aaad_diameter_dictionary.xml

AAA服务器功能实现

      <type type-name="UTF8String"/>
    </avp>
    <avp name="Framed-IPv6-Pool" code="100" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Framed-IPX-Network" code="23" mandatory="must"
	 may-encrypt="yes">
      <type type-name="UTF8String"/>
    </avp>
    <avp name="Framed-Appletalk-Link" code="37" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Framed-Appletalk-Network" code="38" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Framed-Appletalk-Zone" code="39" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="ARAP-Features" code="71" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="ARAP-Zone-Access" code="72" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Enumerated"/>
    </avp>
    <avp name="Login-IP-Host" code="14" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Login-IPv6-Host" code="98" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Login-Service" code="15" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Enumerated"/>
    </avp>
    <avp name="Login-TCP-Port" code="16" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Login-LAT-Service" code="34" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Login-LAT-Node" code="35" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Login-LAT-Group" code="36" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Login-LAT-Port" code="63" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Tunneling" code="401" mandatory="must"
	 may-encrypt="no">
      <grouped>
	<required>
	  <avprule name="Tunnel-Type" maximum="1" minimum="1"/>
	  <avprule name="Tunnel-Medium-Type" maximum="1" minimum="1"/>
	  <avprule name="Tunnel-Client-Endpoint" maximum="1" minimum="1"/>
	  <avprule name="Tunnel-Server-Endpoint" maximum="1" minimum="1"/>
        </required>
	<optional>
	  <avprule name="Tunnel-Preference" maximum="1" />
	  <avprule name="Tunnel-Client-Auth-Id" maximum="1" />
	  <avprule name="Tunnel-Server-Auth-Id" maximum="1" />
	  <avprule name="Tunnel-Assignment-Id" maximum="1" />
	  <avprule name="Tunnel-Password" maximum="1" />
	  <avprule name="Tunnel-Private-Group-Id" maximum="1" />
        </optional>
      </grouped>
    </avp>
    <avp name="Tunnel-Type" code="64" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Enumerated"/>
    </avp>
    <avp name="Tunnel-Medium-Type" code="65" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Enumerated"/>
    </avp>
    <avp name="Tunnel-Client-Endpoint" code="66" mandatory="must"
	 may-encrypt="yes">
      <type type-name="UTF8String"/>
    </avp>
    <avp name="Tunnel-Server-Endpoint" code="67" mandatory="must"
	 may-encrypt="yes">
      <type type-name="UTF8String"/>
    </avp>
    <avp name="Tunnel-Password" code="69" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Tunnel-Private-Group-Id" code="81" mandatory="must"
	 may-encrypt="yes">
      <type type-name="UTF8String"/>
    </avp>
    <avp name="Tunnel-Assignment-Id" code="82" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Tunnel-Preference" code="83" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Tunnel-Client-Auth-Id" code="90" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Tunnel-Server-Auth-Id" code="91" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Accounting-Input-Octets" code="363" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned64"/>
    </avp>
    <avp name="Accounting-Output-Octets" code="364" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned64"/>
    </avp>
    <avp name="Accounting-Input-Packets" code="365" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned64"/>
    </avp>
    <avp name="Accounting-Output-Packets" code="366" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned64"/>
    </avp>
    <avp name="Acct-Session-Time" code="46" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Acct-Authentic" code="45" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Enumerated"/>
    </avp>
    <avp name="Acct-Delay-Time" code="41" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Acct-Link-Count" code="51" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="Acct-Tunnel-Connection" code="68" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="Acct-Tunnel-Packets-Lost" code="86" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="NAS-Identifier" code="32" mandatory="must"
	 may-encrypt="yes">
      <type type-name="UTF8String"/>
    </avp>
    <avp name="NAS-IP-Address" code="4" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="NAS-IPv6-Address" code="95" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="State" code="24" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
  </application>

  <!-- *********** DIAMETERE MOBILEIPV4 APPLICATION ***********-->
  <application id="2" name="Mobile IPv4" 
    uri="ftp://ftp.ietf.org/internet-drafts/draft-ietf-aaa-diameter-mobileip-14.txt">

