topic Re: VSA for Avaya / Extreme ERS switches doing SPBM in ExtremeSwitching (VSP/Fabric Engine)

VSA for Avaya / Extreme ERS switches doing SPBM

jprins — Wed, 16 Oct 2019 02:43:48 GMT

In the documentations for Avaya Fabric Connect Avaya has documented what VSA's to use to configure a I-SID / VLAN mapping for a client authenticated using 802.1x, but they haven't added the VSA information dictionary data. Does anyone have this information?

I'm looking for the dictionary information for the following VSA's:

• Avaya-Fabric-Attach-VLAN-ISID
• Avaya-Auto-VLAN-Create
• Avaya-Fabric-Attach-VLAN-PVID
• Avaya-Fabric-Attach-Mode
• Avaya-Fabric-Attach-Client-Type
• Avaya-Fabric-Attach-Client-Id

Thank you very much.

Jan Hugo Prins

Re: VSA for Avaya / Extreme ERS switches doing SPBM

akrohn — Thu, 24 Oct 2019 17:50:22 GMT

Hello Jan,

you find this information in the Shortest Path Bridging (802.1aq) Technical Configuration Guide.

Like this:

Outbound Attributes from IDE to FA Switch
Fabric-Attach-VLAN-Create	This attribute behaves as Boolean 0 or not send = Switch will NOT create assigned VLAN if VLAN does not exist 1 = Switch will create assigned VLAN if the VLAN does not exit
Fabric-Attach-VLAN-ISID	– VLAN and ISID IDs are separated by “:” – Example: 20:20000 means VLAN=20 and ISID 20000 – VLAN = 1 to 4095 OR VLAN Name – ISID >0 and < max ISID
Fabric-Attach-VLAN-PVID	– PVID VLAN ID – VLAN = 1 to 4095

Inbound Attributes from FA Switch to IDE
Fabric-Attach-Switch-Mode	0 or not send = Switch is assumed to have not concept of SPB/Fabric Attach (i.e. switch is in neither mode – not 1, 2, 3, 4, nor 5) 1 = Switch is FA Server with SPB Disabled and FA Enabled (Network Type 2) 2 = Switch is FA Server with SPB Enabled (Network Type 1a & 1b) 3 = Switch is FA Proxy connected to FA Server with SPB Disabled and FA Enabled (Network Type 2) 4 = Switch is FA Proxy connected to FA Server with SPB Enabled (Network Type 1a) 5 = Switch is FA Proxy Standalone (Network Type 3)
Fabric-Attach-Client-Id	MAC address of the FA Client taken from LLDP via FA Module: FA Element TLV > FA Element ID > System MAC Address
Fabric-Attach-Client-Type	FA Client Type taken from LLDP via FA Module: FA Element TLV > FA Element Type 1 = FA Element Type Other 2 = FA Server 3 = FA Proxy 4 = FA Server No Authentication 5 = FA Proxy No Authentication 6 = FA Client – Wireless AP Type 1 [clients direct network attachment] (e.g. AP 9100) 7 – FA Client – Wireless AP Type 2 [clients tunneled to controller]

Regards

Andreas

Re: VSA for Avaya / Extreme ERS switches doing SPBM

jprins_at_bette — Thu, 24 Oct 2019 18:33:04 GMT

This indeed the content in the documentation and this is exactly what I was NOT looking for. What I was looking for was the dictionary information. The numerical values that go with the text representation. Without this information the sentences in the documentation have no meaning at all. I have found this information and put it in the dictionary.nortel in the freeradius project.

ATTRIBUTE Fabric-Attach-VLAN-Create 170 integer
ATTRIBUTE Fabric-Attach-VLAN-ISID 171 string
ATTRIBUTE Fabric-Attach-VLAN-PVID 172 integer

ATTRIBUTE Fabric-Attach-Switch-Mode 180 integer
ATTRIBUTE Fabric-Attach-Client-Id 181 string
ATTRIBUTE Fabric-Attach-Client-Type 182 string
ATTRIBUTE Fabric-Attach-Client-PSK 183 integer
ATTRIBUTE Fabric-Attach-Client-Trust 184 integer
ATTRIBUTE Fabric-Attach-Client-Trusted-Binding 185 string
ATTRIBUTE Fabric-Attach-Service-Request 186 string
VALUE Fabric-Attach-VLAN-Create No 0
VALUE Fabric-Attach-VLAN-Create Yes 1

Re: VSA for Avaya / Extreme ERS switches doing SPBM

akrohn — Thu, 24 Oct 2019 20:45:56 GMT

you mean something like this ?

Re: VSA for Avaya / Extreme ERS switches doing SPBM

akrohn — Thu, 24 Oct 2019 21:00:47 GMT

Re: VSA for Avaya / Extreme ERS switches doing SPBM

jprins_at_bette — Thu, 24 Oct 2019 21:11:06 GMT

That blue table was the one I was looking for, and in my case I needed it for the ERS5900 series. The complete set is now available in the dictionary.nortel in FreeRadius.

