Manuals / Patton electronic / Computer Equipment / Server

Patton electronic 29XX manual Appendix a Supported Radius Attributes

Models: 29XX

1 326

Page 300

Appendix A Supported RADIUS Attributes
Chapter contents
Access-Accept Attributes	301
Access-Request Attributes	301
Access-Challenge Attributes	302
Accounting-Start Attributes	302
Accounting-Stop Attributes	303

300

Page 300

Image 300

Patton electronic 29XX manual Appendix a Supported Radius Attributes

Contents

Remote Access Server Patton Electronics Company, Inc Contents Drop and Insert 138 Interfaces 178 Sync PPP 276 Contents Contents Audience Structure Typographical conventions used in this document General conventions Mouse conventions Chapter contents Introduction Introduction Logging into the HTTP/HTML Administration Pages HTTP/HTML and Snmp Object Format Saving HTTP/HTML Object Changes Home Introduction Home Operating Status Variables Immediate Actions Immediate Actions buttons Import/Export Export Configuration Import/Export main window Typical access server flash memory configuration data Import Configuration Alarms Sample alarm indication Displaying the Alarms window Total System AlarmsX alarmTotal Alarm Response Outputs Alarms Modify Response-Configuring the alarm response system Alarm Syslog Priority syslogAlarmPriority Alarm Snmp Trap IP 1 alarmTrapIp0Alarm Snmp Trap IP 2 alarmTrapIp1 Alarm Snmp Trap IP 3alarmTrapIp2 Modify Alarms-Configuring alarm severity levels Modify Alarms settings window Authentication ID suID Displaying the Authentication window Validated authentications auAuthenticationsValidTotalValidated via primary server auAuthenticationsValidPrimary Statistics section Validated via static database auAuthenticationsValidStatic Denied authentications auAuthenticationsDeniedPrimary server timeouts auPrimaryServerTimeouts Secondary server timeouts auSecondaryServerTimeouts Configuration section Validation auValidation Timeout auTimeout Host Address auHostAddressSecondary Host Address auSecondaryHostAddress Host Port auHostPort Accounting Enable auAccountingEnable Accounting Port auAcctPortRadius Packet Format auRadiusPacketFormat Radius Session ID Size auRadiusRunningIdSize Setting Up Authentication Radius Session ID auRadiusRunningId Authentication Configuration screen Host Address auHostAddress Accounting Port auAcctPort Static User Authentication Adding Static Users Modify Static User Service IP suServiceIP Service Port suServicePortService Mask suServiceMask Filter ID suFilterId DAX Configuring the DAX Circuit Type daxClockMode Main Reference daxClockMainRef Fallback Reference daxClockFallbackRef DAX Clock Status alarm condition Clock Status daxClockFailure Dial Dial Dial Dial Phone Dial Introduction Dial In main window Call Sorting diPageSortCall ID diactIndex ML ID diactMultiIndex State diactState Duration diactSessionTimeDisconnect Reason diactTerminateReason Modulation diactModulation Dial Modulations window Connect Speed diactTxSpeedUsername diactUsername DSP Link diactDSPIndex Connection Modulation diactModulationTransmit Connection Speed diactTxSpeed Error Correction diactErrorCorrection Receive Connection Speed diactRxSpeedData Compression Protocol diactCompression Locally Initiated Renegotiates diactLocalRenegotiates Dial Telco window Dial Telco window WAN Link diactLinkIndex Time Slot diactSlotIndexTime Call Is/Was Active diactSessionTime Termination Reason diactTerminateReason Dial Protocol window Shared Unique ID diactMultiIndex LCP Authentication LCPAuthOptions Protocol diactProtocolIP Address