Radius Configuration, Server Settings | Kentrox AI296 guide

AI296 Version 9.8x User’s Guide

System Configuration: RADIUS Configuration

RADIUS Configuration

RADIUS authentication verifies user login information against valid user information in a database on a centralized RADIUS authentication server. A primary and secondary RADIUS server are configurable to provide secure access for an entire AI296 network. AI296 RADIUS authentication is available for Telnet, asynchronous, and synchronous ports. The following menu items can be configured for RADIUS:

zServer Settings

zShell/FTP Options

Server Settings

Description

The RADIUS server settings are configured using four menu items for the primary and secondary server. The configurable values are:

zPrimary/secondary server status—Enables or disables the primary or secondary server.

zPrimary/secondary server IP address—Defines an IP address for the primary or secondary server.

zPrimary/secondary server port—Defines the port number for the primary or secondary server.

zPrimary/secondary server secret—Defines a password for the primary or secondary server.

Menu Item Types

Toggle for primary/secondary server status

Data for primary/secondary server IP address, server port, and server secret

Configuration in the AI198 Menu System

Note: RADIUS and TACACS+ cannot both be configured at the same time. Attempting to do this generates an error.

To configure the RADIUS server settings:

1.Access Menu 4.2.11-2.2.

2.For 01*Primary Server Status, enter 1 to select ENABLED or DISABLED. The default is

DISABLED.

3.For 02 Primary Server IP Address, enter 2, and the desired IP address. The default

is 0.0.0.0.

