooting" code="0"/>
603 <enum name="Busy" code="2"/>
604 <enum name="Do not want to talk to you" code="3"/>
605 </avp>
606 <avp name="Error-Message" code="281" mandatory="mustnot"
607 protected="may" may-encrypt="no">
608 <type type-name="UTF8String"/>
609 </avp>
610 <avp name="Error-Reporting-Host" code="294" mandatory="must"
611 protected="mustnot" may-encrypt="no">
612 <type type-name="DiameterIdentity"/>
613 </avp>
614 <avp name="Event-Timestamp" code="55" mandatory="must"
615 protected="may" may-encrypt="no">
616 <type type-name="Time"/>
617 </avp>
618 <!--
619 <avp name="Failed-AVP" code="279" mandatory="must"
620 may-encrypt="no">
621 <type type-name="OctetString"/>
622 </avp>
623 -->
624 <avp name="Firmware-Revision" code="267" mandatory="mustnot"
625 protected="mustnot" may-encrypt="no">
626 <type type-name="Unsigned32"/>
627 </avp>
628 <avp name="Host-IP-Address" code="257" mandatory="must"
629 protected="mustnot" may-encrypt="no">
630 <type type-name="Address"/>
631 </avp>
632 <avp name="Inband-Security-Id" code="299" mandatory="must"
633 protected="mustnot" may-encrypt="no">
634 <type type-name="Enumerated"/>
635 <enum name="No Security" code="0"/>
636 <enum name="TLS Security" code="1"/>
637 </avp>
638 <avp name="Multi-Round-Time-Out" code="272" mandatory="must"
639 may-encrypt="yes">
640 <type type-name="Unsigned32"/>
641 </avp>
642 <avp name="Origin-Host" code="264" mandatory="must"
643 may-encrypt="no" protected="mustnot">
644 <type type-name="DiameterIdentity"/>
645 </avp>
646 <avp name="Origin-Realm" code="296" mandatory="must"
647 may-encrypt="no" protected="mustnot">
648 <type type-name="DiameterIdentity"/>
649 </avp>
650 <avp name="Origin-State-Id" code="278" mandatory="must"
651 protected="mustnot">
652 <type type-name="Unsigned32"/>
653 </avp>
654 <avp name="Product-Name" code="269" mandatory="mustnot"
655 may-encrypt="no" protected="mustnot">
656 <type type-name="UTF8String"/>
657 </avp>
658 <avp name="Proxy-Host" code="280" mandatory="must"
659 may-encrypt="no" protected="mustnot">
660 <type type-name="DiameterIdentity"/>
661 </avp>
662 <avp name="Proxy-State" code="33" mandatory="must"
663 may-encrypt="no" protected="mustnot">
664 <type type-name="OctetString"/>
665 </avp>
666 <avp name="Proxy-Info" code="284" mandatory="must"
667 may-encrypt="no" protected="mustnot">
668 <grouped>
669 <required>
670 <avprule name="Proxy-Host" maximum="1" minimum="1"/>
671 <avprule name="Proxy-State" maximum="1" minimum="1"/>
672 </required>
673 <optional>
674 <avprule name="AVP"/>
675 </optional>
676 </grouped>
677 </avp>
678 <avp name="Redirect-Host" code="292" mandatory="must"
679 may-encrypt="no" protected="mustnot">
680 <type type-name="DiameterURI"/>
681 </avp>
682 <avp name="Redirect-Host-Usage" code="261" mandatory="must"
683 may-encrypt="no" protected="mustnot">
684 <type type-name="Unsigned32"/>
685 <enum name="Don't Care" code="0"/>
686 <enum name="All Session" code="1"/>
687 <enum name="All Realm" code="2"/>
688 <enum name="Realm and Application" code="3"/>
689 <enum name="All Application" code="4"/>
690 <enum name="All Host" code="5"/>
691 </avp>
692 <avp name="Redirect-Max-Cache-Time" code="262" mandatory="must"
693 may-encrypt="no" protected="mustnot">
694 <type type-name="Unsigned32"/>
695 </avp>
696 <avp name="Result-Code" code="268" mandatory="must"
697 may-encrypt="no" protected="mustnot">
698 <type type-name="Unsigned32"/>
699 </avp>
700 <avp name="Route-Record" code="282" mandatory="must"
701 may-encrypt="no" protected="mustnot">
702 <type type-name="DiameterIdentity"/>
703 </avp>
704 <avp name="Session-Id" code="263" mandatory="must"
705 protected="mustnot">
706 <type type-name="UTF8String"/>
707 </avp>
708 <avp name="Session-Timeout" code="27">
709 <type type-name="Unsigned32"/>
710 </avp>
711 <avp name="Session-Binding" code="270" mandatory="must"
712 protected="mustnot">
713 <type type-name="Unsigned32"/>
714 </avp>
715 <avp name="Session-Server-Failover" code="271" mandatory="must"
716 protected="mustnot">
717 <type type-name="Unsigned32"/>
718 <enum name="Refuse Service" code="0"/>
719 <enum name="Try Again" code="1"/>
720 <enum name="Allow Service" code="2"/>
721 <enum name="Try Again / Allow Service" code="3"/>
722 </avp>
723 <avp name="Source-Route" code="286" mandatory="must"
724 may-encrypt="no" protected="mustnot">
725 <type type-name="DiameterIdentity"/>
726 </avp>
727 <avp name="Supported-Vendor-Id" code="265" mandatory="must"
728 may-encrypt="no" protected="mustnot">
729 <type type-name="Unsigned32"/>
730 </avp>
731 <avp name="Termination-Cause" code="295" mandatory="must"
732 may-encrypt="no" protected="mustnot">
733 <type type-name="Unsigned32"/>
734 <enum name="Logout" code="1"/>
735 <enum name="Service Not Provided" code="2"/>
736 <enum name="Bad Answer" code="3"/>
737 <enum name="Administrative" code="4"/>
738 <enum name="Link Broken" code="5"/>
739 </avp>
740 <avp name="User-Name" code="1">
741 <type type-name="UTF8String"/>
742 </avp>
743 <avp name="Vendor-Id" code="266" mandatory="must"
744 may-encrypt="no" protected="mustnot">
745 <type type-name="Unsigned32"/>
746 </avp>
747 <avp name="Vendor-Specific-Application-Id" code="260"
748 mandatory="must" may-encrypt="no" protected="mustnot">
749 <grouped>
750 <fixed>
751 <avprule name="Vendor-Id" minimum="1"/>
752 </fixed>
753 <required>
754 <avprule name="Auth-Application-Id" maximum="1"/>
755 <avprule name="Acct-Application-Id" maximum="1"/>
756 </required>
757 </grouped>
758 </avp>
759 <avp name="Auth-Request-Type" code="274" mandatory="must"
760 may-encrypt="no" protected="mustnot">
761 <type type-name="Enumerated"/>
762 <enum name="AUTHENTICATE_ONLY" code="1"/>
763 <enum name="AUTHORIZE_ONLY" code="2"/>
764 <enum name="AUTHORIZE_AUTHENTICATE" code="3"/>
765 </avp>
766 <avp name="Re-Auth-Request-Type" code="285" mandatory="must"
767 may-encrypt="no" protected="mustnot">
768 <type type-name="Enumerated"/>
769 <enum name="AUTHORIZE_ONLY" code="0"/>