diactIP Port # on Remote Machine diactPort Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProt Remote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProtNext Hop diForceNextHop Dial In Details Dial In Details window Dial In Modify default window Dial In Modify window modify Login, Service, and DNS objects Modify Login Login Technique diLoginTechniqueIP Address Pool diIpPool Password Prompt diPasswordPrompt Modify ServiceDefault Service diService Username Prompt diUsernamePrompt Modify Domain Name Server Modify Attempts Failure Banner diFailureBannerSuccess Banner diSuccessBanner Modify Configuration Modify Maximum Time Modify Isdn Configuration 110 diV110Enable Modify V.92 Configuration Modify Modem Configuration V90diModemV90Enable K56flexdiModemK56EnableV34diModemV34Enable V32diModemV32Enable Billing Delay diBillingDelay Guard Tone diModemGuardToneCarrierLossDuration diModemCarrierLossDuration Answer Tone LengthdiModemAnswerToneLength Manage Dnis Window Direct0-No compression will be used Manage Dnis main window Dnis Entry Window Called Calling Number dnisPoolDesrcDialedNumber Dnis Profiles Login Technique dnisProfileLoginTechnique Dnis Profiles Main WindowID dnisIpProfileId IP Pool dnisProfileAssignedIpPool Service Port dnisProfileServicePort Service IP dnisProfileServiceIPTelnet Mode dnisProfileTelnetMode Dovbs dnisProfileDOVBS Status dnisIpProfileStatus Add a Dnis ProfileDnis Profile Entry Window IP Pool dnisProfileSAssignedIpPool Dovbs dnisProfileDOVBS Service Port dnisProfileServicePort Dnis IP Pools Window ID dnisIpPoolIdIP Address Pool dnisIpPool Status dnisIpPoolStatus Dnis IP Pool Entry Window Dnis IP Pools Entry window Dial In User Statistics window User Statistics Call Identification, Session Call Identification Session Time Left In Session diactRemainingSession Termination Reason diactTerminateReason Dial Dial State at termination diactTerminateState PPP Statistics LCP Statistics LCP Authentication LCPAuthOptions Remote MRU diStatRemoteMRULocal Multilink Mrru diStatLcpLocalMRRU Remote Multilink Mrru diStatLcpRemoteMRRU Local-Remote AC Comprsn diStatLocalToRemoteACComp Remote-Local AC Comprsn diStatRemoteToLocalACCompTransmit Frame Check Seq. Size diStatTransmitFcsSize Receive Frame Check Seq. Size diStatReceiveFcsSize Operational Status diIpOperStatus Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProtRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Remote Max Slot ID diIpRemoteMaxSlotId Primary Domain Name Server diactPrimaryDNS Secondary Domain Name Server diactSecondaryDNSFilters diStatIpFilterAtoJ Phone Data Physical Layer Error Correction diactErrorCorrection Modulation Symbol Rate diactSymbolRateTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeed Locally Initiated Retrains diactLocalRetrains Remote Initiated Renegotiates diactRemoteRenegotiatesRemote Initiated Retrains diactRemoteRetrains Dial Out Dial Out 105 106 Dial Out Main Window Call Sorting doPageSortActive Calls doActive Call ID doactIndex User doactUsername State doactStateDuration doactSessionTime Disconnect Reason doactTerminateReason 109 Dial Out Details window Modulation doactModulationSpeed doactTxSpeed Dial Out Modify window Dial Out Details window TCP Type doServiceType Login Technique doLoginTechniquePassword Prompt doPasswordPrompt TCP Port doTcpPort Login Attempts Allowed doAllowAttempts Failure Banner doFailureBanner Maximum Session Time doSessionTimeout Maximum Idle Time doIdleTimeoutTime to Login sec doLoginTimeout Call History Timeout min doLingerTime Isdn doModemISDNEnable V22 