Radius (Remote Authentication Dial-In User Service) merupakan protokol AAA (Authentication, Authorization, dan Accounting) yang digunakan untuk mengelola akses pengguna ke jaringan. Komunikasi antara NAS (Network Access Server) dan server Radius dilakukan melalui pertukaran paket yang berisi kumpulan attribute.
Setiap attribute memiliki format Type-Length-Value (TLV) dengan struktur sebagai berikut:
Attribute digunakan baik pada paket Access-Request, Access-Accept, Access-Reject, Accounting-Request, maupun Accounting-Response. Sebagian attribute bersifat wajib (seperti User-Name dan User-Password), sementara sebagian lainnya bersifat opsional.
Attribute standard didefinisikan oleh IETF melalui serangkaian RFC, antara lain RFC 2865 (Authentication & Authorization), RFC 2866 (Accounting), RFC 2867 (Tunnel Protocol Support), RFC 2868 (Tunnel Protocol Support for AAA), RFC 3162 (IPv6), RFC 3576 (Dynamic Authorization), RFC 5090 (Digest Authentication), dan beberapa RFC lainnya. Attribute-attribute ini memiliki nomor Type di bawah 256 dan berlaku universal untuk semua implementasi Radius.
Tipe data yang umum digunakan pada attribute standard meliputi:
Selain attribute standard, Radius juga mendukung Vendor-Specific Attribute (VSA) yang didefinisikan pada RFC 2865 bagian 5.26. VSA memungkinkan vendor perangkat jaringan menambahkan attribute sendiri tanpa harus mengubah standar RFC, dengan cara mengenkapsulasi attribute dalam attribute Vendor-Specific (Type 26).
Format VSA terdiri dari:
Sebagai contoh, MikroTik memiliki Vendor-Id 14988, Microsoft memiliki Vendor-Id 311, Cisco memiliki Vendor-Id 9, dan ZTE memiliki Vendor-Id 3902. Vendor lain seperti Juniper (2636), Huawei (2011), dan Nokia (6527) juga memiliki Vendor-Id masing-masing dengan kumpulan attribute sendiri[citation:11][citation:12].
Berikut ini adalah daftar Radius Attribute yang sudah terdaftar di server Radius Netlayer. Jika Anda ingin mendaftarkan attribute khusus yang Anda butuhkan, silakan hubungi admin.
| Name | ID | Type |
|---|---|---|
| User-Name | 1 | string |
| User-Password | 2 | string |
| CHAP-Password | 3 | string |
| NAS-IP-Address | 4 | ip_address |
| NAS-Port | 5 | uint32 |
| Service-Type | 6 | uint32 |
| Framed-Protocol | 7 | uint32 |
| Framed-IP-Address | 8 | ip_address |
| Framed-IP-Netmask | 9 | ip_address |
| Framed-Routing | 10 | uint32 |
| Filter-Id | 11 | string |
| Framed-MTU | 12 | uint32 |
| Framed-Compression | 13 | uint32 |
| Login-IP-Host | 14 | ip_address |
| Login-Service | 15 | uint32 |
| Login-TCP-Port | 16 | uint32 |
| Framed-IPX-Address | 17 | string |
| Reply-Message | 18 | string |
| Callback-Number | 19 | string |
| Callback-Id | 20 | string |
| Framed-Route | 22 | string |
| Framed-IPX-Network | 23 | uint32 |
| State | 24 | string |
| Class | 25 | string |
| Vendor-Specific | 26 | string |
| Session-Timeout | 27 | uint32 |
| Idle-Timeout | 28 | uint32 |
| Termination-Action | 29 | uint32 |
| Called-Station-Id | 30 | string |
| Calling-Station-Id | 31 | string |
| NAS-Identifier | 32 | string |
| Proxy-State | 33 | string |
| Login-LAT-Service | 34 | string |
| Login-LAT-Node | 35 | string |
| Login-LAT-Group | 36 | string |
| Framed-AppleTalk-Link | 37 | uint32 |
| Framed-AppleTalk-Network | 38 | uint32 |
| Framed-AppleTalk-Zone | 39 | string |
| Acct-Status-Type | 40 | uint32 |
| Acct-Delay-Time | 41 | uint32 |