4-14

Image 64

Kentrox AI296 manual Radius Configuration, Server Settings

Contents

AI296TM Page About this Document Document Conventions Convention MeaningLabels Tip Iii Electrostatic Discharge Caution Ground Caution Proper Cooling Caution FCC Warning Customer Assistance Web Site SupportEmail Support Phone Support Table of Contents AI296 Local Menu System Exiting the Menu System IP Over X.25 Subnet Configuration AI296 Link Types Asynchronous Asynchronous PPP HDLC-Bridge TOC-4 Diagnostics for TID Multiplexing TID Multiplexing AI296 Commands Appendix a AI296 System Codes Appendix B Standalone Mode and Switch Mode AI296 Commands AI296 Menu Aliases FTP Sessions Product Description Features Performance Monitoring, Maintenance, Troubleshooting Remote and Local ConfigurationStandalone Configuration Link-to-Link Call Routing System Diagnostics TID Multiplexing AI296 Hardware Components Links 5-8 Connector Links 13-16 ConnectorLinks 1-4 Connector Links 9-12 Connector Technical Specifications Component Description Individual Port Access Description SpecificationCAB257 Cable DP196 Distribution Panel DB-25 Connectors Pin Signal Direction RJ45 10BaseT Connectors Displays the RJ45 10BaseT connector Pin Typical Applications Asynchronous to TCP/IP Application IP Over X.25 Networks Illustrates a common IP over X.25 application AI296 Version 9.8x User’s Guide Mixed Asynchronous and X.25 Networks Mixed Asynchronous and X.25 Network AI296 Version 9.8x User’s Guide To TCP/IP Application X.25 to TCP/IP Application Trunking Illustrates a common X.25 trunking application AI296 Version 9.8x User’s Guide Using the AI198TM Menu System Accessing the Menu System Navigating the Menu System Menu Numbering StructureTypes of Menu Items Following four types of menu items are available Submenus TogglesData Menu re-appears with the entered IP address Menu Item Descriptions FunctionsMenu Item Description Exiting the Menu System AI296 Local Menu System Multilevel User Name and Password Security Radius AuthenticationTACACS+ Authentication PPP Authentication Protocols PAP and Chap Using a Telnet Connection for Login Logging Into AI296 Using an Asynchronous Port for Login Consecutive failed login attempts Number of consecutive failed login attempts Accessing the Local Menu System Navigating the Local Menu System Identifying Types of Menu ItemsData Entry Items Direction Keys Toggle Items Accessing the Help Menu Send Exiting the Local Menu System Save the changes System Configuration General System Properties Configuration Destination Menu Break SequenceDescription Format Configuration in the AI198 Menu System Menu Item Type Configuration in the AI296 Local Menu System Ethernet Port SettingsToggle for both menu items FTP Port This menu item sets the FTP server port number IP Settings This example displays 16 FTP port number set to Menu Item Types Passive Link Settings Access Menu Default is No Access the System MenuMinimum value is 25 seconds and the default is 60 seconds System Prompt This item sets the system prompt value in the CLI Toggle TCP SettingsTo on Telnet Port This item sets the Telnet port value for AI296 This example displays Telnet Port set to Radius Configuration Server Settings Enabled FALLBACK. The default is Disabled To configure the shell/FTP Radius option Access MenuShell/FTP Options Enabled TACACS+ Configuration Shell/FTP Options 00049 Authentication Traps Snmp ConfigurationAI296 Local Menu Item Configuration Community Names Data for all menu items Following example displays WriteComm Menu Contact Persons Node Information Snmp Manager 10.65.32.4 Static Route Configuration IP Address Settings Inactivity Timeout TID to Modem Mux ConfigurationFollowing are available This example displays Inactivity Timeout set to Initialization String This example displays Init String set to conn23 Port Bit SettingsToggle for all menu items TID to Route AI296 Local Menu Item Configuration Time Configuration Daylight Savings Time Sntp Settings Settings Access the Time Menu located under the System Menu Time Zone IP Over X.25 Subnet Configuration Configuration Overview Before Configuration Local Settings Local IP Address for this Subnet Local IP Subnet Mask This menu item configures the local IXE doorway link number Local X.25 Link Number Remote Settings Remote IP Address for this Subnet Remote X.121 Address 93.67.158.56 Link Configuration AI296 has six configurable link types AI296 Link TypesAsynchronous Asynchronous PPP HDLC-Bridge Synchronous PPP See Also BX.25 Configuration Values Usage BX.25 ConfigurationDefault is Enabled BX.25 Modulo BX.25 Support BX.25 Timer Settings This example displays BX.25 Support set to Enabled 00033 Connect Options Configuration Access Menu For 02 Alias, enter 2, and the alias nameAlias Link Type Availability Call Retry Interval This example displays 02 Alias set to async.4.1 Connect String This example displays 03 Call retry interval set to When Connection Settings Connection settings are configured using three menu itemsDefault is OFF Is on 00030 Link Application Destination AppAlias Disconnect Inactivity Timer Settings Disconnect Options ConfigurationDisconnect inactivity timer when the link receives a call Off. The default is On This example displays Select on or OFF. The default is on This example displaysIs Off Disconnect settings are configured using two menu items Disconnect SettingsDefault is on Disconnect String Disconnect Auto Disable Error Limit General Link