Init repo
This commit is contained in:
commit
a1417f4046
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
result*
|
||||||
5
README.md
Normal file
5
README.md
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
# Juniper Vendor Specific Attributes comparison table
|
||||||
|
|
||||||
|
[You can find the table in my Wiki](https://wiki.clerie.de/notiz/juniper-vendor-specific-attributes-freeradius-comparison)
|
||||||
|
|
||||||
|
This is just a quick and dirty script to generate the comparison table.
|
||||||
156
dictionary.juniper
Normal file
156
dictionary.juniper
Normal file
@ -0,0 +1,156 @@
|
|||||||
|
# FreeRADIUS dictionary like representation of the official Juniper VSAs names
|
||||||
|
# sourced from https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/topic-map/radius-std-attributes-vsas-support.html#id-juniper-networks-vsas-supported-by-the-aaa-service-framework
|
||||||
|
#
|
||||||
|
# This file just looks like FreeRADIUS dictionary syntax and needs modification
|
||||||
|
# if it should get used by FreeRADIUS
|
||||||
|
|
||||||
|
VENDOR Juniper 4874
|
||||||
|
|
||||||
|
BEGIN-VENDOR Juniper
|
||||||
|
|
||||||
|
ATTRIBUTE Virtual-Router 1
|
||||||
|
ATTRIBUTE Primary-DNS 4
|
||||||
|
ATTRIBUTE Secondary-DNS 5
|
||||||
|
ATTRIBUTE Primary-WINS 6
|
||||||
|
ATTRIBUTE Secondary-WINS 7
|
||||||
|
ATTRIBUTE Tunnel-Virtual-Router 8
|
||||||
|
ATTRIBUTE Tunnel-Password 9
|
||||||
|
ATTRIBUTE Ingress-Policy-Name 10
|
||||||
|
ATTRIBUTE Egress-Policy-Name 11
|
||||||
|
ATTRIBUTE IGMP-Enable 23
|
||||||
|
ATTRIBUTE PPPoE-Description 24
|
||||||
|
ATTRIBUTE Redirect-VRouter-Name 25
|
||||||
|
ATTRIBUTE Tunnel-Nas-Port-Method 30
|
||||||
|
ATTRIBUTE Service-Bundle 31
|
||||||
|
ATTRIBUTE Tunnel-Max-Sessions 33
|
||||||
|
ATTRIBUTE Framed-IP-Route-Tag. 34
|
||||||
|
ATTRIBUTE Input-Gigapackets 42
|
||||||
|
ATTRIBUTE Output-Gigapackets 43
|
||||||
|
ATTRIBUTE Ipv6-Primary-DNS 47
|
||||||
|
ATTRIBUTE Ipv6-Secondary-DNS 48
|
||||||
|
ATTRIBUTE Disconnect-Cause 51
|
||||||
|
ATTRIBUTE DHCP-Options 55
|
||||||
|
ATTRIBUTE DHCP-MAC-Address 56
|
||||||
|
ATTRIBUTE DHCP-GI-Address 57
|
||||||
|
ATTRIBUTE LI-Action 58
|
||||||
|
ATTRIBUTE Med-Dev-Handle 59
|
||||||
|
ATTRIBUTE Med-Ip-Address 60
|
||||||
|
ATTRIBUTE Med-Port-Number 61
|
||||||
|
ATTRIBUTE Interface-Desc 63
|
||||||
|
ATTRIBUTE Tunnel-Group 64
|
||||||
|
ATTRIBUTE Activate-Service 65
|
||||||
|
ATTRIBUTE Deactivate-Service 66
|
||||||
|
ATTRIBUTE Service-Volume 67
|
||||||
|
ATTRIBUTE Service-Timeout 68
|
||||||
|
ATTRIBUTE Service-Statistics 69
|
||||||
|
ATTRIBUTE IGMP-Access-Name 71
|
||||||
|
ATTRIBUTE IGMP-Access-Src-Name 72
|
||||||
|
ATTRIBUTE MLD-Access-Name 74
|
||||||
|
ATTRIBUTE MLD-Access-Src-Name 75
|
||||||
|
ATTRIBUTE MLD-Version 77
|
||||||