| Acct-Input-Octets | 42 | uint32 |
| Acct-Output-Octets | 43 | uint32 |
| Acct-Session-Id | 44 | string |
| Acct-Authentic | 45 | uint32 |
| Acct-Session-Time | 46 | uint32 |
| Acct-Input-Packets | 47 | uint32 |
| Acct-Output-Packets | 48 | uint32 |
| Acct-Terminate-Cause | 49 | uint32 |
| Acct-Multi-Session-Id | 50 | string |
| Acct-Link-Count | 51 | uint32 |
| Acct-Input-Gigawords | 52 | uint32 |
| Acct-Output-Gigawords | 53 | uint32 |
| Event-Timestamp | 55 | uint32 |
| CHAP-Challenge | 60 | string |
| NAS-Port-Type | 61 | uint32 |
| Port-Limit | 62 | uint32 |
| Login-LAT-Port | 63 | string |
| Tunnel-Type | 32 | uint32 |
| Tunnel-Medium-Type | 65 | uint32 |
| Tunnel-Client-Endpoint | 66 | string |
| Tunnel-Server-Endpoint | 67 | string |
| Acct-Tunnel-Connection | 68 | string |
| Tunnel-Password | 69 | string |
| ARAP-Password | 70 | string |
| ARAP-Features | 71 | string |
| ARAP-Zone-Access | 72 | uint32 |
| ARAP-Security | 73 | uint32 |
| ARAP-Security-Data | 74 | string |
| Password-Retry | 75 | uint32 |
| Prompt | 76 | uint32 |
| Connect-Info | 77 | string |
| Configuration-Token | 78 | string |
| EAP-Message | 79 | string |
| Message-Authenticator | 80 | string |
| Tunnel-Private-Group-ID | 81 | string |
| Tunnel-Assignment-ID | 82 | string |
| Tunnel-Preference | 83 | uint32 |
| ARAP-Challenge-Response | 84 | string |
| Acct-Interim-Interval | 85 | uint32 |
| Acct-Tunnel-Packets-Lost | 86 | uint32 |
| NAS-Port-Id | 87 | string |
| Framed-Pool | 88 | string |
| Tunnel-Client-Auth-ID | 90 | string |
| Tunnel-Server-Auth-ID | 91 | string |
| NAS-IPv6-Address | 95 | ip_address |
| Framed-Interface-Id | 96 | string |
| Framed-IPv6-Prefix | 97 | ip6_prefix |
| Login-IPv6-Host | 98 | ip_address |
| Framed-IPv6-Route | 99 | string |
| Framed-IPv6-Pool | 100 | string |
| Error-Cause | 101 | uint32 |
| EAP-Key-Name | 102 | string |
| Digest-Response | 103 | string |
| Digest-Realm | 104 | string |
| Digest-Nonce | 105 | string |
| Digest-Response-Auth | 106 | string |
| Digest-Nonce-Count | 107 | string |
| Digest-Entity-Body-Hash | 108 | string |
| Digest-CNonce | 109 | string |
| Digest-Algorithm | 111 | string |
| Digest-URI | 120 | string |
| Digest-QOP | 121 | string |
| Digest-Method | 122 | string |
| Delegated-IPv6-Prefix | 123 | ip6_prefix |
| Operator-Name | 126 | string |
| Location-Information | 127 | string |
| Location-Data | 128 | string |
| Basic-Location-Policy-Rules | 129 | string |
| Extended-Location-Policy-Rules | 130 | string |
| Location-Capable | 131 | uint32 |
| Requested-Location-Info | 132 | uint32 |
| Framed-Management | 133 | uint32 |
| Management-Transport-Protection | 134 | uint32 |
| Management-Policy-Id | 135 | string |
| Management-Privilege-Level | 136 | uint32 |
| Originating-Line-Info | 140 | string |
| NAS-Filter-Rule | 150 | string |
| Framed-IPv6-Address | 168 | ip_address |
| DNS-Server-IPv6-Address | 169 | ip_address |
| Route-IPv6-Information | 170 | string |
| Delegated-IPv6-Prefix-Pool | 171 | string |
| Stateful-IPv6-Address-Pool | 172 | string |
| Bandwidth-Max-Up | 197 | uint32 |
MikroTik menggunakan Vendor-Id 14988 untuk mengirim attribute spesifik yang mengontrol fitur seperti rate limit, grup PPP, wireless, queue, DHCP option, dan sebagainya. Attribute-attribute ini umumnya dikirim dalam paket Access-Accept dan CoA-Request untuk mengatur perilaku perangkat MikroTik secara dinamis.
