
Configuring and Troubleshooting Bay Dial VPN Services
3-6 303509-A Rev 00
How the TMS Database Works
The TMS database (by default, UNIX ndbm) resides on the tunnel management
server, which resides on the service provider’s network. The main function of this
database is to verify the user name (or domain) information supplied by the NAS.
It also supplies the NAS with the tunnel addressing information (in the Grant
message) that it needs to create a tunnel for a remote user. The Dial VPN
administrator enters the domain information and the tunnel addressing
information into the database as part of the TMS configuration process.
When the TMS receives a lookup request from the NAS, it parses the user name
into the user and domain name and DNIS, and creates a Domain/0 or
Domain/DNIS key. The TMS database uses this key to find a match in the
database with the supplied user name. If the key matches an existing entry, the
TMS checks to make sure that the maximum number of users is less than the
configured maximum. If so, the TMS sends a Grant message indicating that this is
a Dial VPN user. The Grant message contains the tunnel addressing information.
Since ndbm does not have a locking feature, Bay Networks has implemented
application-level locking to prevent users from updating the database while others
are using it. The lock files are created in the UNIX install directory.
Dynamically Allocating IP Addresses
Dial VPN lets you choose between two methods of dynamic IP address allocation:
• Dynamic Host Configuration Protocol (DHCP) requires its own server and
allocates IP addresses for a configurable, renewable period, called a lease.
• IP address pooling uses the Dial VPN RADIUS server and allocates an IP
address from a configured pool for the duration of the user’s dial-in session.
The following sections describe each of these methods.
Note:
The erpcd and tms_dbm utilities use a common library of functions (in
tms_lib.c) to access the database. If you replace the database and provide
access to it through the same library function interface, as required, the same
commands will work. You can replace the default database engine with a
standard UNIX relational database, such as Sybase, Informix, or Oracle, or
with one you have created yourself. For information about how to replace the
default TMS database, contact the Bay Networks Technical Solutions Center.
Comentarios a estos manuales