radius

17 min

asternos model for radius \yang tree diagram\ module asternos radius + rw radius + rw global \| + rw shared secret? string \| + rw auth type? auth type enumeration \| + rw src ip? inet\ ip address \| + rw nas ip? inet\ ip address \| + rw timeout? uint8 \| + rw retransmit? uint8 + rw servers + rw server \[ipaddress] + rw ipaddress inet\ ip address no zone + rw auth port? inet\ port number + rw shared secret? string + rw auth type? auth type enumeration + rw priority? uint8 + rw timeout? uint16 + rw retransmit? uint8 + rw vrf? string + rw src intf? union \resources\ \resource list\ path access /radius read write /radius/global read write /radius/global/shared secret read write /radius/global/auth type read write /radius/global/src ip read write /radius/global/nas ip read write /radius/global/timeout read write /radius/global/retransmit read write /radius/servers read write /radius/servers/server read write /radius/servers/server/ipaddress read write /radius/servers/server/auth port read write /radius/servers/server/shared secret read write /radius/servers/server/auth type read write /radius/servers/server/priority read write /radius/servers/server/timeout read write /radius/servers/server/retransmit read write /radius/servers/server/vrf read write /radius/servers/server/src intf read write \detailed nodes\ \/radius\ path /radius node type container description radius configuration access read write \/radius/global\ path /radius/global node type container description global radius configuration access read write \/radius/global/shared secret\ path /radius/global/shared secret node type leaf description radius global shared secret (valid chars are ascii printable except space, "#", and ",") access read write data type \<yang type string> constraints string with length 1 to 65 \/radius/global/auth type\ path /radius/global/auth type node type leaf description radius global method used for authenticating the comm mesg access read write data type \<yang type auth type enumeration> constraints enumeration with options pap chap \/radius/global/src ip\ path /radius/global/src ip node type leaf description source ip address (ipv4 or ipv6) for the outgoing radius pkts access read write data type \<yang type ip address> constraints multiple constraints the ipv6 address type represents an ipv6 address in full, mixed, shortened, and shortened mixed notation the ipv6 address may include a zone index, separated by a % sign if a system uses zone names that are not represented in utf 8, then an implementation needs to use some mechanism to transform the local name into utf 8 the definition of such a mechanism is outside the scope of this document the zone index is used to disambiguate identical address values for link local addresses, the zone index will typically be the interface index number or the name of an interface if the zone index is not present, the default zone of the device will be used the canonical format of ipv6 addresses uses the textual representation defined in section 4 of rfc 5952 the canonical format for the zone index is the numerical format as described in section 11 2 of rfc 4007 the ipv4 address type represents an ipv4 address in dotted quad notation the ipv4 address may include a zone index, separated by a % sign if a system uses zone names that are not represented in utf 8, then an implementation needs to use some mechanism to transform the local name into utf 8 the definition of such a mechanism is outside the scope of this document the zone index is used to disambiguate identical address values for link local addresses, the zone index will typically be the interface index number or the name of an interface if the zone index is not present, the default zone of the device will be used the canonical format for the zone index is the numerical format \/radius/global/nas ip\ path /radius/global/nas ip node type leaf description nas ip|ipv6 address attribute for the outgoing radius pkts access read write data type \<yang type ip address> constraints multiple constraints the ipv6 address type represents an ipv6 address in full, mixed, shortened, and shortened mixed notation the ipv6 address may include a zone index, separated by a % sign if a system uses zone names that are not represented in utf 8, then an implementation needs to use some mechanism to transform the local name into utf 8 the definition of such a mechanism is outside the scope of this document the zone index is used to disambiguate identical address values for link local addresses, the zone index will typically be the interface index number or the name of an interface if the zone index is not present, the default zone of the device will be used the canonical format of ipv6 addresses uses the textual representation defined in section 4 of rfc 5952 the canonical format for the zone index is the numerical format as described in section 11 2 of rfc 4007 the ipv4 address type represents an ipv4 address in dotted quad notation the ipv4 address may include a zone index, separated by a % sign if a system uses zone names that are not represented in utf 8, then an implementation needs to use some mechanism to transform the local name into utf 8 the definition of such a mechanism is outside the scope of this document the zone index is used to disambiguate identical address values for link local addresses, the zone index will typically be the interface index number or the name of an interface if the zone index is not present, the default zone of the device will be used the canonical format for the zone index is the numerical format \/radius/global/timeout\ path /radius/global/timeout node type leaf description radius timeout in seconds access read write data type \<yang type uint8> constraints valid range 1 to 60 \/radius/global/retransmit\ path /radius/global/retransmit node type leaf access read write data type \<yang type uint8> constraints valid range 0 to 10 \/radius/servers\ path /radius/servers node type container access read write \/radius/servers/server\ path /radius/servers/server node type list access read write \/radius/servers/server/ipaddress\ path /radius/servers/server/ipaddress node type leaf description radius server's domain name or ip address (ipv4 or ipv6) access read write data type \<yang type ip address no zone> constraints multiple constraints an ipv6 address without a zone index this type, derived from the type ipv6 address, may be used in situations where the zone is known from the context and no zone index is needed an ipv4 address without a zone index this type, derived from the type ipv4 address, may be used in situations where the zone is known from the context and no zone index is needed \/radius/servers/server/auth port\ path /radius/servers/server/auth port node type leaf description radius authentication port number access read write data type \<yang type port number> constraints valid range 0 to 65535 \/radius/servers/server/shared secret\ path /radius/servers/server/shared secret node type leaf description radius servers shared secret (valid chars are ascii printable except space, "#", and ",") access read write data type \<yang type string> constraints string with length 1 to 65 \/radius/servers/server/auth type\ path /radius/servers/server/auth type node type leaf description radius server's method used for authenticating the comm mesg access read write data type \<yang type auth type enumeration> constraints enumeration with options pap chap \/radius/servers/server/priority\ path /radius/servers/server/priority node type leaf description radius server's priority access read write data type \<yang type uint8> constraints valid range 1 to 64 \/radius/servers/server/timeout\ path /radius/servers/server/timeout node type leaf access read write data type \<yang type uint16> constraints valid range 1 to 60 \/radius/servers/server/retransmit\ path /radius/servers/server/retransmit node type leaf access read write data type \<yang type uint8> constraints valid range 0 to 10 \/radius/servers/server/vrf\ path /radius/servers/server/vrf node type leaf description vrf name access read write data type \<yang type string> \/radius/servers/server/src intf\ path /radius/servers/server/src intf node type leaf access read write data type \<yang type union>