|
ATTRIBUTE IGMP-Version 78
|
||||||
|
ATTRIBUTE Service-Session 83
|
||||||
|
ATTRIBUTE Tunnel-Switch-Profile 91
|
||||||
|
ATTRIBUTE L2C-Up-Stream-Data 92
|
||||||
|
ATTRIBUTE L2C-Down-Stream-Data 93
|
||||||
|
ATTRIBUTE Tunnel-Tx-Speed-Method 94
|
||||||
|
ATTRIBUTE IGMP-Immediate-Leave 97
|
||||||
|
ATTRIBUTE MLD-Immediate-Leave 100
|
||||||
|
ATTRIBUTE IPv6-Ingress-Policy-Name 106
|
||||||
|
ATTRIBUTE IPv6-Egress-Policy-Name 107
|
||||||
|
ATTRIBUTE CoS-Parameter-Type 108
|
||||||
|
ATTRIBUTE DHCP-Guided-Relay-Server 109
|
||||||
|
ATTRIBUTE Acc-Loop-Cir-Id 110
|
||||||
|
ATTRIBUTE Acc-Aggr-Cir-Id-Bin 111
|
||||||
|
ATTRIBUTE Acc-Aggr-Cir-Id-Asc 112
|
||||||
|
ATTRIBUTE Act-Data-Rate-Up 113
|
||||||
|
ATTRIBUTE Act-Data-Rate-Dn 114
|
||||||
|
ATTRIBUTE Min-Data-Rate-Up 115
|
||||||
|
ATTRIBUTE Min-Data-Rate-Dn 116
|
||||||
|
ATTRIBUTE Att-Data-Rate-Up 117
|
||||||
|
ATTRIBUTE Att-Data-Rate-Dn 118
|
||||||
|
ATTRIBUTE Max-Data-Rate-Up 119
|
||||||
|
ATTRIBUTE Max-Data-Rate-Dn 120
|
||||||
|
ATTRIBUTE Min-LP-Data-Rate-Up 121
|
||||||
|
ATTRIBUTE Min-LP-Data-Rate-Dn 122
|
||||||
|
ATTRIBUTE Max-Interlv-Delay-Up 123
|
||||||
|
ATTRIBUTE Act-Interlv-Delay-Up 124
|
||||||
|
ATTRIBUTE Max-Interlv-Delay-Dn 125
|
||||||
|
ATTRIBUTE Act-Interlv-Delay-Dn 126
|
||||||
|
ATTRIBUTE DSL-Line-State 127
|
||||||
|
ATTRIBUTE DSL-Type 128
|
||||||
|
ATTRIBUTE Qos-Set-Name 130
|
||||||
|
ATTRIBUTE Service-Interim-Acct-Interval 140
|
||||||
|
ATTRIBUTE Downstream-Calculated-QoS-Rate 141
|
||||||
|
ATTRIBUTE Upstream-Calculated-QoS-Rate 142
|
||||||
|
ATTRIBUTE Max-Clients-Per-Interface 143
|
||||||
|
ATTRIBUTE CoS-Scheduler-Pmt-Type 146
|
||||||
|
ATTRIBUTE IPv6-Acct-Input-Octets 151
|
||||||
|
ATTRIBUTE IPv6-Acct-Output-Octets 152
|
||||||
|
ATTRIBUTE IPv6-Acct-Input-Packets 153
|
||||||
|
ATTRIBUTE IPv6-Acct-Output-Packets 154
|
||||||
|
ATTRIBUTE IPv6-Acct-Input-Gigawords 155
|
||||||
|
ATTRIBUTE IPv6-Acct-Output-Gigawords 156
|
||||||
|
ATTRIBUTE PPPoE-Padn 158
|
||||||
|
ATTRIBUTE Vlan-Map-Id 160
|
||||||
|
ATTRIBUTE IPv6-Delegated-Pool-Name 161
|
||||||
|
ATTRIBUTE Tx-Connect-Speed 162
|
||||||
|
ATTRIBUTE Rx-Connect-Speed 163
|
||||||
|
ATTRIBUTE IPv4-Release-Control 164
|
||||||
|
ATTRIBUTE Service-Activate-Type 173
|
||||||
|
ATTRIBUTE Client-Profile-Name 174
|
||||||
|
ATTRIBUTE Cos-Shaping-Rate 177
|
||||||
|
ATTRIBUTE Action-Reason 178
|
||||||
|
ATTRIBUTE Service-Volume-Gigawords 179
|
||||||
|
ATTRIBUTE Update-Service 180
|
||||||
|
ATTRIBUTE DHCPv6-Guided-Relay-Server 181
|
||||||
|
ATTRIBUTE Acc-Loop-Remote-Id 182
|
||||||
|
ATTRIBUTE Acc-Loop-Encap 183
|
||||||
|
ATTRIBUTE Inner-Vlan-Map-Id 184
|
||||||
|
ATTRIBUTE Core-Facing-Interface 185
|
||||||
|
ATTRIBUTE DHCP-First-Relay-IPv4-Address 189
|
||||||
|