doModemV22EnableV21 doModemV21Enable Maximum Speed doModemMaxSpeed Minimum Speed doModemMinSpeed Guard Tone doModemGuardToneCarrier Loss Duration doModemCarrierLossDuration Retrain doModemRetrain Dial Out Locations Window Restrict Modification doModemRestrictModsStatus locationstatus Add Location Multilink locationConfigMultilink Idle Timeout locationIdleTimeoutMaximum Session Time locationSessionTimeout Authentication Technique locationAuthTechnique View/Modify location details Dialing Locations Dial Out Modem Profiles Window Add Modem ProfileLocations Link Profile ID modemProfileId Guard Tone modemGuardTone Carrier Loss Duration modemCarrierLossDurationRetrainmodemRetrain Compression modemCompression Billing Delay modemBillingDelay Dial Out User Statistics WindowStatus modemStatus View modem profile Password doactPassword Call IdentificationCall ID doactIndex Username doactUsername Minutes until timeout doactRemainingIdle Dsp Link doactDSPIndexWan Link doactLinkIndex Time Slot doactSlotIndex 126 PPP Statistics Bad Address doStatBadAddressesBad Controls doStatBadControls Packets too long doStatPacketTooLongs Remote LCP Authentication doStatLcpAuth Local MRU doStatLocalMRURemote MRU doStatRemoteMRU Local Multilink Mrru doStatLcpLocalMRRU Local PPP Protocol Compression doStatLocalToRemoteProtComp Remote PPP Protocol Compression doStatRemoteToLocalProtCompLocal AC Compression doStatLocalToRemoteACComp Remote AC Compression doStatRemoteToLocalACComp Bad Packets doactErrorFrames Number Called doactNumberDialedOctets Sent doactSentOctets Octets Received doactReceivedOctets Error Correction Protocol doactErrorCorrection Connection Modulation doactModulationTx Connection Speed doactTxSpeed Rx Connection Speed doactRxSpeed An example section of dialout Callback Dial-in Modify Configuration Callback diCallbackConfig Dial-in Main Window Dial-in user waiting to be called back Radius Configuration Callback Configuration suCallbackConfigCallback phone number suCallbackNumber Accounting information Dialout Drop and Insert Session Timeout drSessionTimeout Call History Timeout drLingerTimeDrop and Insert main window Active Calls drActive How Drop and Insert works Using Drop and Insert Drop and insert diagram Digital Signal Processing DSP 152 DSP main window DSP Settings main window Instance #1 Use dspUsefirst Instance #2 State dspStateSecondInstance #2 Use dspUseSecond DSP Connection Performance DSP Memory CaptureDSP PCM Capture DSP Debugging Events Connection Summaries DSP Connection Totals Reboot-A dspTotalRebootDueToFails Reboot-B dspTotalRebootDueToErrorRemote-Reneg dspRemoteRenegotiates Local-Retrain dspLocalRetrains DSP information window DSP StatusDesired State dspDesiredState Call Statistics Debug Statistics Ethernet Ethernet Main Window State boxEtherAState Config PrimaryIPAddress boxEtherAPrimaryIpAddressPrimaryIpMask boxEtherAPrimaryIpMask PrimaryIpFilters boxEtherAPrimaryIpFilters Ethernet Modify Window Ethernet Modify Window Technique Configuration Alignment Errors dot3StatsAlignmentErrorsEthernet Statistics FCS Errors dot3StatsFCSErrors SQE Test Errors dot3StatsSQETestErrorsOther Errors dot3StatsInternalMacTransmitErrors Carrier Sense Errors dot3StatsCarrierSenseErrors Other Received Errors dot3StatsInternalMacReceiveErrors Received Frames Too Long dot3StatsFrameTooLongsChip Set ID dot3StatsEtherChipSet Filter IP Defining a filter Modify Filter Name filterIpName Direction filterIpDirection Action filterIpAction Source IPComparison filterIpSourceAddressCmp Address filterIpSourceIp Destination IP Source