    <command name="AA-Mobile-Node" code="260" >
      <requestrules>
        <fixed>
	  <avprule name="Session-Id" maximum="1" minimum="1"/>
	</fixed>
        <required>
	  <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
	  <avprule name="User-Name" maximum="1" minimum="1"/>
	  <avprule name="Destination-Realm" maximum="1" minimum="1"/>
	  <avprule name="Origin-Host" maximum="1" minimum="1"/>
	  <avprule name="Origin-Realm" maximum="1" minimum="1"/>
	  <avprule name="MIP-Reg-Request" maximum="1" minimum="1"/>
	  <avprule name="MIP-MN-AAA-Auth" maximum="1" minimum="1"/>
	</required>
        <optional>
	  <avprule name="Acct-Multi-Session-Id " maximum="1"/>
	  <avprule name="Destination-Host" maximum="1"/>
	  <avprule name="Origin-State-Id" maximum="1"/>
	  <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
	  <avprule name="MIP-Home-Agent-Address" maximum="1"/>
	  <avprule name="MIP-Feature-Vector" maximum="1"/>
	  <avprule name="MIP-Originating-Foreign-AAA" maximum="1"/>
	  <avprule name="Authorization-Lifetime" maximum="1"/>
	  <avprule name="Auth-Session-State" maximum="1"/>
	  <avprule name="MIP-FA-Challenge" maximum="1"/>
	  <avprule name="MIP-Candidate-Home-Agent-Host" maximum="1"/>
	  <avprule name="MIP-Home-Agent-Host" maximum="1"/>
	  <avprule name="Proxy-Info"/>
	  <avprule name="Route-Record"/>
	  <avprule name="AVP"/>
        </optional>
      </requestrules>
      <answerrules>
        <fixed>
	  <avprule name="Session-Id" maximum="1" minimum="1"/>
	</fixed>
        <required>
	  <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
	  <avprule name="Result-Code" maximum="1" minimum="1"/>
	  <avprule name="Origin-Host" maximum="1" minimum="1"/>
	  <avprule name="Origin-Realm" maximum="1" minimum="1"/>
	</required>
        <optional>
	  <avprule name="Acct-Multi-Session-Id" maximum="1"/>
	  <avprule name="User-Name" maximum="1"/>
	  <avprule name="Authorization-Lifetime" maximum="1"/>
	  <avprule name="Auth-Session-State" maximum="1"/>
	  <avprule name="Error-Message" maximum="1"/>
	  <avprule name="Error-Reporting-Host" maximum="1"/>
	  <avprule name="Re-Auth-Request-Type" maximum="1"/>
	  <avprule name="MIP-Feature-Vector" maximum="1"/>
	  <avprule name="MIP-Reg-Reply" maximum="1"/>
	  <avprule name="MIP-MN-to-FA-Key" maximum="1"/>
	  <avprule name="MIP-MN-to-HA-Key" maximum="1"/>
	  <avprule name="MIP-FA-to-MN-Key" maximum="1"/>
	  <avprule name="MIP-FA-to-HA-Key" maximum="1"/>
	  <avprule name="MIP-HA-to-MN-Key" maximum="1"/>
	  <avprule name="MIP-HA-to-FA-Key" maximum="1"/>
	  <avprule name="MIP-Key-Lifetime" maximum="1"/>
 	  <avprule name="MIP-Home-Agent-Address" maximum="1"/>
	  <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
	  <!--avprule name="MIP-Filter-Rule"/-->
	  <avprule name="Origin-State-Id" maximum="1"/>
	  <avprule name="Proxy-Info"/>
	  <avprule name="AVP"/>
        </optional>
      </answerrules>
    </command>
    <command name="Home-Agent-MIP" code="262" >
      <requestrules>
        <fixed>
	  <avprule name="Session-Id" maximum="1" minimum="1"/>
	</fixed>
        <required>
	  <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
	  <avprule name="Authorization-Lifetime" maximum="1" minimum="1"/>
	  <avprule name="Auth-Session-State" maximum="1" minimum="1"/>
	  <avprule name="MIP-Reg-Request" maximum="1" minimum="1"/>
	  <avprule name="Origin-Host" maximum="1" minimum="1"/>
	  <avprule name="Origin-Realm" maximum="1" minimum="1"/>
	  <avprule name="User-Name" maximum="1" minimum="1"/>
	  <avprule name="Destination-Realm" maximum="1" minimum="1"/>
	  <avprule name="MIP-Feature-Vector" maximum="1" minimum="1"/>
	</required>
        <optional>
	  <avprule name="Destination-Host" maximum="1"/>
	  <avprule name="MIP-MN-to-HA-Key" maximum="1"/>
	  <avprule name="MIP-MN-to-FA-Key" maximum="1"/>
	  <avprule name="MIP-HA-to-MN-Key" maximum="1"/>
	  <avprule name="MIP-HA-to-FA-Key" maximum="1"/>
	  <avprule name="MIP-Key-Lifetime" maximum="1"/>
	  <avprule name="MIP-Originating-Foreign-AAA" maximum="1"/>
	  <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
	  <avprule name="MIP-Home-Agent-Address" maximum="1"/>
	  <!--avprule name="MIP-Filter-Rule"/-->
	  <avprule name="Origin-State-Id" maximum="1"/>
	  <avprule name="Proxy-Info"/>
	  <avprule name="Route-Record"/>
	  <avprule name="AVP"/>
        </optional>
      </requestrules>
      <answerrules>
        <fixed>
	  <avprule name="Session-Id" maximum="1" minimum="1"/>
	</fixed>
        <required>
	  <avprule name="Auth-Application-Id" maximum="1" minimum="1"/>
	  <avprule name="Result-Code" maximum="1" minimum="1"/>
	  <avprule name="Origin-Host" maximum="1" minimum="1"/>
	  <avprule name="Origin-Realm" maximum="1" minimum="1"/>
	</required>
        <optional>
	  <avprule name="Acct-Multi-Session-Id" maximum="1"/>
	  <avprule name="User-Name" maximum="1"/>
	  <avprule name="Error-Reporting-Host" maximum="1"/>
	  <avprule name="Error-Message" maximum="1"/>
	  <avprule name="MIP-Reg-Reply" maximum="1"/>
	  <avprule name="MIP-Home-Agent-Address" maximum="1"/>
	  <avprule name="MIP-Mobile-Node-Address" maximum="1"/>
	  <avprule name="MIP-FA-to-HA-SPI" maximum="1"/>
	  <avprule name="MIP-FA-to-MN-SPI" maximum="1"/>
 	  <avprule name="Origin-State-Id" maximum="1"/>
	  <avprule name="Proxy-Info"/>
	  <avprule name="AVP"/>
        </optional>
      </answerrules>
    </command>