| Name | ID | Type |
|---|---|---|
| Mikrotik-Recv-Limit | 1 | uint32 |
| Mikrotik-Xmit-Limit | 2 | uint32 |
| Mikrotik-Group | 3 | string |
| Mikrotik-Wireless-Forward | 4 | uint32 |
| Mikrotik-Wireless-Skip-Dot1x | 5 | uint32 |
| Mikrotik-Wireless-Enc-Algo | 6 | uint32 |
| Mikrotik-Wireless-Enc-Key | 7 | string |
| Mikrotik-Rate-Limit | 8 | string |
| Mikrotik-Realm | 9 | string |
| Mikrotik-Host-IP | 10 | ip_address |
| Mikrotik-Mark-Id | 11 | string |
| Mikrotik-Advertise-URL | 12 | string |
| Mikrotik-Advertise-Interval | 13 | uint32 |
| Mikrotik-Recv-Limit-Gigawords | 14 | uint32 |
| Mikrotik-Xmit-Limit-Gigawords | 15 | uint32 |
| Mikrotik-Wireless-PSK | 16 | string |
| Mikrotik-Total-Limit | 17 | uint32 |
| Mikrotik-Total-Limit-Gigawords | 18 | uint32 |
| Mikrotik-Address-List | 19 | string |
| Mikrotik-Management-MPKey | 20 | string |
| Mikrotik-Wireless-Comment | 21 | string |
| Mikrotik-Delegated-IPv6-Pool | 22 | string |
| Mikrotik-DHCP-Option-Set | 23 | string |
| Mikrotik-DHCP-Option-Param-Str1 | 24 | string |
| Mikrotik-DHCP-Option-Param-Str2 | 25 | string |
| Mikrotik-Wireless-VLANID | 26 | uint32 |
| Mikrotik-Wireless-VLANIDType | 27 | uint32 |
| Mikrotik-Wireless-MinSignal | 28 | string |
| Mikrotik-Wireless-MaxSignal | 29 | string |
| Mikrotik-Switching-Filter | 30 | string |
| Mikrotik-VRRP-Password | 31 | string |
| Mikrotik-VRRP-Auth-Type | 32 | uint32 |
| Mikrotik-Queue-Parent | 33 | string |
| Mikrotik-Queue-Type | 34 | string |
| Mikrotik-Queue-Priority | 35 | uint32 |
| Mikrotik-Queue-Burst-Limit | 36 | string |
| Mikrotik-Queue-Burst-Threshold | 37 | string |
| Mikrotik-Queue-Burst-Time | 38 | string |
| Mikrotik-PPP-Encryption | 39 | string |
| Mikrotik-PPP-Compression | 40 | string |
| Mikrotik-PPP-VJ-Compression | 41 | uint32 |
| Mikrotik-PPP-MRU | 42 | uint32 |
| Mikrotik-PPP-MTU | 43 | uint32 |
| Mikrotik-Pool-Name | 44 | string |
| Mikrotik-Pool-Timeout | 45 | uint32 |
| Mikrotik-Pool-Idle-Timeout | 46 | uint32 |
| Mikrotik-Pool-Used-Address | 47 | ip_address |
| Mikrotik-Pool-Comment | 48 | string |
| Mikrotik-Pool-Disabled | 49 | uint32 |
| Mikrotik-Pool-Next-Pool | 50 | string |
| Mikrotik-Pool-Ranges | 51 | string |
| Mikrotik-Pool-Expiry | 52 | string |
| Mikrotik-Service-Name | 53 | string |
| Mikrotik-Caller-ID | 54 | string |
| Mikrotik-Interface | 55 | string |
| Mikrotik-Parent-Queue | 56 | string |
| Mikrotik-Script | 57 | string |
| Mikrotik-Trusted-MAC | 58 | string |
| Mikrotik-Allow-MAC | 59 | string |
| Mikrotik-Max-Logins | 60 | uint32 |
| Mikrotik-Cookie | 61 | string |
| Mikrotik-MAC | 62 | string |
| Mikrotik-Minimum-UP | 63 | uint32 |
| Mikrotik-Minimum-Down | 64 | uint32 |
| Mikrotik-Wireless-CQ | 65 | string |
| Mikrotik-Wireless-Tx-Power | 66 | uint32 |