Re: VSA for Avaya / Extreme ERS switches doing SPBM

akrohn — Thu, 24 Oct 2019 21:59:03 GMT

Now i have it.

# -*- text -*-
# Copyright (C) 2015 The FreeRADIUS Server project and contributors
##############################################################################
#
#   Nortel Passport 8600 VSA's.
#
#   http://www142.nortelnetworks.com/bvdoc/setips/july04/engineeringtipstricksv12.pdf
#
#   $Id: 2eca7cd9b7bb44fef3b4c563307edc2f2bf26928 $
#
##############################################################################

VENDOR Nortel 562
BEGIN-VENDOR Nortel

ATTRIBUTE Nortel-User-Role 110 string

ATTRIBUTE Nortel-Privilege-Level 166 integer

ATTRIBUTE   FA-VLAN-Create               170   integer
ATTRIBUTE   FA-VLAN-ISID               171   string
ATTRIBUTE   FA-VLAN-PVID               172   integer
ATTRIBUTE   FA-Switch-Mode               180   integer
ATTRIBUTE   FA-Client-Id               181   string
ATTRIBUTE   FA-Client-Type               182   string
ATTRIBUTE   FA-Client-PSK               183   integer
ATTRIBUTE   FA-Client-Trust               184   integer
ATTRIBUTE   FA-Client-Trusted-Binding       185   string
ATTRIBUTE   FA-Service-Request           186   string

ATTRIBUTE   Passport-Command-Scope           200   integer
ATTRIBUTE   Passport-Command-Impact           201   integer
ATTRIBUTE   Passport-Customer-Identifier       202   integer
ATTRIBUTE   Passport-Allowed-Access           203   integer
ATTRIBUTE   Passport-AllowedOut-Access       204   integer
ATTRIBUTE   Passport-Login-Directory       205   string
ATTRIBUTE   Passport-Timeout-Protocol       206   integer
ATTRIBUTE   Passport-Role               207   string

VALUE FA-VLAN-Create FA-VLAN-Create-Disabled 0
VALUE FA-VLAN-Create FA-VLAN-Create-Enabled 1

VALUE   FA-Client-Trust       FA-Switch-Trust-None       0
VALUE   FA-Client-Trust       FA-Switch-Trust-All       1
VALUE   FA-Client-Trust       FA-Switch-Trust-Restricted   2

VALUE   Nortel-Privilege-Level       VoiceMailAdmin       0
VALUE   Nortel-Privilege-Level       ContactCenter       1
VALUE   Nortel-Privilege-Level       SBAInstaller       2
VALUE   Nortel-Privilege-Level       SBASystemCoord       3
VALUE   Nortel-Privilege-Level       SBASystemCoordBasic   4
VALUE   Nortel-Privilege-Level       SBABasic       5
VALUE   Nortel-Privilege-Level       Security       6
VALUE   Nortel-Privilege-Level       CTEApp           7
VALUE   Nortel-Privilege-Level       SBA-IPSetRegistration   8
VALUE   Nortel-Privilege-Level       Application-BCMMonitor   9
VALUE   Nortel-Privilege-Level       CDRApp           10
VALUE   Nortel-Privilege-Level       ModemLogin       11
VALUE   Nortel-Privilege-Level       GuestLogin       12
VALUE   Nortel-Privilege-Level       AdminDownload       13
VALUE   Nortel-Privilege-Level       ExclusiveAccess       14
VALUE   Nortel-Privilege-Level       Admin           15
VALUE   Nortel-Privilege-Level       DataAdmin       16
VALUE   Nortel-Privilege-Level       RemoteAccess       17
VALUE   Nortel-Privilege-Level       Guest           18
VALUE   Nortel-Privilege-Level       VoiceAdmin       19
VALUE   Nortel-Privilege-Level       BackupOperator       20
VALUE   Nortel-Privilege-Level       RemoteMonitoring   21
VALUE   Nortel-Privilege-Level       SoftwareUpgrade       22
VALUE   Nortel-Privilege-Level       AlarmViewer       24
VALUE   Nortel-Privilege-Level       OperationalLogs       26
VALUE   Nortel-Privilege-Level       DiagnosticLogs       27
VALUE   Nortel-Privilege-Level       ApplicationIVR       28
VALUE   Nortel-Privilege-Level       ISDN-Dial-in       30
VALUE   Nortel-Privilege-Level       WAN-Dial-in       32
VALUE   Nortel-Privilege-Level       System-SerialPort   36

END-VENDOR Nortel

Re: VSA for Avaya / Extreme ERS switches doing SPBM

akrohn — Thu, 24 Oct 2019 22:07:37 GMT

I can’t upload the Excel File.