PortDestination Port Port filterIpDestinationPort Protocol filterIpProtocolTCP Established filterIpTcpEstablished An example of using a filter IP Filter showing default for dialout 168 169 Frame Relay Congestion frameEnableCongestion Frame Relay main window Frame Relay main window Link X frDlcmiIfIndex Hdlc Statistics on Link Dlmi Window Signalling frDlcmiState Error Threshold N392 frDlcmiErrorThresholdMultiCast Service frDlcmiMulticast Data Link Protocol frDlcmiAddress Dlci window LMI Interface frDlcmiInterfaceBidirectional PollingfrDlc rDlcmiPollingBiDir Polling Verification T392 frDlcmiPollingVerification Congestion frameEnableCongestion Dlci frCircuitDlciInterface # FrameIPInterfaceNum State frCircuitState Interfaces Interfaces main window Number ifIndex Admin Stat ifAdminStatus Type ifTypeOperational Status ifOperStatus Interface Details Description ifDescr Max Transfer Unit ifMTU Speed ifSpeedPhysical Address ifPhysAddress Last Change ifLastChange Received Errored Packets ifInErrors Requested Errored Packets ifOutErrorsReceived and Discarded w/No Errs ifInDiscards Received w/Unknown Protocol ifInUnknownProtos 184 16 IP 186 IP main window IP main window Default Time-To-Live ipDefaultTTL Discarded for Header Errors ipInHdrErrorsDiscarded for Address Errors ipInAddrErrors Forwarding ipForwarding Discarded w/No Errors ipInDiscards Reassembly Timeout ipReasmTimeoutForwarded Datagrams ipForwDatagrams Discarded for Unknown Protos ipInUnknownProtos Modify TCP TCP main window Retransmit-Timeout Algorithm tcpRtoAlgorithm Retransmit-Timeout Minimum tcpRtoMinRetransmit-Timeout Maximum tcpRtoMax Established Resets tcpEstabResets TCP Details UDP Handling of Netbios UDP Broadcasts boxNetbiosUdpBridging Others Received with No Delivery udpInErrorsReceived udpInDatagrams Received With No Ports udpNoPorts Errors icmpInErrors, icmpOutErrors Block Icmp redirects boxBLockIcmpRedirectsIcmp Receive/Send Messages window Total Received/Sent icmpInMsgs, imcpOutMsgs Parameter Problems icmpInParmProbs, icmpOutParmProbs Source Quenchs icmpInSrcQuenchs, icmpOutSrcQuenchsTimes Exceeded icmpInTimeExcds, icmpOutTimeExcds Redirects icmpInRedirects, icmpOutRedirects Addressing Information Echo Replys icmpInReps, icmpOutRepsTime Stamps icmpInTimestamps, icmpInTimestamps Address Mask Requests icmpInAddrMasks icmpOutAddrMasks Entry Reassembly Maximum Size ipAdEntReasmMaxSize Routing InformationEntry Interface Index ipAdEntIfIndex Entry Subnet Mask ipAdEntNetMask Destination ipRouteDest Mask ipRouteMask Gateway RouteGateway Cost RouteCostInterface ipRouteIfIndex State RouteState Adding a point-to-point route Adding a static point-to-point route to a remote hostAdding a static routes to a remote network Forwarding table window Advanced… Next Hop ipRouteNextHop Type ipRouteTypeProtocol ipRouteProto IP Routing Destination window Info ipRouteInfoRoute Destination ipRouteDest Seconds Since Updated ipRouteAge Address Translation InformationTag RouteTag Interface ipNetToMediaEntry Net Address ipNetToMediaNetAddressPhysical ipNetToMediaPhysAddress Type ipNetToMediaType MFR Version 218 Line Signalling MFR Version 2 main windowCountry lineSigCountry Interregister Signalling MFR Version 2-Modify MFR Version 2 Modify window 213 214 Interregister Signalling 216 A1010 A1111 A1212 A1313 A1414 A1515 218 RIP Version RIP Version 2 main window Route Changes Made rip2GlobalRouteChangesResponses Sent rip2GlobalQueries Address rip2IfConfAddress Receive rip2IfConfReceive Adding a RIP address RIP Version 2-Configuration Authentication Type