Properties ConfigurationAsync, AsyncPPP, HDLC-Bridge, MLT, SyncPPP, Flow Control Async and AsyncPPP Hardware Interface Interface Type Access the Link MenuThis example displays SW Flow Control set to XonXoff This example displays Interface Type set to Access menu 4.2.11.12.8 for MLT or menu 4.2.11.12.7 for Interface ModeMLT Link Description This menu item defines a description for a link Link Mode This example displays Link Description set to New X.25 Link This example displays 05*Link mode set to Passive Link Number Link State This menu item enables or disables a linkThis example displays 01 Link number set to Link Type This example displays Link state set to Down Default is Disabled Passive Link with Clocking Port Data Bits This menu item defines the number of databits in a data byte Port Parity This example displays Port data bits set to Seven Port Speed This example displays Port parity set to OddThis menu item defines the baud rate for a port Data in the AI296 local menu system Menu 4.2.11.12.5 appears Hdlc Port Stop Bits Sync Port Encoding This menu item sets the binary encoding on a port Xon Repeat Interval Aysnc and AsyncPPP This example displays 10 Xon Repeat interval set to General PPP Properties Configuration Ipcp Address SettingsFollowing menu items are available for PPP configuration AsyncPPP and SyncPPP Ipcp Address Parameters Maximum Unit Settings Set to Network Control Protocol For an Ipcp network control protocol Ipcp Lapb Parameters Configuration Frame Settings For Frame Window Size, enter the window size. The default is Size set to Lapb Timer Settings N2 Retry Counter 150 Modem Option Configuration Modem String Dialing Time-out Interval Number of Dial Attempts This example displays Dialing time-outset to Modem Setup Menu This example displays Number of dial attempts set to PPP Authentication Configuration Local Authentication Settings PAP RAS Option Radius Remote Authentication Settings Chap Quick X.25 Configuration Active Number of PVCs This example displays Number of PVCs set to Packet SettingsToggle for max packet size Data for packet window size 128 256 512 Normal Passive Extended SVC Settings Local Address This example displays SVC Low set to 250 and SVC High set to This example displays X121 Local Address set to DTR State Configuration RTS/DTR Lead Control ConfigurationAsync and AsyncPPP and SyncPPP RTS State Configuration Flow Control DTR connect state Off DTR disconnect state Parameters Configuration Maximum Packet Size Packet Window Size This example displays Max Packet Size set to Protocol Version This example displays Packet Window Size set to Counter Settings Default is This example displays Facilities Negotiation Timer Settings 12,90000 Parameters Menu 43729 Virtual Circuit Configuration PVC Configuration Settings PVCs are configured using four menu items Menu PVC Type LCN Range CallTmr ResetTmr PVC Type Timer Type Range Default Passive Reset Timer This example displays For Timer Value, select the timer interval value SVC Configuration Settings Menu Item Type 0005 TID Multiplexing Overview AI296 Version 9.8x User’s Guide Configuring the Parent Alias TID Multiplexing ConfigurationMenu appears Values are 1 to Destination Configuring the Children Aliases TidforAI296 Defines the terminal identifier for AI296 During the parent alias configuration TIDtid Example Configurations For Alias name, enter YES Alias Edit Menu Alias Name 172.16.1.23#1000 TL1DM.1 Alias Edit Menu Alias Name TID Multiplexing Troubleshooting ParametersNormal Response Format Response Item Description Error Response Format Normal Response Example Error Response Example Diagnostics for TID MultiplexingErrcde AI296 Version 9.8x User’s Guide Alias and Call Routing Configuration Downstream Incoming OutgoingCall AI296 Card B IP address Tocardb X25.2.67891 Configuring an Alias in the AI198 Menu System Call Routing AI296 Version 9.8x User’s Guide Configuring an Alias in the AI296 Menu System Alias Edit Menu Arranging Aliases in the Alias Table Configuring an Alias with X.25 Keep-Alive Notifies the 296 that this is the X-25 keep-alive feature Where Source/Destination Protocol Tables Asynchronous Source Without Breaks AI198 Source Destination Menu Item InformationAsync 25 SVC Following options are available Asynchronous Source With Breaks AI198 Async With Following options are available TL1 BreakPacketized On a CR X.25 SVC Source Without Breaks AI198 Option X.25 SVC Source With Breaks AI198 CalledPacketizing With async Break Address Async Call data Time X.25 PVC Source Without Breaks AI198 25 PVC 25 SVC Alias nameCalled Following options are available Address 25 PVC Alias name 25 PVC Async with Alias name 25 PVC Async break Called25 PVC TL1 PAD TL1 TCP/IP Source Without Telnet Breaks AI198 Async Alias name TCP/IP Source With Telnet Breaks AI198With Called Following options are available Break Address With Called Async break Called Async with Alias nameAsynchronous Source Without Breaks AI296 Async 25 SVC Alias name Async 25 PVC Alias name 10 Asynchronous Source With Breaks AI296 Protocol Async 25 PVC Alias nameAsync With Called TL1 Break Async Address Packetized Call data 11 X.25 SVC Source Without Breaks AI296 12 X.25 SVC Source With Breaks AI296 Break Address Caller’s 13 X.25 PVC Source Without Breaks AI296 14 X.25 PVC Source With Breaks AI296 15 TCP/IP Source Without Telnet Breaks AI296 16 TCP/IP Source With Telnet Breaks AI296 Async with Alias name Protocol Processing