770 <enum name="AUTHORIZE_AUTHENTICATE" code="1"/>
771 </avp>
772
773 <avp name="Failed-AVP" code="279">
774 <grouped>
775 <optional>
776 <avprule name="AVP" minimum="1"/>
777 </optional>
778 </grouped>
779 </avp>
780 <avp name="Experimental-Result-Code" code="298" mandatory="must"
781 may-encrypt="no" protected="mustnot">
782 <type type-name="Unsigned32"/>
783 </avp>
784 <avp name="Experimental-Result" code="297">
785 <grouped>
786 <required>
787 <avprule name="Vendor-Id"/>
788 <avprule name="Experimental-Result-Code"/>
789 </required>
790 </grouped>
791 </avp>
792 <avp name="Example-AVP" code="999999" mandatory="mustnot">
793 <grouped>
794 <required>
795 <avprule name="Origin-Host"/>
796 <avprule name="Host-IP-Address"/>
797 </required>
798 </grouped>
799 </avp>
800 <avp name="Example-URI" code="999998" mandatory="must"
801 may-encrypt="no" protected="mustnot">
802 <type type-name="DiameterURI"/>
803 </avp>
804 <avp name="Example-IPFilterRule" code="999997" mandatory="must"
805 may-encrypt="no" protected="mustnot">
806 <type type-name="IPFilterRule"/>
807 </avp>
808 <!-- ************** END DIAMETER BASE PROTOCOL AVPS ************* -->
809
810 </base>
811
812 <!-- ************* DIAMETER NASREQ APPLICATION ************* -->
813 <application id="1" name="NASREQ"
814 uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-diameter-nasreq-12.txt">
815 <command name="AA" code="265" pbit="1" >
816 <requestrules>
817 <fixed>
818 <avprule name="Session-Id" maximum="1" minimum="1"/>
819 </fixed>
820 <required>
821 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
822 <avprule name="Origin-Host" maximum="1" minimum="1"/>
823 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
824 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
825 <avprule name="Auth-Request-Type" maximum="1" minimum="1"/>
826 </required>
827 <optional>
828 <avprule name="NAS-Port" maximum="1"/>
829 <avprule name="NAS-Port-Id" maximum="1" />
830 <avprule name="Origin-State-Id" maximum="1" />
831 <avprule name="Destination-Host" maximum="1" />
832 <avprule name="NAS-Identifier" maximum="1" />
833 <avprule name="NAS-IP-Address" maximum="1" />
834 <avprule name="NAS-IPv6-Address" maximum="1" />
835 <avprule name="NAS-Port-Type" maximum="1" />
836 <avprule name="Port-Limit" maximum="1" />
837 <avprule name="User-Name" maximum="1" />
838 <avprule name="User-Password" maximum="1" />
839 <avprule name="Service-Type" maximum="1" />
840 <avprule name="State" maximum="1" />
841 <avprule name="Authorization-Lifetime" maximum="1" />
842 <avprule name="Auth-Grace-Period" maximum="1" />
843 <avprule name="Auth-Session-State" maximum="1" />
844 <avprule name="Callback-Number" maximum="1" />
845 <avprule name="Called-Station-Id" maximum="1" />
846 <avprule name="Calling-Station-Id" maximum="1" />
847 <avprule name="Originating-Line-Info" maximum="1" />
848 <avprule name="Connect-Info" maximum="1" />
849 <avprule name="CHAP-Auth" maximum="1" />
850 <avprule name="CHAP-Challenge" maximum="1" />
851 <avprule name="Framed-Compression"/>
852 <avprule name="Framed-Interface-Id" maximum="1" />
853 <avprule name="Framed-IP-Address" maximum="1" />
854 <avprule name="Framed-IPv6-Prefix"/>
855 <avprule name="Framed-IP-Netmask" maximum="1" />
856 <avprule name="Framed-MTU" maximum="1" />
857 <avprule name="Framed-Protocol" maximum="1" />
858 <avprule name="ARAP-Password" maximum="1" />
859 <avprule name="ARAP-Security" maximum="1" />
860 <avprule name="ARAP-Security-Data"/>
861 <avprule name="Login-IP-Host"/>
862 <avprule name="Login-IPv6-Host"/>
863 <avprule name="Login-LAT-Group" maximum="1" />
864 <avprule name="Login-LAT-Node" maximum="1" />
865 <avprule name="Login-LAT-Port" maximum="1" />
866 <avprule name="Login-LAT-Service" maximum="1" />
867 <avprule name="Tunneling"/>
868 <avprule name="Proxy-Info"/>
869 <avprule name="Route-Record"/>
870 <avprule name="AVP"/>
871 </optional>
872 </requestrules>
873 <answerrules>
874 <fixed>
875 <avprule name="Session-Id" maximum="1" minimum="1"/>
876 </fixed>
877 <required>
878 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
879 <avprule name="Auth-Request-Type" maximum="1" minimum="1"/>
880 <avprule name="Result-Code" maximum="1" minimum="1"/>
881 <avprule name="Origin-Host" maximum="1" minimum="1"/>
882 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
883 </required>
884 <optional>
885 <avprule name="User-Name" maximum="1" />
886 <avprule name="Service-Type" maximum="1" />
887 <avprule name="Class"/>
888 <avprule name="Configuration-Token"/>
889 <avprule name="Acct-Interim-Interval" maximum="1" />
890 <avprule name="Error-Message" maximum="1" />
891 <avprule name="Error-Reporting-Host" maximum="1" />
892 <avprule name="Idle-Timeout" maximum="1" />
893 <avprule name="Authorization-Lifetime" maximum="1" />
894 <avprule name="Auth-Grace-Period" maximum="1" />
895 <avprule name="Auth-Session-State" maximum="1" />
896 <avprule name="Re-Auth-Request-Type" maximum="1" />
897 <avprule name="Session-Timeout" maximum="1" />
898 <avprule name="State" maximum="1" />
899 <avprule name="Reply-Message"/>
900 <avprule name="Termination-Action" maximum="1" />
901 <avprule name="Origin-State-Id" maximum="1" />
902 <avprule name="Filter-Id"/>
903 <avprule name="Password-Retry" maximum="1" />
904 <avprule name="Port-Limit" maximum="1" />
905 <avprule name="Prompt" maximum="1" />
906 <avprule name="ARAP-Challenge-Response" maximum="1" />
907 <avprule name="ARAP-Features" maximum="1" />
908 <avprule name="ARAP-Security" maximum="1" />
909 <avprule name="ARAP-Security-Data"/>
910 <avprule name="ARAP-Zone-Access" maximum="1" />
911 <avprule name="Callback-Id" maximum="1" />
912 <avprule name="Callback-Number" maximum="1" />
913 <avprule name="Framed-Appletalk-Link" maximum="1" />
914 <avprule name="Framed-Appletalk-Network"/>
915 <avprule name="Framed-Appletalk-Zone" maximum="1" />
916 <avprule name="Framed-Compression"/>
917 <avprule name="Framed-Interface-Id" maximum="1" />