    <!-- ***************** DIAMETER MOBILEIPV4 APPLICATION AVPS ************** -->
    <avp name="MIP-Auth-Input-Data-Length" code="338" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="MIP-Authenticator-Length" code="339" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="MIP-Authenticator-Offset" code="340" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="MIP-Candidate-Home-Agent-Host" code="336" mandatory="must"
	 may-encrypt="no">
      <type type-name="DiameterIdentity"/>
    </avp>
    <avp name="MIP-Home-Agent-Host" code="348" mandatory="must"
	 may-encrypt="no">
      <type type-name="DiameterIdentity"/>
    </avp>
    <avp name="MIP-FA-Challenge" code="344" mandatory="must"
	 may-encrypt="yes">
      <type type-name="OctetString"/>
    </avp>
    <avp name="MIP-Feature-Vector" code="337" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="MIP-Home-Agent-Address" code="334" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Address"/>
    </avp>
    <avp name="MIP-MN-AAA-Auth" code="322" mandatory="must"
	 may-encrypt="yes">
      <grouped>
	<required>
	  <avprule name="MIP-MN-AAA-SPI" maximum="1" minimum="1"/>
	  <avprule name="MIP-Auth-Input-Data-Length" maximum="1" minimum="1"/>
	  <avprule name="MIP-Authenticator-Offset" maximum="1" minimum="1"/>
        </required>
	<optional>
	  <avprule name="AVP"/>
        </optional>
      </grouped>
    </avp>
    <avp name="MIP-MN-AAA-SPI" code="322" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Unsigned32"/>
    </avp>
    <avp name="MIP-Mobile-Node-Address" code="333" mandatory="must"
	 may-encrypt="yes">
      <type type-name="Address"/>