| Mikrotik-Wireless-Rx-Power | 67 | uint32 |
| Mikrotik-Wireless-Station-Name | 68 | string |
| Mikrotik-Wireless-Auth-Algo | 69 | uint32 |
| Mikrotik-Wireless-WEP-Key | 70 | string |
| Mikrotik-Wireless-WEP-Tx-Key | 71 | uint32 |
| Mikrotik-Wireless-WPA-PSK | 72 | string |
| Mikrotik-Wireless-WPA2-PSK | 73 | string |
| Mikrotik-Wireless-802.1x | 74 | uint32 |
| Mikrotik-Wireless-802.1x-Username | 75 | string |
| Mikrotik-Wireless-802.1x-Password | 76 | string |
| Mikrotik-Wireless-802.1x-Interim-Update | 77 | uint32 |
| Mikrotik-Wireless-802.1x-Session-Timeout | 78 | uint32 |
| Mikrotik-Wireless-802.1x-Idle-Timeout | 79 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Interim-Interval | 80 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Session-Id | 81 | string |
| Mikrotik-Wireless-802.1x-Acct-Multi-Session-Id | 82 | string |
| Mikrotik-Wireless-802.1x-Acct-Link-Count | 83 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Input-Octets | 84 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Output-Octets | 85 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Input-Packets | 86 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Output-Packets | 87 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Input-Gigawords | 88 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Output-Gigawords | 89 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Session-Time | 90 | uint32 |
| Mikrotik-Wireless-802.1x-Acct-Terminate-Cause | 91 | uint32 |
Microsoft menggunakan Vendor-Id 311 untuk mengirim attribute spesifik yang banyak digunakan pada lingkungan Windows, seperti autentikasi MS-CHAP dan MS-CHAPv2, enkripsi MS-MPPE, filter IP, serta attribute pendukung IPv6 dan accounting. Attribute ini umum dijumpai pada NAS yang melayani klien Windows, termasuk VPN, RDP, dan WiFi enterprise.
| Name | ID | Type |
|---|---|---|
| MS-CHAP-Response | 1 | string |
| MS-CHAP-Domain | 2 | string |
| MS-CHAP-Error | 12 | string |
| MS-CHAP-CPW-1 | 3 | string |
| MS-CHAP-CPW-2 | 4 | string |
| MS-MPPE-Encryption-Policy | 7 | uint32 |
| MS-MPPE-Encryption-Types | 8 | uint32 |
| MS-MPPE-Recv-Key | 13 | string |
| MS-MPPE-Send-Key | 14 | string |
| MS-CHAP-Challenge | 11 | string |
| MS-CHAP2-Response | 25 | string |
| MS-CHAP2-Success | 26 | string |
| MS-CHAP2-CPW | 27 | string |
| MS-CHAP2-Error | 29 | string |
| MS-Filter | 22 | string |
| MS-Quarantine-IPFilter | 36 | string |
| MS-IPv6-Filter | 51 | string |
| MS-Primary-DNS-Server | 28 | ip_address |
| MS-Secondary-DNS-Server | 29 | ip_address |
| MS-Primary-NBNS-Server | 30 | ip_address |
| MS-Secondary-NBNS-Server | 31 | ip_address |
| MS-RAS-Vendor | 23 | uint32 |
| MS-Local-Address | 32 | ip_address |