918 <avprule name="Framed-IP-Address" maximum="1" />
919 <avprule name="Framed-IPv6-Prefix"/>
920 <avprule name="Framed-IPv6-Pool" maximum="1" />
921 <avprule name="Framed-IPv6-Route"/>
922 <avprule name="Framed-IP-Netmask" maximum="1" />
923 <avprule name="Framed-Route"/>
924 <avprule name="Framed-Pool" maximum="1" />
925 <avprule name="Framed-IPX-Network" maximum="1" />
926 <avprule name="Framed-MTU" maximum="1" />
927 <avprule name="Framed-Protocol" maximum="1" />
928 <avprule name="Framed-Routing" maximum="1" />
929 <avprule name="Login-IP-Host"/>
930 <avprule name="Login-IPv6-Host"/>
931 <avprule name="Login-LAT-Group" maximum="1" />
932 <avprule name="Login-LAT-Node" maximum="1" />
933 <avprule name="Login-LAT-Port" maximum="1" />
934 <avprule name="Login-LAT-Service" maximum="1" />
935 <avprule name="Login-Service" maximum="1" />
936 <avprule name="Login-TCP-Port" maximum="1" />
937 <!--avprule name="NAS-Filter-Rule"/--> <!-- TBD -->
938 <avprule name="Tunneling"/>
939 <avprule name="Redirect-Host"/>
940 <avprule name="Redirect-Host-Usage" maximum="1" />
941 <avprule name="Redirect-Max-Cache-Time" maximum="1" />
942 <avprule name="Proxy-Info"/>
943 <avprule name="Route-Record"/> <!-- to be added in -13 draft. -->
944 <avprule name="AVP"/>
945 </optional>
946 </answerrules>
947 </command>
948 <!-- ***************** DIAMETER NASREQ APPLICATION AVPS ************** -->
949 <avp name="NAS-Port" code="5" mandatory="must"
950 may-encrypt="yes">
951 <type type-name="Unsigned32"/>
952 </avp>
953 <avp name="NAS-Port-Id" code="87" mandatory="must"
954 may-encrypt="yes">
955 <type type-name="UTF8String"/>
956 </avp>
957 <avp name="NAS-Port-Type" code="61" mandatory="must"
958 may-encrypt="yes">
959 <type type-name="Enumerated"/>
960 </avp>
961 <avp name="Called-Station-Id" code="30" mandatory="must"
962 may-encrypt="yes">
963 <type type-name="UTF8String"/>
964 </avp>
965 <avp name="Calling-Station-Id" code="31" mandatory="must"
966 may-encrypt="yes">
967 <type type-name="UTF8String"/>
968 </avp>
969 <avp name="Connect-Info" code="77" mandatory="must"
970 may-encrypt="yes">
971 <type type-name="UTF8String"/>
972 </avp>
973 <avp name="Originating-Line-Info" code="94" mandatory="must"
974 may-encrypt="yes">
975 <type type-name="OctetString"/>
976 </avp>
977 <avp name="Reply-Message" code="18" mandatory="must"
978 may-encrypt="yes">
979 <type type-name="UTF8String"/>
980 </avp>
981 <avp name="Termination-Action" code="29" mandatory="must"
982 may-encrypt="yes">
983 <type type-name="Enumerated"/>
984 </avp>
985 <avp name="User-Password" code="2" mandatory="must"
986 may-encrypt="yes">
987 <type type-name="OctetString"/>
988 </avp>
989 <avp name="Password-Retry" code="75" mandatory="must"
990 may-encrypt="yes">
991 <type type-name="Unsigned32"/>
992 </avp>
993 <avp name="Prompt" code="76" mandatory="must"
994 may-encrypt="yes">
995 <type type-name="Enumerated"/>
996 </avp>
997 <avp name="CHAP-Algorithm" code="403" mandatory="must"
998 may-encrypt="yes">
999 <type type-name="Enumerated"/>
1000 </avp>
1001 <avp name="CHAP-Ident" code="404" mandatory="must"
1002 may-encrypt="yes">
1003 <type type-name="OctetString"/>
1004 </avp>
1005 <avp name="CHAP-Response" code="405" mandatory="must"
1006 may-encrypt="yes">
1007 <type type-name="OctetString"/>
1008 </avp>
1009 <avp name="CHAP-Auth" code="402" mandatory="must"
1010 may-encrypt="yes">
1011 <grouped>
1012 <required>
1013 <avprule name="CHAP-Algorithm" maximum="1" minimum="1"/>
1014 <avprule name="CHAP-Ident" maximum="1" minimum="1"/>
1015 </required>
1016 <optional>
1017 <avprule name="CHAP-Response" maximum="1" />
1018 <avprule name="AVP"/>
1019 </optional>
1020 </grouped>
1021 </avp>
1022 <avp name="CHAP-Challenge" code="60" mandatory="must"
1023 may-encrypt="yes">
1024 <type type-name="OctetString"/>
1025 </avp>
1026 <avp name="ARAP-Password" code="70" mandatory="must"
1027 may-encrypt="yes">
1028 <type type-name="OctetString"/>
1029 </avp>
1030 <avp name="ARAP-Challenge-Response" code="84" mandatory="must"
1031 may-encrypt="yes">
1032 <type type-name="OctetString"/>
1033 </avp>
1034 <avp name="ARAP-Security" code="73" mandatory="must"
1035 may-encrypt="yes">
1036 <type type-name="Unsigned32"/>
1037 </avp>
1038 <avp name="ARAP-Security-Data" code="74" mandatory="must"
1039 may-encrypt="yes">
1040 <type type-name="OctetString"/>
1041 </avp>
1042 <avp name="Service-Type" code="6" mandatory="must"
1043 may-encrypt="yes">
1044 <type type-name="Enumerated"/>
1045 </avp>
1046 <avp name="Callback-Number" code="19" mandatory="must"
1047 may-encrypt="yes">
1048 <type type-name="UTF8String"/>
1049 </avp>
1050 <avp name="Callback-Id" code="20" mandatory="must"
1051 may-encrypt="yes">
1052 <type type-name="UTF8String"/>
1053 </avp>
1054 <avp name="Idle-Timeout" code="28" mandatory="must"
1055 may-encrypt="yes">
1056 <type type-name="Unsigned32"/>
1057 </avp>
1058 <avp name="Port-Limit" code="62" mandatory="must"
1059 may-encrypt="yes">
1060 <type type-name="Unsigned32"/>
1061 </avp>
1062 <avp name="NAS-Filter-Rule" code="400" mandatory="must"
1063 may-encrypt="yes">
1064 <type type-name="IPFilterRule"/>
1065 </avp>
1066 <avp name="Filter-Id" code="11" mandatory="must"
1067 may-encrypt="yes">
1068 <type type-name="UTF8String"/>
1069 </avp>
1070 <avp name="Configuration-Token" code="78" mandatory="must"
1071 protected="mustnot" may-encrypt="yes">
1072 <type type-name="OctetString"/>
1073 </avp>
1074 <avp name="Framed-Protocol" code="7" mandatory="must"
1075 may-encrypt="yes">
1076 <type type-name="Enumerated"/>
1077 </avp>
1078 <avp name="Framed-Routing" code="10" mandatory="must"
1079 may-encrypt="yes">
1080 <type type-name="Enumerated"/>
1081 </avp>
1082 <avp name="Framed-MTU" code="12" mandatory="must"
1083 may-encrypt="yes">
1084 <type type-name="Unsigned32"/>
1085 </avp>
1086 <avp name="Framed-Compression" code="13" mandatory="must"
1087 may-encrypt="yes">
1088 <type type-name="Enumerated"/>