ATTRIBUTE DHCP-First-Relay-IPv6-Address 190
|
||||||
|
ATTRIBUTE Input-Interface-Filter 191
|
||||||
|
ATTRIBUTE Output-Interface-Filter 192
|
||||||
|
ATTRIBUTE Pim-Enable 193
|
||||||
|
ATTRIBUTE Bulk-CoA-Transaction-Id 194
|
||||||
|
ATTRIBUTE Bulk-CoA-Identifier 195
|
||||||
|
ATTRIBUTE IPv4-Input-Service-Set 196
|
||||||
|
ATTRIBUTE IPv4-Output-Service-Set 197
|
||||||
|
ATTRIBUTE IPv4-Input-Service-Filter 198
|
||||||
|
ATTRIBUTE IPv4-Output-Service-Filter 199
|
||||||
|
ATTRIBUTE IPv6-Input-Service-Set 200
|
||||||
|
ATTRIBUTE IPv6-Output-Service-Set 201
|
||||||
|
ATTRIBUTE IPv6-Input-Service-Filter 202
|
||||||
|
ATTRIBUTE IPv6-Output-Service-Filter 203
|
||||||
|
ATTRIBUTE Adv-Pcef-Profile-Name 204
|
||||||
|
ATTRIBUTE Adv-Pcef-Rule-Name 205
|
||||||
|
ATTRIBUTE Reauthentication-On-Renew 206
|
||||||
|
ATTRIBUTE DHCPv6-Options 207
|
||||||
|
ATTRIBUTE DHCP-Header 208
|
||||||
|
ATTRIBUTE DHCPv6-Header 209
|
||||||
|
ATTRIBUTE Acct-Request-Reason 210
|
||||||
|
ATTRIBUTE Inner-Tag-Protocol-Id 211
|
||||||
|
ATTRIBUTE Routing-Services 212
|
||||||
|
ATTRIBUTE Interface-Set-Targeting-Weight 213
|
||||||
|
ATTRIBUTE Interface-Targeting-Weight 214
|
||||||
|
ATTRIBUTE Hybrid-Access-DSL-Downstream-Speed 216
|
||||||
|
ATTRIBUTE Hybrid-Access-LTE-Downstream-Speed 217
|
||||||
|
ATTRIBUTE Connection-Status-Message 218
|
||||||
|
ATTRIBUTE PON-Access-Type 219
|
||||||
|
ATTRIBUTE ONT/ONU-Average-Data-Rate-Downstream 220
|
||||||
|
ATTRIBUTE ONT/ONU-Peak-Data-Rate-Downstream 221
|
||||||
|
ATTRIBUTE ONT/ONU-Maximum-Data-Rate-Upstream 222
|
||||||
|
ATTRIBUTE ONT/ONU-Assured-Data-Rate-Upstream 223
|
||||||
|
ATTRIBUTE PON-Tree-Maximum-Data-Rate-Upstream 224
|
||||||
|
ATTRIBUTE PON-Tree-Maximum-Data-Rate-Downstream 225
|
||||||
|
ATTRIBUTE Expected-Throughput-Upstream 226
|
||||||
|
ATTRIBUTE Expected-Throughput-Downstream 227
|
||||||
|
ATTRIBUTE Attainable-Expected-Throughput-Upstream 228
|
||||||
|
ATTRIBUTE Attainable-Expected-Throughput-Downstream 229
|
||||||
|
ATTRIBUTE Gamma-Data-Rate-Upstream 230
|
||||||
|
ATTRIBUTE Gamma-Data-Rate-Downstream 231
|
||||||
|
ATTRIBUTE Attainable-Gamma-Data-Rate-Upstream 232
|
||||||
|
ATTRIBUTE Attainable-Gamma-Data-Rate-Downstream 233
|
||||||
|
|
||||||
|
END-VENDOR Juniper
|
||||||
27
flake.lock
Normal file
27
flake.lock
Normal file
@ -0,0 +1,27 @@
|
|||||||
|
{
|
||||||
|
"nodes": {
|
||||||
|
"nixpkgs": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1702151865,
|
||||||
|
"narHash": "sha256-9VAt19t6yQa7pHZLDbil/QctAgVsA66DLnzdRGqDisg=",
|
||||||
|
"owner": "NixOS",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"rev": "666fc80e7b2afb570462423cb0e1cf1a3a34fedd",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "NixOS",
|
||||||
|
"ref": "nixos-unstable",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": {