| MS-Client-IP-Address | 33 | ip_address |
| MS-Server-Name | 34 | string |
| MS-Link-Utilization-Threshold | 35 | uint32 |
| MS-Acct-Auth-Type | 37 | uint32 |
| MS-Acct-EAP-Type | 38 | uint32 |
| MS-Acct-IPv6-Address | 39 | ip_address |
| MS-Acct-IPv6-Input-Octets | 40 | uint64 |
| MS-Acct-IPv6-Output-Octets | 41 | uint64 |
| MS-Acct-IPv6-Input-Packets | 42 | uint64 |
| MS-Acct-IPv6-Output-Packets | 43 | uint64 |
| MS-Acct-IPv6-Input-Gigawords | 44 | uint32 |
| MS-Acct-IPv6-Output-Gigawords | 45 | uint32 |
| MS-IPv6-Filter | 51 | string |
| MS-Acct-Session-Id | 52 | string |
| MS-Acct-Multi-Session-Id | 53 | string |
| MS-Acct-Link-Count | 54 | uint32 |
| MS-Routing-Type | 55 | uint32 |
| MS-Callback-Number | 56 | string |
| MS-Callback-Id | 57 | string |
| MS-Callback-Type | 58 | uint32 |
| MS-Network-Name | 59 | string |
| MS-IPv6-CP-Address | 60 | ip_address |
Cisco menggunakan Vendor-Id 9 untuk mengirim attribute spesifik yang banyak digunakan pada perangkat Cisco seperti router, switch, dan firewall. Attribute yang paling populer adalah Cisco-AVPair yang memungkinkan konfigurasi dinamis seperti pengalihan URL, filter ACL, dan pengaturan bandwidth melalui pasangan key-value[citation:1][citation:9].
| Name | ID | Type |
|---|---|---|
| Cisco-AVPair | 1 | string |
| Cisco-Account-Info | 2 | string |
| Cisco-Service-Info | 3 | string |
| Cisco-Command-Code | 4 | string |
| Cisco-Control-Info | 5 | string |
| Cisco-User-Info | 6 | string |
| Cisco-Remote-Access-Details | 7 | string |
| Cisco-NAS-Port | 8 | string |
| Cisco-Fax-Account-Id-Origin | 9 | string |
| Cisco-Fax-Message-Id | 10 | string |
| Cisco-Fax-Pages | 11 | uint32 |
| Cisco-Fax-Coverage | 12 | string |
| Cisco-Fax-Modem-Time | 13 | uint32 |
| Cisco-Fax-Connect-Speed | 14 | uint32 |
| Cisco-Fax-Recipient-Count | 15 | uint32 |
| Cisco-Fax-Process-Abort-Flag | 16 | uint32 |
| Cisco-Disconnect-Cause | 17 | uint32 |
| Cisco-Fax-Dsn-Address | 18 | string |
| Cisco-Fax-Dsn-Flag | 19 | uint32 |
| Cisco-Fax-Mdn-Address | 20 | string |
| Cisco-Fax-Mdn-Flag | 21 | uint32 |
| Cisco-Fax-Auth-Status | 22 | uint32 |
| Cisco-Fax-Dsn-Address | 23 | string |
| Cisco-Email-Server-Address | 24 | string |
| Cisco-Email-Server-Ack-Flag | 25 | uint32 |
| Cisco-Gateway-Id | 26 | string |
| Cisco-Email-Address | 27 | string |
| Cisco-Email-Ack-Flag | 28 | uint32 |
| Cisco-Email-Rcpt-Address | 29 | string |
| Cisco-Email-Rcpt-Ack-Flag | 30 | uint32 |
| Cisco-Fax-Abort-Flag | 31 | uint32 |
| Cisco-Fax-Dsn-Flag | 32 | uint32 |
| Cisco-Fax-Mdn-Flag | 33 | uint32 |
| Cisco-Fax-Auth-Status | 34 | uint32 |
| Cisco-Fax-Dsn-Address | 35 | string |
| Cisco-Email-Server-Address | 36 | string |
| Cisco-Email-Server-Ack-Flag | 37 | uint32 |
| Cisco-Gateway-Id | 38 | string |
