| Appendix H. Supported RADIUS Attribute/Value Pairs for VoIP operation | ||
|---|---|---|
 |  | |
| Appendix H. Supported RADIUS Attribute/Value Pairs for VoIP operation | ||
|---|---|---|
| | | |
Table of Contents
RADIUS is used to authenticate REGISTRATION requests allowing registration of telephones. It is also used to authenticate INVITE requests and provide call routing information.
RADIUS Accounting is used to provide details of calls in progress.
Authentication requests are used for SIP requests where the request is to be challenged, e.g. REGISTER, INVITE, REFER, SUBSCRIBE, OPTIONS, etc.
The format mostly follows RFC5090. There is an option (radius-challenge) to send the RADIUS authentication request before receiving authentication data from the requestor, which allows progress without authentication credentials, but more likely to be used to send a ACCESS_CHALLENGE response to customise the challenge sent to the requestor.
Table H.1. Access-request
| AVP | No. | Usage |
| User-Name | 1 | Name of locally configured telephone user, or @ and locally configured carrier name |
| Chargeable-User-Identity | 89 | If request relates to locally configured telephone user or carrier |
| Message-Authenticator | 80 | Message signature as per RFC2869 |
| Called-Station-Id | 30 | Local part of To: header |
| Calling-Station-Id | 31 | Local part of From: header |
| NAS-Identifier | 32 | Configured hostname of FireBrick |
| NAS-IP-Address | 4 | Requestor IPv4 address if using IPv4 |
| NAS-IPv6-Address | 95 | Requestor IPv6 address if using IPv6 |
| NAS-Port | 5 | Requestor UDP port |
| NAS-Port-Type | 61 | Send with value 5 (virtual) if NAT detected |
| Class | 25 | User Agent string |
| Acct-Multi-Session-Id | 50 | Call-ID from request |
| Digest-Response | 103 | Digest Response |
| Digest-Realm | 104 | Digest Realm |
| Digest-Nonce | 105 | Digest Nonce |
| Digest-Method | 108 | Digest Method |
| Digest-URI | 109 | Digest URI, or URI from request if no Authorization digest present |
| Digest-QOP | 110 | Digest QOP |
| Digest-Algorithm | 111 | Digest Algorithm |
| Digest-CNonce | 113 | Digest CNonce |
| Digest-Nonce-Count | 114 | Digest Nonce Count (NC) |
| Digest-Username | 115 | Digest Username |
| Digest-Opaque | 116 | Digest Opaque |
| SIP-AOR | 122 | Contact URI |
| Session-Timeout | 27 | Time from Expires header |
| Acct-Terminate-Cause | 49 | Only sent for a redirect call routing, the redirect code, e.g. 301/302 |
| | | |
| G.9. Notes |  | H.2. Authentication response |