|
||||||
|
"inputs": {
|
||||||
|
"nixpkgs": "nixpkgs"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": "root",
|
||||||
|
"version": 7
|
||||||
|
}
|
||||||
25
flake.nix
Normal file
25
flake.nix
Normal file
@ -0,0 +1,25 @@
|
|||||||
|
{
|
||||||
|
inputs = {
|
||||||
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
|
||||||
|
};
|
||||||
|
outputs = { self, nixpkgs, ... }: {
|
||||||
|
packages.x86_64-linux = let
|
||||||
|
pkgs = import nixpkgs {
|
||||||
|
system = "x86_64-linux";
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
juniper-radius-vsas = pkgs.python311Packages.buildPythonPackage rec {
|
||||||
|
pname = "juniper-radius-vsas";
|
||||||
|
version = "0.0.1";
|
||||||
|
|
||||||
|
src = ./.;
|
||||||
|
|
||||||
|
format = "pyproject";
|
||||||
|
|
||||||
|
buildInputs = [ pkgs.python311Packages.hatchling ];
|
||||||
|
propagatedBuildInputs = with pkgs.python311Packages; [ requests ];
|
||||||
|
};
|
||||||
|
default = self.packages.x86_64-linux.juniper-radius-vsas;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
103
parse_freeradius_dictionary.py
Executable file
103
parse_freeradius_dictionary.py
Executable file
@ -0,0 +1,103 @@
|
|||||||
|
#!/usr/bin/env python3
|
||||||
|
|
||||||
|
from pathlib import Path
|
||||||
|
import requests
|
||||||
|
|
||||||
|
|
||||||
|
def parse_freeradius_dictionary(text, freeradius4=False):
|
||||||
|
vendors = {}
|
||||||
|
current_vendor = None
|
||||||
|
avs = {}
|
||||||
|
|
||||||
|
for line in text.splitlines():
|
||||||
|
if line.startswith("VENDOR"):
|
||||||
|
elements = line.split("#")[0].split()
|
||||||
|
vendors[elements[1]] = int(elements[2])
|
||||||
|
|
||||||
|
elif line.startswith("BEGIN-VENDOR"):
|
||||||
|
elements = line.split("#")[0].split()
|
||||||
|
if elements[1] in vendors:
|
||||||
|
current_vendor = elements[1]
|
||||||
|
else:
|
||||||
|
raise Exception(f"Vendor {elements[1]} not declared")
|
||||||
|
|
||||||
|
elif line.startswith("END-VENDOR"):
|
||||||
|
current_vendor = None
|
||||||
|
|
||||||
|
elif line.startswith("ATTRIBUTE"):
|
||||||
|
elements = line.split("#")[0].split()
|
||||||
|
|
||||||
|
avs[f"26.{vendors[current_vendor]}.{int(elements[2])}"] = elements[1] if not freeradius4 else f"Vendor-Specific.{current_vendor}.{elements[1]}"
|
||||||
|
|
||||||
|
return avs
|
||||||
|
|
||||||
|
def merge_avs(av_dicts):
|
||||||
|
merged_avs = {}
|
||||||
|
|
||||||
|
for source, d in av_dicts.items():
|
||||||
|
for attr, name in d.items():
|
||||||
|
if attr not in merged_avs:
|
||||||
|
merged_avs[attr] = {}
|
||||||
|
|
||||||
|
merged_avs[attr][source] = name
|
||||||
|
|
||||||
|
|
||||||
|
return merged_avs
|
||||||
|
|
||||||
|
def sort_attribute_key(key):
|
||||||
|
a,b,c = key.split(".")