| Cisco-Email-Address | 39 | string |
| Cisco-Email-Ack-Flag | 40 | uint32 |
| Cisco-Email-Rcpt-Address | 41 | string |
| Cisco-Email-Rcpt-Ack-Flag | 42 | uint32 |
| Cisco-Fax-Abort-Flag | 43 | uint32 |
| Cisco-Fax-Dsn-Flag | 44 | uint32 |
| Cisco-Fax-Mdn-Flag | 45 | uint32 |
| Cisco-Fax-Auth-Status | 46 | uint32 |
| Cisco-Fax-Dsn-Address | 47 | string |
| Cisco-Email-Server-Address | 48 | string |
| Cisco-Email-Server-Ack-Flag | 49 | uint32 |
| Cisco-Gateway-Id | 50 | string |
| Cisco-Email-Address | 51 | string |
| Cisco-Email-Ack-Flag | 52 | uint32 |
| Cisco-Email-Rcpt-Address | 53 | string |
| Cisco-Email-Rcpt-Ack-Flag | 54 | uint32 |
| Cisco-Fax-Abort-Flag | 55 | uint32 |
| Cisco-Fax-Dsn-Flag | 56 | uint32 |
| Cisco-Fax-Mdn-Flag | 57 | uint32 |
| Cisco-Fax-Auth-Status | 58 | uint32 |
| Cisco-Fax-Dsn-Address | 59 | string |
| Cisco-Email-Server-Address | 60 | string |
| Cisco-Email-Server-Ack-Flag | 61 | uint32 |
| Cisco-Gateway-Id | 62 | string |
| Cisco-Email-Address | 63 | string |
| Cisco-Email-Ack-Flag | 64 | uint32 |
| Cisco-Email-Rcpt-Address | 65 | string |
| Cisco-Email-Rcpt-Ack-Flag | 66 | uint32 |
| Cisco-Fax-Abort-Flag | 67 | uint32 |
| Cisco-Fax-Dsn-Flag | 68 | uint32 |
| Cisco-Fax-Mdn-Flag | 69 | uint32 |
| Cisco-Fax-Auth-Status | 70 | uint32 |
| Cisco-Fax-Dsn-Address | 71 | string |
| Cisco-Email-Server-Address | 72 | string |
| Cisco-Email-Server-Ack-Flag | 73 | uint32 |
| Cisco-Gateway-Id | 74 | string |
| Cisco-Email-Address | 75 | string |
| Cisco-Email-Ack-Flag | 76 | uint32 |
| Cisco-Email-Rcpt-Address | 77 | string |
| Cisco-Email-Rcpt-Ack-Flag | 78 | uint32 |
| Cisco-Fax-Abort-Flag | 79 | uint32 |
| Cisco-Fax-Dsn-Flag | 80 | uint32 |
| Cisco-Fax-Mdn-Flag | 81 | uint32 |
| Cisco-Fax-Auth-Status | 82 | uint32 |
| Cisco-Fax-Dsn-Address | 83 | string |
| Cisco-Email-Server-Address | 84 | string |
| Cisco-Email-Server-Ack-Flag | 85 | uint32 |
| Cisco-Gateway-Id | 86 | string |
| Cisco-Email-Address | 87 | string |
| Cisco-Email-Ack-Flag | 88 | uint32 |
| Cisco-Email-Rcpt-Address | 89 | string |
| Cisco-Email-Rcpt-Ack-Flag | 90 | uint32 |
| Cisco-Fax-Abort-Flag | 91 | uint32 |
| Cisco-Fax-Dsn-Flag | 92 | uint32 |
| Cisco-Fax-Mdn-Flag | 93 | uint32 |
| Cisco-Fax-Auth-Status | 94 | uint32 |
| Cisco-Fax-Dsn-Address | 95 | string |
| Cisco-Email-Server-Address | 96 | string |
| Cisco-Email-Server-Ack-Flag | 97 | uint32 |
| Cisco-Gateway-Id | 98 | string |
| Cisco-Email-Address | 99 | string |
| Cisco-Email-Ack-Flag | 100 | uint32 |
ZTE menggunakan Vendor-Id 3902 untuk mengirim attribute spesifik yang banyak digunakan pada perangkat akses broadband seperti DSLAM, OLT, dan switch. Attribute ini mencakup konfigurasi QoS, rate limit, tunnel, dan DNS untuk klien[citation:10].