1089 </avp>
1090 <avp name="Framed-IP-Address" code="8" mandatory="must"
1091 may-encrypt="yes">
1092 <type type-name="OctetString"/>
1093 </avp>
1094 <avp name="Framed-IP-Netmask" code="9" mandatory="must"
1095 may-encrypt="yes">
1096 <type type-name="OctetString"/>
1097 </avp>
1098 <avp name="Framed-Route" code="22" mandatory="must"
1099 may-encrypt="yes">
1100 <type type-name="UTF8String"/>
1101 </avp>
1102 <avp name="Framed-Pool" code="88" mandatory="must"
1103 may-encrypt="yes">
1104 <type type-name="OctetString"/>
1105 </avp>
1106 <avp name="Framed-Interface-Id" code="96" mandatory="must"
1107 may-encrypt="yes">
1108 <type type-name="Unsigned64"/>
1109 </avp>
1110 <avp name="Framed-IPv6-Prefix" code="97" mandatory="must"
1111 may-encrypt="yes">
1112 <type type-name="OctetString"/>
1113 </avp>
1114 <avp name="Framed-IPv6-Route" code="99" mandatory="must"
1115 may-encrypt="yes">
1116 <type type-name="UTF8String"/>
1117 </avp>
1118 <avp name="Framed-IPv6-Pool" code="100" mandatory="must"
1119 may-encrypt="yes">
1120 <type type-name="OctetString"/>
1121 </avp>
1122 <avp name="Framed-IPX-Network" code="23" mandatory="must"
1123 may-encrypt="yes">
1124 <type type-name="UTF8String"/>
1125 </avp>
1126 <avp name="Framed-Appletalk-Link" code="37" mandatory="must"
1127 may-encrypt="yes">
1128 <type type-name="Unsigned32"/>
1129 </avp>
1130 <avp name="Framed-Appletalk-Network" code="38" mandatory="must"
1131 may-encrypt="yes">
1132 <type type-name="Unsigned32"/>
1133 </avp>
1134 <avp name="Framed-Appletalk-Zone" code="39" mandatory="must"
1135 may-encrypt="yes">
1136 <type type-name="OctetString"/>
1137 </avp>
1138 <avp name="ARAP-Features" code="71" mandatory="must"
1139 may-encrypt="yes">
1140 <type type-name="OctetString"/>
1141 </avp>
1142 <avp name="ARAP-Zone-Access" code="72" mandatory="must"
1143 may-encrypt="yes">
1144 <type type-name="Enumerated"/>
1145 </avp>
1146 <avp name="Login-IP-Host" code="14" mandatory="must"
1147 may-encrypt="yes">
1148 <type type-name="OctetString"/>
1149 </avp>
1150 <avp name="Login-IPv6-Host" code="98" mandatory="must"
1151 may-encrypt="yes">
1152 <type type-name="OctetString"/>
1153 </avp>
1154 <avp name="Login-Service" code="15" mandatory="must"
1155 may-encrypt="yes">
1156 <type type-name="Enumerated"/>
1157 </avp>
1158 <avp name="Login-TCP-Port" code="16" mandatory="must"
1159 may-encrypt="yes">
1160 <type type-name="Unsigned32"/>
1161 </avp>
1162 <avp name="Login-LAT-Service" code="34" mandatory="must"
1163 may-encrypt="yes">
1164 <type type-name="OctetString"/>
1165 </avp>
1166 <avp name="Login-LAT-Node" code="35" mandatory="must"
1167 may-encrypt="yes">
1168 <type type-name="OctetString"/>
1169 </avp>
1170 <avp name="Login-LAT-Group" code="36" mandatory="must"
1171 may-encrypt="yes">
1172 <type type-name="OctetString"/>
1173 </avp>
1174 <avp name="Login-LAT-Port" code="63" mandatory="must"
1175 may-encrypt="yes">
1176 <type type-name="OctetString"/>
1177 </avp>
1178 <avp name="Tunnel-Type" code="64" mandatory="must"
1179 may-encrypt="yes">
1180 <type type-name="Enumerated"/>
1181 </avp>
1182 <avp name="Tunnel-Medium-Type" code="65" mandatory="must"
1183 may-encrypt="yes">
1184 <type type-name="Enumerated"/>
1185 </avp>
1186 <avp name="Tunnel-Client-Endpoint" code="66" mandatory="must"
1187 may-encrypt="yes">
1188 <type type-name="UTF8String"/>
1189 </avp>
1190 <avp name="Tunnel-Server-Endpoint" code="67" mandatory="must"
1191 may-encrypt="yes">
1192 <type type-name="UTF8String"/>
1193 </avp>
1194 <avp name="Tunnel-Password" code="69" mandatory="must"
1195 may-encrypt="yes">
1196 <type type-name="OctetString"/>
1197 </avp>
1198 <avp name="Tunnel-Private-Group-Id" code="81" mandatory="must"
1199 may-encrypt="yes">
1200 <type type-name="UTF8String"/>
1201 </avp>
1202 <avp name="Tunnel-Assignment-Id" code="82" mandatory="must"
1203 may-encrypt="yes">
1204 <type type-name="OctetString"/>
1205 </avp>
1206 <avp name="Tunnel-Preference" code="83" mandatory="must"
1207 may-encrypt="yes">
1208 <type type-name="Unsigned32"/>
1209 </avp>
1210 <avp name="Tunnel-Client-Auth-Id" code="90" mandatory="must"
1211 may-encrypt="yes">
1212 <type type-name="Unsigned32"/>
1213 </avp>
1214 <avp name="Tunnel-Server-Auth-Id" code="91" mandatory="must"
1215 may-encrypt="yes">
1216 <type type-name="OctetString"/>
1217 </avp>
1218 <avp name="Tunneling" code="401" mandatory="must"
1219 may-encrypt="no">
1220 <grouped>
1221 <required>
1222 <avprule name="Tunnel-Type" maximum="1" minimum="1"/>
1223 <avprule name="Tunnel-Medium-Type" maximum="1" minimum="1"/>
1224 <avprule name="Tunnel-Client-Endpoint" maximum="1" minimum="1"/>
1225 <avprule name="Tunnel-Server-Endpoint" maximum="1" minimum="1"/>
1226 </required>
1227 <optional>
1228 <avprule name="Tunnel-Preference" maximum="1" />
1229 <avprule name="Tunnel-Client-Auth-Id" maximum="1" />
1230 <avprule name="Tunnel-Server-Auth-Id" maximum="1" />
1231 <avprule name="Tunnel-Assignment-Id" maximum="1" />
1232 <avprule name="Tunnel-Password" maximum="1" />
1233 <avprule name="Tunnel-Private-Group-Id" maximum="1" />
1234 </optional>
1235 </grouped>
1236 </avp>
1237 <avp name="Accounting-Input-Octets" code="363" mandatory="must"
1238 may-encrypt="yes">
1239 <type type-name="Unsigned64"/>
1240 </avp>
1241 <avp name="Accounting-Output-Octets" code="364" mandatory="must"
1242 may-encrypt="yes">
1243 <type type-name="Unsigned64"/>
1244 </avp>
1245 <avp name="Accounting-Input-Packets" code="365" mandatory="must"
1246 may-encrypt="yes">
1247 <type type-name="Unsigned64"/>
1248 </avp>
1249 <avp name="Accounting-Output-Packets" code="366" mandatory="must"
1250 may-encrypt="yes">
1251 <type type-name="Unsigned64"/>
1252 </avp>
1253 <avp name="Acct-Session-Time" code="46" mandatory="must"
1254 may-encrypt="yes">
1255 <type type-name="Unsigned32"/>
1256 </avp>
1257 <avp name="Acct-Authentic" code="45" mandatory="must"
1258 may-encrypt="yes">
1259 <type type-name="Enumerated"/>
1260 </avp>
