Avaya Configuring RADIUS Manual de usuario Pagina 25

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 116
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 24
RADIUS Overview
308640-15.1 Rev 00
1-9
Configuring Vendor-Specific Attributes (VSAs) for Authentication
To authenticate a remote caller, the RADIUS client must identify the router
placing the call. Identify the remote caller by configuring the callers Challenge
Handshake Authentication Protocol (CHAP) or Password Authentication Protocol
(PAP) name and secret, so that it maps the local circuits to the name of the remote
caller.
In slots not configured with RADIUS, identify the remote caller by
configuring the routers caller resolution table. (For information about caller
resolution tables, see Configuring Dial Services.)
In slots configured with RADIUS and dial circuits, configure the
vendor-specific attributes (VSAs) on the RADIUS server. The required VSA
is Bay-Local-IP-Address, which specifies the IP address of the local port.
This VSA must match the IP address of the interface receiving the call.
When a call comes in that needs authentication, the RADIUS client first checks
the routers caller resolution table for an entry that identifies the caller.
If the caller is authorized, the local router maps the caller to a local circuit,
and then activates that circuit.
If that fails, and RADIUS is configured, the client sends the RADIUS server a
request for authentication.
Using RADIUS with Demand Circuit Groups (Site Manager only)
When configuring a RADIUS client using Site Manager, Site Manager
automatically configures a demand circuit group. You will need, however, to
configure a protocol for the demand circuit group. See
Select a Protocol for
RADIUS Authentication on page 2-7.
To identify the remote user to the RADIUS server, the remote user uses the PPP
CHAP or PAP. The client includes the remote users CHAP name and secret or
PAP ID and password in the access challenge to the server. You cannot use VSAs
with demand circuit groups.
Note:
Do not configure a caller resolution table if you plan to use
vendor-specific attributes.
Vista de pagina 24
1 2 ... 20 21 22 23 24 25 26 27 28 29 30 ... 115 116

Comentarios a estos manuales

Sin comentarios