| Name | ID | Type |
|---|---|---|
| ZTE-Client-DNS-Pri | 1 | uint32 |
| ZTE-Client-DNS-Sec | 2 | uint32 |
| ZTE-Context-Name | 4 | string |
| ZTE-Tunnel-Max-Sessions | 21 | uint32 |
| ZTE-Tunnel-Max-Tunnels | 22 | uint32 |
| ZTE-Tunnel-Window | 24 | uint32 |
| ZTE-Tunnel-Retransmit | 25 | uint32 |
| ZTE-Tunnel-Cmd-Timeout | 26 | uint32 |
| ZTE-PPPOE-URL | 27 | string |
| ZTE-PPPOE-MOTM | 28 | string |
| ZTE-Tunnel-Algorithm | 31 | uint32 |
| ZTE-Tunnel-Deadtime | 32 | uint32 |
| ZTE-Mcast-Send | 33 | uint32 |
| ZTE-Mcast-Receive | 34 | uint32 |
| ZTE-Mcast-MaxGroups | 35 | uint32 |
| ZTE-Access-Type | 74 | uint32 |
| ZTE-Usage-Type | 81 | uint32 |
| ZTE-Rate-Ctrl-Scr-Down | 83 | uint32 |
| ZTE-Rate-Ctrl-Scr-Up | 89 | uint32 |
| ZTE-Rate-Ctrl-Burst-Down | 84 | uint32 |
| ZTE-Rate-Ctrl-Burst-Up | 91 | uint32 |
| ZTE_Rate-Bust-DPIR | 191 | uint32 |
| ZTE_Rate-Bust-UPIR | 192 | uint32 |
| ZTE-Rate-Ctrl-Burst-Max-Down | 92 | uint32 |
| ZTE-Rate-Ctrl-Burst-Max-Up | 93 | uint32 |
| ZTE-Qos-Profile-Down | 82 | string |
| ZTE-Qos-Profile-Up | 94 | string |
| ZTE-Priority-Level | 90 | uint32 |
| ZTE-Session-Timeout-Type | 85 | uint32 |
| ZTE-Rate-Ctrl-PCR | 86 | uint32 |
| ZTE-TCP-Syn-Rate | 88 | uint32 |
| ZTE-TCP-Limit-Num | 95 | uint32 |
| ZTE-TCP-Limit-Mode | 96 | uint32 |
| ZTE-IGMP-Service-Profile-Num | 97 | uint32 |
| ZTE-PPP-Client-Type(service-type) | 101 | uint32 |
| ZTE-Access-Domain | 151 | string |
| ZTE-VPN-ID | 190 | string |
| ZTE-Rate-Ctrl-PBS-Down | 202 | uint32 |
| ZTE-Rate-Ctrl-PBS-Up | 203 | uint32 |
| ZTE-Rate-Ctrl-SCR-Up-v6 | 228 | uint32 |
| ZTE-Rate-Ctrl-Burst-Up-v6 | 229 | uint32 |
| ZTE-Rate-Ctrl-Burst-Max-Up-v6 | 230 | uint32 |
| ZTE-Rate-Ctrl-PBS-Up-v6 | 231 | uint32 |
| ZTE-QoS-Profile-Up-v6 | 232 | string |
| ZTE-Rate-Ctrl-SCR-Down-v6 | 233 | uint32 |
| ZTE-Rate-Ctrl-Burst-Down-v6 | 234 | uint32 |
| ZTE-Rate-Ctrl-Burst-Max-Down-v6 | 235 | uint32 |
| ZTE-Rate-Ctrl-PBS-Down-v6 | 236 | uint32 |
| ZTE-QoS-Profile-Down-v6 | 237 | string |