1261 <avp name="Acct-Delay-Time" code="41" mandatory="must"
1262 may-encrypt="yes">
1263 <type type-name="Unsigned32"/>
1264 </avp>
1265 <avp name="Acct-Link-Count" code="51" mandatory="must"
1266 may-encrypt="yes">
1267 <type type-name="Unsigned32"/>
1268 </avp>
1269 <avp name="Acct-Tunnel-Connection" code="68" mandatory="must"
1270 may-encrypt="yes">
1271 <type type-name="OctetString"/>
1272 </avp>
1273 <avp name="Acct-Tunnel-Packets-Lost" code="86" mandatory="must"
1274 may-encrypt="yes">
1275 <type type-name="Unsigned32"/>
1276 </avp>
1277 <avp name="NAS-Identifier" code="32" mandatory="must"
1278 may-encrypt="yes">
1279 <type type-name="UTF8String"/>
1280 </avp>
1281 <avp name="NAS-IP-Address" code="4" mandatory="must"
1282 may-encrypt="yes">
1283 <type type-name="OctetString"/>
1284 </avp>
1285 <avp name="NAS-IPv6-Address" code="95" mandatory="must"
1286 may-encrypt="yes">
1287 <type type-name="OctetString"/>
1288 </avp>
1289 <avp name="State" code="24" mandatory="must"
1290 may-encrypt="yes">
1291 <type type-name="OctetString"/>
1292 </avp>
1293 </application>
1294
1295 <!-- *********** DIAMETERE MOBILEIPV4 APPLICATION ***********-->
1296 <application id="2" name="Mobile IPv4"
1297 uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-diameter-mobileip-14.txt">
1298
1299 <command name="AA-Mobile-Node" code="260" >
1300 <requestrules>
1301 <fixed>
1302 <avprule name="Session-Id" maximum="1" minimum="1"/>
1303 </fixed>
1304 <required>
1305 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1306 <avprule name="User-Name" maximum="1" minimum="1"/>
1307 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
1308 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1309 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1310 <avprule name="MIP-Reg-Request" maximum="1" minimum="1"/>
1311 <avprule name="MIP-MN-AAA-Auth" maximum="1" minimum="1"/>
1312 </required>
1313 <optional>
1314 <avprule name="Acct-Multi-Session-Id" maximum="1"/>
1315 <avprule name="Destination-Host" maximum="1"/>
1316 <avprule name="Origin-State-Id" maximum="1"/>
1317 <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
1318 <avprule name="MIP-Home-Agent-Address" maximum="1"/>
1319 <avprule name="MIP-Feature-Vector" maximum="1"/>
1320 <avprule name="MIP-Originating-Foreign-AAA" maximum="1"/>
1321 <avprule name="Authorization-Lifetime" maximum="1"/>
1322 <avprule name="Auth-Session-State" maximum="1"/>
1323 <avprule name="MIP-FA-Challenge" maximum="1"/>
1324 <avprule name="MIP-Candidate-Home-Agent-Host" maximum="1"/>
1325 <avprule name="MIP-Home-Agent-Host" maximum="1"/>
1326 <avprule name="Proxy-Info"/>
1327 <avprule name="Route-Record"/>
1328 <avprule name="AVP"/>
1329 </optional>
1330 </requestrules>
1331 <answerrules>
1332 <fixed>
1333 <avprule name="Session-Id" maximum="1" minimum="1"/>
1334 </fixed>
1335 <required>
1336 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1337 <avprule name="Result-Code" maximum="1" minimum="1"/>
1338 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1339 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1340 </required>
1341 <optional>
1342 <avprule name="Acct-Multi-Session-Id" maximum="1"/>
1343 <avprule name="User-Name" maximum="1"/>
1344 <avprule name="Authorization-Lifetime" maximum="1"/>
1345 <avprule name="Auth-Session-State" maximum="1"/>
1346 <avprule name="Error-Message" maximum="1"/>
1347 <avprule name="Error-Reporting-Host" maximum="1"/>
1348 <avprule name="Re-Auth-Request-Type" maximum="1"/>
1349 <avprule name="MIP-Feature-Vector" maximum="1"/>
1350 <avprule name="MIP-Reg-Reply" maximum="1"/>
1351 <avprule name="MIP-MN-to-FA-Key" maximum="1"/>
1352 <avprule name="MIP-MN-to-HA-Key" maximum="1"/>
1353 <avprule name="MIP-FA-to-MN-Key" maximum="1"/>
1354 <avprule name="MIP-FA-to-HA-Key" maximum="1"/>
1355 <avprule name="MIP-HA-to-MN-Key" maximum="1"/>
1356 <avprule name="MIP-HA-to-FA-Key" maximum="1"/>
1357 <avprule name="MIP-Key-Lifetime" maximum="1"/>
1358 <avprule name="MIP-Home-Agent-Address" maximum="1"/>
1359 <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
1360 <!--avprule name="MIP-Filter-Rule"/-->
1361 <avprule name="Origin-State-Id" maximum="1"/>
1362 <avprule name="Proxy-Info"/>
1363 <avprule name="AVP"/>
1364 </optional>
1365 </answerrules>
1366 </command>
1367 <command name="Home-Agent-MIP" code="262" >
1368 <requestrules>
1369 <fixed>
1370 <avprule name="Session-Id" maximum="1" minimum="1"/>
1371 </fixed>
1372 <required>
1373 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1374 <avprule name="Authorization-Lifetime" maximum="1" minimum="1"/>
1375 <avprule name="Auth-Session-State" maximum="1" minimum="1"/>
1376 <avprule name="MIP-Reg-Request" maximum="1" minimum="1"/>
1377 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1378 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1379 <avprule name="User-Name" maximum="1" minimum="1"/>
1380 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
1381 <avprule name="MIP-Feature-Vector" maximum="1" minimum="1"/>
1382 </required>
1383 <optional>
1384 <avprule name="Destination-Host" maximum="1"/>
1385 <avprule name="MIP-MN-to-HA-Key" maximum="1"/>
1386 <avprule name="MIP-MN-to-FA-Key" maximum="1"/>
1387 <avprule name="MIP-HA-to-MN-Key" maximum="1"/>
1388 <avprule name="MIP-HA-to-FA-Key" maximum="1"/>
1389 <avprule name="MIP-Key-Lifetime" maximum="1"/>
1390 <avprule name="MIP-Originating-Foreign-AAA" maximum="1"/>
1391 <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
1392 <avprule name="MIP-Home-Agent-Address" maximum="1"/>
1393 <!--avprule name="MIP-Filter-Rule"/-->
1394 <avprule name="Origin-State-Id" maximum="1"/>
1395 <avprule name="Proxy-Info"/>
1396 <avprule name="Route-Record"/>
1397 <avprule name="AVP"/>
1398 </optional>
1399 </requestrules>
1400 <answerrules>
1401 <fixed>
1402 <avprule name="Session-Id" maximum="1" minimum="1"/>
1403 </fixed>
1404 <required>
1405 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1406 <avprule name="Result-Code" maximum="1" minimum="1"/>
