Avaya Bay Dial VPN Networks Manual de usuario descargar pdf (Pagina 54)

Configuring and Troubleshooting Bay Dial VPN Services

3-6

308606-14.00 Rev 00

Tunnel Management in an All-RADIUS Network

The all-RADIUS solution integrates the TMS database functions into the

RADIUS server that resides on the service provider network. This RADIUS

server recognizes the format of the VPN identifier in the user name and returns

tunnel information to the NAS. The NAS uses the tunnel information to establish

a connection to the gateway. Once the connection is made, the user authentication

information is forwarded to the indicated authentication server.

Refer to Chapter 5

for more information about the contents of the TMS database.

How the TMS Database Works

The TMS database (by default, UNIX ndbm) resides on the tunnel management

server, which resides on the service provider’s network. The main function of this

database is to verify the user name (or domain) information supplied by the NAS.

It also supplies the NAS with the tunnel addressing information (in the Grant

message) that it needs to create a tunnel for a remote user. The Dial VPN

administrator enters the domain information and the tunnel addressing

information into the database as part of the TMS configuration process.

When the TMS receives a lookup request from the NAS, it parses the user name

into the user and domain name and DNIS, and creates a Domain/0 or

Domain/DNIS key. The TMS database uses this key to find a match in the

database with the supplied user name. If the key matches an existing entry, the

TMS checks to make sure that the maximum number of users is less than the

configured maximum. If so, the TMS sends a Grant message indicating that this is

a Dial VPN user. The Grant message contains the tunnel addressing information.

1 2 ... 49 50 51 52 53 54 55 56 57 58 59 ... 205 206

Sin comentarios

Avaya Bay Dial VPN Networks Manual de usuario Pagina 54