|
||||||
|
return f"{int(a):04d}.{int(b):08d}.{int(c):08d}"
|
||||||
|
|
||||||
|
def to_dokuwiki(merged_avs):
|
||||||
|
out = ""
|
||||||
|
|
||||||
|
cols = list(next(iter(merged_avs.items()))[1].keys())
|
||||||
|
|
||||||
|
out +="^ " + " ^ ".join( ["id"] + cols) + " ^\n"
|
||||||
|
|
||||||
|
avs = sorted(list(merged_avs.keys()), key=sort_attribute_key)
|
||||||
|
|
||||||
|
for av in avs:
|
||||||
|
line = []
|
||||||
|
line.append(av)
|
||||||
|
|
||||||
|
for col in cols:
|
||||||
|
if col in merged_avs[av]:
|
||||||
|
line.append(merged_avs[av][col])
|
||||||
|
else:
|
||||||
|
line.append("")
|
||||||
|
|
||||||
|
out += "| " + " | ".join(line) + " |\n"
|
||||||
|
|
||||||
|
return out
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
|
||||||
|
av_dicts = {}
|
||||||
|
|
||||||
|
# Official Juniper VSAs
|
||||||
|
text = Path("dictionary.juniper").read_text()
|
||||||
|
av_dicts["juniper"] = parse_freeradius_dictionary(text)
|
||||||
|
|
||||||
|
# v2.x.x
|
||||||
|
r = requests.get("https://raw.githubusercontent.com/FreeRADIUS/freeradius-server/v2.x.x/share/dictionary.erx")
|
||||||
|
r.raise_for_status()
|
||||||
|
av_dicts["freeradius_2.x.x"] = parse_freeradius_dictionary(r.text)
|
||||||
|
|
||||||
|
# v3.0.x
|
||||||
|
r = requests.get("https://raw.githubusercontent.com/FreeRADIUS/freeradius-server/v3.0.x/share/dictionary.erx")
|
||||||
|
r.raise_for_status()
|
||||||
|
av_dicts["freeradius_3.0.x"] = parse_freeradius_dictionary(r.text)
|
||||||
|
|
||||||
|
# v3.2.x
|
||||||
|
r = requests.get("https://raw.githubusercontent.com/FreeRADIUS/freeradius-server/v3.2.x/share/dictionary.erx")
|
||||||
|
r.raise_for_status()
|
||||||
|
av_dicts["freeradius_3.2.x"] = parse_freeradius_dictionary(r.text)
|
||||||
|
|
||||||
|
# v4.0-alpha1
|
||||||
|
r = requests.get("https://raw.githubusercontent.com/FreeRADIUS/freeradius-server/release_4_0_alpha1/share/dictionary/radius/dictionary.unisphere")
|
||||||
|
r.raise_for_status()
|
||||||
|
av_dicts["freeradius_4.0-alpha1"] = parse_freeradius_dictionary(r.text, freeradius4=True)
|
||||||
|
|
||||||
|
print(to_dokuwiki(merge_avs(av_dicts)))
|
||||||
18
pyproject.toml
Normal file
18
pyproject.toml
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
[build-system]
|
||||||
|
requires = ["hatchling"]
|
||||||
|
build-backend = "hatchling.build"
|
||||||
|
|
||||||
|
[project]
|
||||||
|
name = "juniper-radius-vsas"
|
||||||
|
version = "0.0.1"
|
||||||
|
authors = [
|
||||||
|
{ name="clerie", email="hallo@clerie.de" },
|
||||||
|
]
|
||||||
|
description = ""
|
||||||
|
readme = "README.md"
|
||||||
|
requires-python = ">=3.11"
|
||||||
|
|
||||||
|
dependencies = [
|
||||||
|
"requests",
|
||||||
|
]
|
||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user