1407 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1408 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1409 </required>
1410 <optional>
1411 <avprule name="Acct-Multi-Session-Id" maximum="1"/>
1412 <avprule name="User-Name" maximum="1"/>
1413 <avprule name="Error-Reporting-Host" maximum="1"/>
1414 <avprule name="Error-Message" maximum="1"/>
1415 <avprule name="MIP-Reg-Reply" maximum="1"/>
1416 <avprule name="MIP-Home-Agent-Address" maximum="1"/>
1417 <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
1418 <avprule name="MIP-FA-to-HA-SPI" maximum="1"/>
1419 <avprule name="MIP-FA-to-MN-SPI" maximum="1"/>
1420 <avprule name="Origin-State-Id" maximum="1"/>
1421 <avprule name="Proxy-Info"/>
1422 <avprule name="AVP"/>
1423 </optional>
1424 </answerrules>
1425 </command>
1426
1427 <!-- ***************** DIAMETER MOBILEIPV4 APPLICATION AVPS ************** -->
1428 <avp name="MIP-Auth-Input-Data-Length" code="338" mandatory="must"
1429 may-encrypt="yes">
1430 <type type-name="Unsigned32"/>
1431 </avp>
1432 <avp name="MIP-Authenticator-Length" code="339" mandatory="must"
1433 may-encrypt="yes">
1434 <type type-name="Unsigned32"/>
1435 </avp>
1436 <avp name="MIP-Authenticator-Offset" code="340" mandatory="must"
1437 may-encrypt="yes">
1438 <type type-name="Unsigned32"/>
1439 </avp>
1440 <avp name="MIP-Candidate-Home-Agent-Host" code="336" mandatory="must"
1441 may-encrypt="no">
1442 <type type-name="DiameterIdentity"/>
1443 </avp>
1444 <avp name="MIP-Home-Agent-Host" code="348" mandatory="must"
1445 may-encrypt="no">
1446 <type type-name="DiameterIdentity"/>
1447 </avp>
1448 <avp name="MIP-FA-Challenge" code="344" mandatory="must"
1449 may-encrypt="yes">
1450 <type type-name="OctetString"/>
1451 </avp>
1452 <avp name="MIP-Feature-Vector" code="337" mandatory="must"
1453 may-encrypt="yes">
1454 <type type-name="Unsigned32"/>
1455 </avp>
1456 <avp name="MIP-Home-Agent-Address" code="334" mandatory="must"
1457 may-encrypt="yes">
1458 <type type-name="Address"/>
1459 </avp>
1460 <avp name="MIP-MN-AAA-SPI" code="322" mandatory="must"
1461 may-encrypt="yes">
1462 <type type-name="Unsigned32"/>
1463 </avp>
1464 <avp name="MIP-Mobile-Node-Address" code="333" mandatory="must"
1465 may-encrypt="yes">
1466 <type type-name="Address"/>
1467 </avp>
1468 <avp name="MIP-Reg-Request" code="320" mandatory="must"
1469 may-encrypt="yes">
1470 <type type-name="OctetString"/>
1471 </avp>
1472 <avp name="MIP-Reg-Reply" code="321" mandatory="must"
1473 may-encrypt="yes">
1474 <type type-name="OctetString"/>
1475 </avp>
1476 <avp name="MIP-MN-AAA-Auth" code="322" mandatory="must"
1477 may-encrypt="yes">
1478 <grouped>
1479 <required>
1480 <avprule name="MIP-MN-AAA-SPI" maximum="1" minimum="1"/>
1481 <avprule name="MIP-Auth-Input-Data-Length" maximum="1" minimum="1"/>
1482 <avprule name="MIP-Authenticator-Offset" maximum="1" minimum="1"/>
1483 </required>
1484 <optional>
1485 <avprule name="AVP"/>
1486 </optional>
1487 </grouped>
1488 </avp>
1489 <avp name="MIP-Originating-Foreign-AAA" code="347" mandatory="must"
1490 may-encrypt="yes">
1491 <grouped>
1492 <required>
1493 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1494 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1495 </required>
1496 <optional>
1497 <avprule name="AVP"/>
1498 </optional>
1499 </grouped>
1500 </avp>
1501 <avp name="MIP-Algorithm-Type" code="345" mandatory="must"
1502 may-encrypt="yes">
1503 <type type-name="Enumerated"/>
1504 </avp>
1505 <avp name="MIP-FA-to-HA-SPI" code="318" mandatory="must"
1506 may-encrypt="yes">
1507 <type type-name="Unsigned32"/>
1508 </avp>
1509 <avp name="MIP-FA-to-MN-SPI" code="319" mandatory="must"
1510 may-encrypt="yes">
1511 <type type-name="Unsigned32"/>
1512 </avp>
1513 <avp name="MIP-Replay-Mode" code="346" mandatory="must"
1514 may-encrypt="yes">
1515 <type type-name="Enumerated"/>
1516 </avp>
1517 <avp name="MIP-Session-Key" code="343" mandatory="must"
1518 may-encrypt="yes">
1519 <type type-name="OctetString"/>
1520 </avp>
1521 <avp name="MIP-FA-to-MN-Key" code="326" mandatory="must"
1522 may-encrypt="yes">
1523 <grouped>
1524 <required>
1525 <avprule name="MIP-FA-to-MN-SPI" maximum="1" minimum="1"/>
1526 <avprule name="MIP-Algorithm-Type" maximum="1" minimum="1"/>
1527 <avprule name="MIP-Session-Key" maximum="1" minimum="1"/>
1528 </required>
1529 <optional>
1530 <avprule name="AVP"/>
1531 </optional>
1532 </grouped>
1533 </avp>
1534 <avp name="MIP-FA-to-HA-Key" code="328" mandatory="must"
1535 may-encrypt="yes">
1536 <grouped>
1537 <required>
1538 <avprule name="MIP-FA-to-HA-SPI" maximum="1" minimum="1"/>
1539 <avprule name="MIP-Algorithm-Type" maximum="1" minimum="1"/>
1540 <avprule name="MIP-Session-Key" maximum="1" minimum="1"/>
1541 </required>
1542 <optional>
1543 <avprule name="AVP"/>
1544 </optional>
1545 </grouped>
1546 </avp>
1547 <avp name="MIP-HA-to-FA-Key" code="329" mandatory="must"
1548 may-encrypt="yes">
1549 <grouped>
1550 <required>
1551 <avprule name="MIP-Algorithm-Type" maximum="1" minimum="1"/>
1552 <avprule name="MIP-Session-Key" maximum="1" minimum="1"/>
1553 </required>
1554 <optional>
1555 <avprule name="AVP"/>
1556 </optional>
1557 </grouped>
1558 </avp>
1559 <avp name="MIP-HA-to-MN-Key" code="332" mandatory="must"
1560 may-encrypt="yes">
1561 <grouped>
1562 <required>
1563 <avprule name="MIP-Algorithm-Type" maximum="1" minimum="1"/>
1564 <avprule name="MIP-Replay-Mode" maximum="1" minimum="1"/>
1565 <avprule name="MIP-Session-Key" maximum="1" minimum="1"/>
1566 </required>
1567 <optional>
1568 <avprule name="AVP"/>
1569 </optional>
1570 </grouped>
1571 </avp>
1572 <avp name="MIP-Key-Lifetime" code="367" mandatory="must"
1573 may-encrypt="yes">
1574 <type type-name="Unsigned32"/>
1575 </avp>
1576 <avp name="MIP-Key-Material" code="335" mandatory="must"
1577 may-encrypt="yes">
1578 <type type-name="OctetString"/>
1579 </avp>
1580 <avp name="MIP-MN-to-FA-Key" code="325" mandatory="must"
