Proxim ORiNOCO User's Guide download pdf (Page 40)

Access Point Features AP-800 User Guide

Configuring the Device

RADIUS Accounting

Using an external RADIUS server, the AP can track and record the length of client sessions on the access point by

sending the RADIUS accounting messages per RFC2866. When a wireless client is successfully authenticated, RADIUS

accounting is initiated by sending an “Accounting Start” request to the RADIUS server. When the wireless client session

ends, an “Accounting Stop” request is sent to the RADIUS server.

NOTE: Each VLAN can be configured to use a separate RADIUS accounting server (and backup accounting server).

Session Length

Accounting sessions continue when a client reauthenticates to the same AP. Sessions are terminated when:

1. A client disassociates

2. Session-Timeout attributes are configured in the Radius server.

If the client roams from one AP to another, one session is terminated and a new session begins.

NOTE: This feature requires RADIUS authentication using 802.1x. If the clients are using Local MAC Authentication or

RADIUS MAC Authentication, then the session length is not tracked.

Authentication Attributes

• User-Name

This Attribute indicates the name of the user that needs to be authenticated. It must be sent in Access-Request packets if

available.

• User-Password

This Attribute indicates the password of the user to be authenticated, or the user's input following an Access-Challenge.

It is only used in Access-Request packets.

• NAS-IP-Address

This Attribute indicates the identifying IP Address of the NAS which is requesting authentication of the user, and should

be unique to the NAS within the scope of the RADIUS server. NAS-IP-Address is only used in Access-Request packets.

•State

This Attribute is available to be sent by the server to the client in an Access-Challenge and must be sent unmodified from

the client to the server in the new Access-Request reply to that challenge, if any.

• Class

This Attribute is available to be sent by the server to the client in an Access-Accept and should be sent unmodified by the

client to the accounting server as part of the Accounting-Request packet if accounting is supported.

• Session-Timeout

This Attribute sets the maximum number of seconds of service to be provided to the user before termination of the

session or prompt. This Attribute is available to be sent by the server to the client in an Access-Accept or

Access-Challenge.

• Termination-Action

This Attribute indicates what action the NAS should take when the specified service is completed. It is only used in

Access-Accept packets.

• Called-Station-Id

This Attribute allows the NAS to send in the Access-Request packet the phone number that the user called, using Dialed

Number Identification (DNIS) or similar technology. It isonly used in Access- Request packets.

• Calling-Station-Id

1 2 ... 35 36 37 38 39 40 41 42 43 44 45 ... 144 145

No comments

Proxim ORiNOCO User's Guide Page 40