HP VCX Software manual Configuration of a Radius server, Value

Chapter 6. Basic Configuration

Configuration of a RADIUS server

In this section it is assumed that you know how to configure your RADIUS server. Consult your RADIUS manual for details.

Add the Telecommuting Module as a client in the RADIUS server. Make sure that the shared secret here is the same as in the Telecommuting Module.

The Telecommuting Module checks the permissions for a user by looking at its RADIUS attribute Service-Type.

If the Service-Type has the value Administrative (6), the user is allowed to configure the Telecommuting Module.

If the value is Framed (2), the user is allowed to connect via VPN.

For the various privileges for users, there is an 3Com-specific RADIUS attribute defined thus:

VENDOR 3Com 43

ATTRIBUTE 3Com-Admin-Account 1 integer 3Com

#

#Type of administrator account.

VALUE 3Com-Admin-Account Full-Access-Admin 1 VALUE 3Com-Admin-Account Backup-Admin 2 VALUE 3Com-Admin-Account Read-Only-Admin 3 VALUE 3Com-Admin-Account VPN-Admin 4 VALUE 3Com-Admin-Account SIP-Admin 5

VALUE 3Com-Admin-Account VPN-Reneg-Admin 6

To be able to authenticate SIP users, the RADIUS server must support Digest authentication. You find a description of this in draft-sterman-aaa-sip-02 (Internet draft). This is all that is required for it to work with 3Com VCX IP Telecommuting Module.

More information about RADIUS can be found in RFC 2865.

SNMP

SNMP is a network monitoring protocol, which enables a single server to monitor one or more networks, including all network equipment like routers and firewalls. 3Com VCX IP Telecommuting Module supports SNMP and can accordingly be monitored automatically.

The monitoring signaling consists of two main parts. The SNMP server sends requests to the Telecommuting Module, which replies with a list of network parameters and their values for the Telecommuting Module. The Telecommuting Module can also send messages (traps) without the server prompting, when someone sends a request without valid authentication and when the Telecommuting Module boots. You can also configure the Telecommuting Module to send traps when certain threshold values are reached.

86