1581 may-encrypt="yes">
1582 <grouped>
1583 <required>
1584 <avprule name="MIP-Algorithm-Type" maximum="1" minimum="1"/>
1585 <avprule name="MIP-Key-Material" maximum="1" minimum="1"/>
1586 <avprule name="MIP-MN-AAA-SPI" maximum="1" minimum="1"/>
1587 </required>
1588 <optional>
1589 <avprule name="AVP"/>
1590 </optional>
1591 </grouped>
1592 </avp>
1593 <avp name="MIP-MN-to-HA-Key" code="331" mandatory="must"
1594 may-encrypt="yes">
1595 <grouped>
1596 <required>
1597 <avprule name="MIP-Algorithm-Type" maximum="1" minimum="1"/>
1598 <avprule name="MIP-Replay-Mode" maximum="1" minimum="1"/>
1599 <avprule name="MIP-Key-Material" maximum="1" minimum="1"/>
1600 <avprule name="MIP-MN-AAA-SPI" maximum="1" minimum="1"/>
1601 </required>
1602 <optional>
1603 <avprule name="AVP"/>
1604 </optional>
1605 </grouped>
1606 </avp>
1607 </application>
1608
1609 <!-- ************* DIAMETER EAP APPLICATION ************* -->
1610
1611 <!-- Note: The Application Identifier value, Command Code value and
1612 AVP Type values for the EAP application are temporary assigned
1613 values and are subject to change once IANA assigned values are
1614 obtained. -->
1615
1616 <application id="5" name="EAP"
1617 uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-eap-03.txt">
1618 <command name="Diameter-EAP" code="268" pbit="1">
1619 <requestrules>
1620 <fixed>
1621 <avprule name="Session-Id" maximum="1" minimum="1"/>
1622 </fixed>
1623 <required>
1624 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1625 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1626 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1627 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
1628 <avprule name="Auth-Request-Type" maximum="1" minimum="1"/>
1629 <avprule name="EAP-Payload" maximum="1" minimum="1"/>
1630 </required>
1631 <optional>
1632 <avprule name="NAS-Port" maximum="1"/>
1633 <avprule name="NAS-Port-Id" maximum="1" />
1634 <avprule name="Origin-State-Id" maximum="1" />
1635 <avprule name="Destination-Host" maximum="1" />
1636 <avprule name="NAS-Identifier" maximum="1" />
1637 <avprule name="NAS-IP-Address" maximum="1" />
1638 <avprule name="NAS-IPv6-Address" maximum="1" />
1639 <avprule name="NAS-Port-Type" maximum="1" />
1640 <avprule name="Port-Limit" maximum="1" />
1641 <avprule name="User-Name" maximum="1" />
1642 <avprule name="Service-Type" maximum="1" />
1643 <avprule name="Idle-Timeout" maximum="1" />
1644 <avprule name="State" maximum="1" />
1645 <avprule name="Authorization-Lifetime" maximum="1" />
1646 <avprule name="Auth-Grace-Period" maximum="1" />
1647 <avprule name="Auth-Session-State" maximum="1" />
1648 <avprule name="Session-Timeout" maximum="1" />
1649 <avprule name="Callback-Number" maximum="1" />
1650 <avprule name="Called-Station-Id" maximum="1" />
1651 <avprule name="Calling-Station-Id" maximum="1" />
1652 <avprule name="Class"/>
1653 <avprule name="Originating-Line-Info" maximum="1" />
1654 <avprule name="Connect-Info" maximum="1" />
1655 <avprule name="Framed-Compression"/>
1656 <avprule name="Framed-Interface-Id" maximum="1" />
1657 <avprule name="Framed-IP-Address" maximum="1" />
1658 <avprule name="Framed-IPv6-Prefix"/>
1659 <avprule name="Framed-IP-Netmask" maximum="1" />
1660 <avprule name="Framed-MTU" maximum="1" />
1661 <avprule name="Framed-Protocol" maximum="1" />
1662 <avprule name="Tunneling"/>
1663 <avprule name="Proxy-Info"/>
1664 <avprule name="Route-Record"/>
1665 <avprule name="AVP"/>
1666 </optional>
1667 </requestrules>
1668 <answerrules>
1669 <fixed>
1670 <avprule name="Session-Id" maximum="1" minimum="1"/>
1671 </fixed>
1672 <required>
1673 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1674 <avprule name="Auth-Request-Type" maximum="1" minimum="1"/>
1675 <avprule name="Result-Code" maximum="1" minimum="1"/>
1676 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1677 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1678 </required>
1679 <optional>
1680 <avprule name="User-Name" maximum="1" />
1681 <avprule name="EAP-Payload" maximum="1"/>
1682 <avprule name="Multi-Round-Time-Out" maximum="1"/>
1683 <avprule name="Service-Type" maximum="1" />
1684 <avprule name="Class"/>
1685 <avprule name="Configuration-Token"/>
1686 <avprule name="Acct-Interim-Interval" maximum="1" />
1687 <avprule name="Error-Message" maximum="1" />
1688 <avprule name="Error-Reporting-Host" maximum="1" />
1689 <avprule name="Idle-Timeout" maximum="1" />
1690 <avprule name="Authorization-Lifetime" maximum="1" />
1691 <avprule name="Auth-Grace-Period" maximum="1" />
1692 <avprule name="Auth-Session-State" maximum="1" />
1693 <avprule name="Re-Auth-Request-Type" maximum="1" />
1694 <avprule name="Session-Timeout" maximum="1" />
1695 <avprule name="State" maximum="1" />
1696 <avprule name="Reply-Message"/>
1697 <avprule name="Origin-State-Id" maximum="1" />
1698 <avprule name="Filter-Id"/>
1699 <avprule name="Port-Limit" maximum="1" />
1700 <avprule name="Callback-Id" maximum="1" />
1701 <avprule name="Callback-Number" maximum="1" />
1702 <avprule name="Framed-Appletalk-Link" maximum="1" />
1703 <avprule name="Framed-Appletalk-Network"/>
1704 <avprule name="Framed-Appletalk-Zone" maximum="1" />
1705 <avprule name="Framed-Compression"/>
1706 <avprule name="Framed-Interface-Id" maximum="1" />
1707 <avprule name="Framed-IP-Address" maximum="1" />
1708 <avprule name="Framed-IPv6-Prefix"/>
1709 <avprule name="Framed-IPv6-Pool" maximum="1" />
1710 <avprule name="Framed-IPv6-Route"/>
1711 <avprule name="Framed-IP-Netmask" maximum="1" />
1712 <avprule name="Framed-Route"/>
1713 <avprule name="Framed-Pool" maximum="1" />
1714 <avprule name="Framed-IPX-Network" maximum="1" />
1715 <avprule name="Framed-MTU" maximum="1" />
1716 <avprule name="Framed-Protocol" maximum="1" />
1717 <avprule name="Framed-Routing" maximum="1" />
1718 <avprule name="NAS-Filter-Rule"/>
1719 <avprule name="Tunneling"/>
1720 <avprule name="Redirect-Host"/>
1721 <avprule name="Redirect-Host-Usage" maximum="1" />