Modules Module Types Aepx Enables Macstar compatibility Prevents the PAD protocol from passing breaks upstreamPrevents the PAD protocol from passing breaks downstream Causes the PAD protocol to reply to X.25 breaks An X.25 when X.3 parameter 3 is set to Provides packetizing and sets the packetizing timer toTo zero, the option is turned off Specify up to 16 characters Carriage return and semi-colon Feed and deleteProvides packetizing but prevents breaks from being Propagated upstream To zero, this option is turned off Provides TL1 packetizing and sets the packetizing timer to SecondsFeed and delete Provides TL1 packetizing and prevents breaks from passing Module Properties Module Arguments Entry Description Start Symbols Alias MacrosAlias Macro Components Comments Wildcard Symbols ConstantsVariables Variable Value Operators Operator Description 20 Alias Macro Functions Alias Macro Function Description of OperationReturns the Ascii integer value of the first Character in a string Match any of the expressions, then default is 20 Alias Macro FunctionsReturns characters from string starting with Xth character and continuing to the right-most end Alias Macro Configuration Configuration Examples =LA,PA,’#’,1-1=MYIP1 SVC to SVC Connection Alias Configuration ExamplesExamples are given for the following connections TL1 SVC to PVC Connection Diagram SVC to PVC Connection PVC PVC to SVC Connection Called address 16.X25.2.3 MLT Route MLT Call Routing Example MLT6 Link-to-Link Routing Example Menu F1 Help F2 Send F4 Close Ctrl-R Return to Main Menu AI296 Commands Commands Overview Shell CommandsShell Connections Establishing a Local Shell Connection Establishing a Remote Shell Connection Winslc Commands Displaying winslc Command LoggingUsing winslc Commands Log/Alarm Message Header Header Element Description Command Type AaaFormats Shell All-Enables or disables TACACS+ authentication on all Async-Enables or disables TACACS+ authentication onDisable-Disables TACACS+ authentication Enable-Enables TACACS+ authentication AI296 Version 9.8x User’s Guide AI296 Version 9.8x User’s Guide Command Defaults Examples AAA Hyphens AlarmFollowing parameters is accepted Alarm group Self-clearing alarms clear themselves when the problem thatCaused the alarm is resolved Unmask. Valid values are existing alarm groups This example displays alarms for links 5-8in group links This example displays all system alarms in group linksThis example displays all alarms by severity level This example displays the unmasking of alarm group links Command Types Arp Column Description 296arp -d Mapping for 10.40.53.2 deleted Break 296break 10.40.5.11#1821 Breaking connection 10.40.5.11#1821 Bridge This example displays the dumping of the bridge table Creset To reset error counters for links 1, 2,Reset error counters for links 1 Example, 1,2-3 to reset error counters for links 1, 2, Date Debug This example displays the enabling of all debug data logging This command deletes a specified file that resides on AI296 DeleteFilename Defines the name of the file to delete This example displays the deletion of file log.txt Diag-conn Display Item Description This option prompts for the ID of the connection to view Displays details for that connectionPattern 1, Logic 2, and Pattern 3 are evaluated before Logic 4 and Pattern 5 are considered Using Interpretation Mode Diag-eth Using the Help Option Following formats apply to filters Adds a filterDeletes a filter Defines the source address MAC, IP, or TCP/UDP MAC/IP address settings Defines the TCP/UDP port number regardlessAdds or deletes a specific protocol filter. Available Protocol filters are This example displays Ethernet diagnostic help information Ijkl FF FC This example displays the deletion of filter protocol tcp This example displays the deletion of all filters Diag-info Displays the link number Means the X.25 frame level is not establishedMeans the X.25 frame level is established Buffers were available Last rebooted RebootedDisplays the name of the Streams resource Displays the number of free or available Streams resources Connection to be enabled Displays the state of the driver. Two states are availableSpecifies that the link is not established Displays the number of bytes coming into the link Had CRC errors Displays the number of frame length violationsReceived packets Displays the number of short received frames Displays the number of frames received on ConnectionDisplays the number of bytes received on Displays the number of times transmitted frames Does not indicate an error Displays the number of transmit errors that have occurredDisplays the number of frames received on the connection Displays the number of bytes received on the connection Errors Displays the number of alignment errorsExcessive deferral timer is exceeded. An excessive deferral Error is recorded when the following events occur Ethernet interface needs to be reset Displays the current state of the Ethernet interface.Following values may appear Ethernet interface is uninitialized Diag-line Option Function Diag-line Only present in data packets, then the data byte count is Displayed as Ascii String Diag-tconn Baseport Defines the baseport number for AI296 Dir This example displays all available files Exit This example displays an exit from the current shell session This command displays the first few lines of a file Defines the number of lines to display. The default isHead Defines the name