1722 <avprule name="Redirect-Max-Cache-Time" maximum="1" />
1723 <avprule name="Proxy-Info"/>
1724 <avprule name="Route-Record"/> <!-- to be added in -13 draft. -->
1725 <avprule name="AVP"/>
1726 </optional>
1727 </answerrules>
1728 </command>
1729 <!-- ***************** DIAMETER EAP APPLICATION AVPS ************** -->
1730 <avp name="EAP-Payload" code="462" mandatory="must"
1731 may-encrypt="yes">
1732 <type type-name="OctetString"/>
1733 </avp>
1734 <avp name="EAP-Reissued-Payload" code="463" mandatory="must"
1735 may-encrypt="yes">
1736 <type type-name="OctetString"/>
1737 </avp>
1738 <avp name="EAP-Master-Session-Key" code="464" mandatory="must"
1739 may-encrypt="yes">
1740 <type type-name="OctetString"/>
1741 </avp>
1742 <avp name="Accounting-EAP-Auth-Method" code="465" mandatory="must"
1743 may-encrypt="yes">
1744 <type type-name="Unsigned64"/>
1745 </avp>
1746 </application>
1747
1748 <!-- ************* TEST APPLICATION ************* -->
1749
1750 <application id="10000" name="Test-Authorization"
1751 uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-eap-03.txt">
1752 <command name="Test-Auth" code="300">
1753 <requestrules>
1754 <fixed>
1755 <avprule name="Session-Id" maximum="1" minimum="1"/>
1756 </fixed>
1757 <required>
1758 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1759 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1760 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
1761 <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
1762 <avprule name="Re-Auth-Request-Type" maximum="1" minimum="1"/>
1763 </required>
1764 <optional>
1765 <avprule name="Auth-Session-State" maximum="1"/>
1766 <avprule name="Authorization-Lifetime" maximum="1"/>
1767 <avprule name="Auth-Grace-Period" maximum="1"/>
1768 <avprule name="Destination-Host" maximum="1"/>
1769 <avprule name="User-Name" maximum="1"/>
1770 <avprule name="Origin-State-Id" maximum="1"/>
1771 <avprule name="Proxy-Info"/>
1772 <avprule name="Route-Record"/>
1773 <avprule name="Tunneling"/>
1774 <avprule name="AVP"/>
1775 </optional>
1776 </requestrules>
1777 <answerrules>
1778 <fixed>
1779 <avprule name="Session-Id" maximum="1" minimum="1"/>
1780 </fixed>
1781 <required>
1782 <avprule name="Result-Code" maximum="1" minimum="1"/>
1783 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1784 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1785 </required>
1786 <optional>
1787 <avprule name="Auth-Session-State" maximum="1"/>
1788 <avprule name="Authorization-Lifetime" maximum="1"/>
1789 <avprule name="Auth-Grace-Period" maximum="1"/>
1790 <avprule name="Session-Timeout" maximum="1"/>
1791 <avprule name="Error-Message" maximum="1"/>
1792 <avprule name="Error-Reporting-Host" maximum="1"/>
1793 <avprule name="Failed-AVP"/>
1794 <avprule name="Redirect-Host"/>
1795 <avprule name="Redirect-Host-Usage" maximum="1"/>
1796 <avprule name="Redirect-Max-Cache-Time" maximum="1"/>
1797 <avprule name="Proxy-Info"/>
1798 <avprule name="Tunneling"/>
1799 <avprule name="AVP"/>
1800 </optional>
1801 </answerrules>
1802 </command>
1803 </application>
1804 <application id="20000" name="Test-Accounting"
1805 uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-eap-03.txt">
1806 <command name="Accounting" code="271">
1807 <requestrules>
1808 <fixed>
1809 <avprule name="Session-Id" maximum="1" minimum="1"/>
1810 </fixed>
1811 <required>
1812 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1813 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1814 <avprule name="Destination-Realm" maximum="1" minimum="1"/>
1815 <avprule name="Accounting-Record-Type" maximum="1" minimum="1"/>
1816 <avprule name="Accounting-Record-Number" maximum="1" minimum="1"/>
1817 </required>
1818 <optional>
1819 <avprule name="Acct-Application-Id" maximum="1"/>
1820 <avprule name="Vendor-Specific-Application-Id" maximum="1"/>
1821 <avprule name="User-Name" maximum="1"/>
1822 <avprule name="Accounting-Sub-Session-Id" maximum="1"/>
1823 <avprule name="Accounting-Session-Id" maximum="1"/>
1824 <avprule name="Acct-Multi-Session-Id" maximum="1"/>
1825 <avprule name="Acct-Interim-Interval" maximum="1"/>
1826 <avprule name="Accounting-Realtime-Required" maximum="1"/>
1827 <avprule name="Origin-State-Id" maximum="1"/>
1828 <avprule name="Event-Timestamp" maximum="1"/>
1829 <avprule name="Proxy-Info"/>
1830 <avprule name="Route-Record"/>
1831 <avprule name="Example-Accounting-Record"/>
1832 <avprule name="AVP"/>
1833 </optional>
1834 </requestrules>
1835 <answerrules>
1836 <fixed>
1837 <avprule name="Session-Id" maximum="1" minimum="1"/>
1838 </fixed>
1839 <required>
1840 <avprule name="Result-Code" maximum="1" minimum="1"/>
1841 <avprule name="Origin-Host" maximum="1" minimum="1"/>
1842 <avprule name="Origin-Realm" maximum="1" minimum="1"/>
1843 <avprule name="Accounting-Record-Type" maximum="1" minimum="1"/>
1844 <avprule name="Accounting-Record-Number" maximum="1" minimum="1"/>
1845 </required>
1846 <optional>
1847 <avprule name="Acct-Application-Id" maximum="1"/>
1848 <avprule name="Vendor-Specific-Application-Id" maximum="1"/>
1849 <avprule name="User-Name" maximum="1"/>
1850 <avprule name="Accounting-Sub-Session-Id" maximum="1"/>
1851 <avprule name="Accounting-Session-Id" maximum="1"/>
1852 <avprule name="Acct-Multi-Session-Id" maximum="1"/>
1853 <avprule name="Error-Reporting-Host" maximum="1"/>
1854 <avprule name="Acct-Interim-Interval" maximum="1"/>
1855 <avprule name="Accounting-Realtime-Required" maximum="1"/>
1856 <avprule name="Origin-State-Id" maximum="1"/>
1857 <avprule name="Event-Timestamp" maximum="1"/>
1858 <avprule name="Proxy-Info"/>
1859 <avprule name="AVP"/>
1860 </optional>
1861 </answerrules>
1862 </command>
1863 <!-- ***************** TEST APPLICATION AVPS ************** -->
1864 <avp name="Example-Accounting-Record" code="999997">
1865 <type type-name="UTF8String"/>
1866 </avp>
1867 </application>
1868 </dictionary>
"Welcome to our mercurial repository"