of the file to display This example displays a list of all available commands Help This example displays help information for command show Formats Examples This command displays the current user name and profileThis example displays the current user name and profile This example displays the configured IP address information Ip init Enter IP Address Range default 1 Setting range to 296 Link This example displays the starting of links 1 through 4 This example displays the stopping of links 6 This command displays link statistic information For the AI296 system commandLinkstat Baseport Indicates the baseport number of AI296 C D 9600 RS-232 @AI198154041 072204 Sev=F Base=064 Msg This command turns the display of log messages on or off Log Logout This command closes a shell sessionThis example displays the closing of a shell session This command displays a list of available files Menu This command accesses the AI296 main menu systemThis example displays the AI296 Main Menu More Pad Resets the current call Enables the transparent mode of operationThis example displays the setting of the PAD profile Sets page wait to n lines This command forces AI296 to crash dump and halt PanicWinslc Baseport Defines the AI296 baseport number This command changes an existing user’s password Passwd Ping Pppstatus Displays one of the following IP address of AI296 if the link status is Running Command Type shell Formats ProfileProfilename-Defines the name of a user profile Have write permission Lists all user profile names Newprofile-Defines the name of a new user profileRemoves a user profile. The following parameter is accepted Pvcedit Forces the PVC to become passive Pvclist This example displays PVC information for link Column Description This command resets AI296 ResetThis example displays the resetting of AI296 This example displays AI296 receiving two files from a PC Selcnf Configuration fileCnf extension PDisplays the content of the file one page at a time Sholog Show Displays commentsDisplays all active connections Displays crash dump information MAC address when in standalone mode Displays the default and backup gateway IP addressDisplays WAN diagnostic information Displays link data. The following parameters are accepted This example displays the AI296 version number This example displays the serial link performance for links Staeia This command displays the status of the EIA leadsLead is negated CTS This example displays the current standalone mode status Standalone Staslc Is asserted and means the signal is negated Displays the number of parity errorsDisplays the number of framing errors Displays the number of overrun errors Syncflash Sz filename Tacacs This example displays a TACACS+ debug log file TACACS+ serverDisplays the number of failed connection attempts that were Made to the TACACS+ server Displays the number of errors that occurred when AI296 When AI296 attempted to read a packet from the TACACS+Were received when AI296 attempted to read them from Configuring the time out value, refer to command aaa on Tacacs server Configures the AAA phases that are allowed for specified Account-Enables or disables the accounting phase forAll-Enables or disables all AAA phases for the specified Authen-Enables or disables the authentication phase for Associated servers are enabled + or disabled DisabledDisplays the server numbers. The +/ signs indicate if Displays the TACACS+ shared secrets passwords for specified Servers This command displays the last few lines of a file TailSpecifies that a line number value will be entered This example displays the last 10 lines of file userlog.txt Tcpoutconn Tftp Tftp 106 File Downloaded successfully 296 Tftpboot 109 Timezone 111 Trace DefaultPriority Level This example displays the configuration of trace Traceroute This example displays the traceroute to IP address Type Defines the file for which you want to view the contentsDisplays text from the file one page at a time Update Defines the source file to copy Uptime Useradd Profilename Permission Specifies a user who can only execute the following commands Description of Permissions Profilename Userdel Users Who Xvc 124 AI296 System Codes This appendix provides information about AI296 system codes Standard Reset Indication Cause Codes Cause Codes and Diagnostic CodesCause Code Description Kentrox-Specific Reset Indication Cause Codes 0X1D Reset due to network out of order0x9B Remote DTE originated reset Standard Clear Indication Cause Codes Ccitt Diagnostic Codes Standard ISO Diagnostic Codes0x39 Ship absent 0x7F Registration/cancellation confirmed Cause Code Description Cause Code Description Kentrox-Specific Diagnostic Codes Crash Codes Error Code Description Hexadecimal DecimalCommon Crash Codes AI296 Crash Codes System Failure Crash Reports Kentrox Technical Support AI296 Version 9.8x User’s Guide Standalone Mode and Switch Mode Standalone Mode Downloading Software for a Standalone AI296At the FTP prompt, open AI296 Transfer the software image to AI296 Configuring BOOTP/TFTP Downloading Software for AI296 in Switch Mode Switch ModeAt the FTP prompt, open AI198 Transfer the software image to AI198 Defines the software image file name AI296 Version 9.8x User’s Guide Commands for AI296 TACACS+ Server Enhancements AI296 Commands Following keyword lets users access destinations AI296 Menu Aliases Menu Menualias Provides FTP read access Following AI296 keywords apply to FTP accessFTP Sessions