rip2IfConfAuthTypeAuthentication Key rip2IfConfAuthKey Domain rip2IfConfDomain RIP Version 2 Statistics Sent Updates rip2IfStatSentUpdates Status rip2IfStatStatus Snmp Snmp window Snmp window ASN ParseErrors snmpInASNParseErrs Error Status Too Big snmpInTooBigsError Status Read Only snmpInReadOnlys Generated Errors snmpInGenErrs Out Generated Errors snmpOutGenErrs Authentication Failure Traps snmpEnableAuthenTrapsGet Requests snmpOutGetRequests Get Next Requests snmpOutGetNexts System System System main window Snmp and HttpVersion boxSnmpVersion Manufacturer Message Blocks Operating System Heap Memory Total Size boxHeapSizeFree boxHeapFreeSpace Largest boxHeapLargestSpace Payable features InstallationEnclosure System Other System Services sysServices Web Settings boxBackgroundFlagPhysical Location sysLocation Monitor Privilege boxMonitorPrivilege System-Modify window System-Modify window Enable Payable FeaturesboxFeatureEnableKey System-Packet Holding Message Blocks Buffer Size boxbuffersizeNo. of Buffers boxbuffercount No. Free boxbuffersfree No. of Tasks Waited boxCountBufferTaskWaitNo. of Times UnavailableboxCountBufferUnavailable System Log System Log Main Window System Log main window System Log-Modify DaemonsPriority Min Priority for Console RS-232 syslogConsolePriority Min Priority for Flash Storage syslogFlashPriorityMin Priority for Snmp Trap Daemon syslogTrapPriority Min Priority for RAM SyslogTablePriority Unix Facility syslogUnixFacility Maintenance Call Trace syslogCallTraceMaintain Flash Storage syslogFlashClear System Log-Volatile Memory Time slTickMessage slMessage System Log-Non-Volatile Memory What the System Log messages are telling youTime slfTick Message slfMessage T1/E1 Link Error Injection linkInjectError 263 Path Code Violations dsx1FarEndCurrentPCVs 271 T1/E1 Link Activity main window T1/E1 Link Activity main window Link dsx1LineIndexType dsx1LineType Alarms Present Physical Line Alarms dsx1LineStatusFar End Alarm Failure Circuit ID dsx1CircuitIdentifier Alarm Indication Signal AIS Failure Loss Of Signal FailureTS16 Alarm Indication Signal Failure Loss Of Frame Failure Isdn Signaling Alarms linkSignalStatus Snmp MIB definition E1 TS16 AIS Line Status-Configuration Time Elapsed dsx1TimeElapsedValid Intervals dsx1ValidIntervals WAN Circuit Configuration-Modify Line Interface SettingsCircuit ID dsx1CircuitIdentifier Line Type dsx1LineType Line Coding dsx1LineCodingReceive Equalizer linkRxEqualizer Yellow Alarm Format linkYellowFormat Signalling SettingsSignal Mode dsx1SignalMode Line Build Out linkLineBuildOut Test Settings Loopback Config dsx1LoopbackConfig Error Injection linkInjectErrorSend Code dsx1SendCode Line Status-Channel Assignment Channel channelIndexDesired Function channelfunction Near End Line Statistics-Current CurrentState ChannelState Errored Seconds dsx1CurrentESs Severely Errored Seconds dsx1CurrentSESsSeverely Errored Frame Seconds dsx1CurrentSEFSs Line Errored Seconds dsx1CurrentLESs Near End Line Statistics-History Near End Line Statistics-Totals Severely Errored Seconds dsx1TotalSESs Severely Errored Frame Seconds dsx1TotalSEFSsLine Errored Seconds dsx1TotalLESs Bursty ErroredSeconds dsx1TotalBESs Far End Line Statistics-Current Far End Line Statistics-History Severely Errored Seconds dsx1FarEndIntervalSESs Severely Errored Frame Seconds dsx1FarEndIntervalSEFSsLine Errored Seconds dsx1FarEndIntervalLESs Bursty Errored Seconds dsx1FarEndIntervalBESs Far End Line Statistics-Totals Bursty Errored Seconds dsx1FarEndTotalBESs Using Non-Facility Associated Signaling NfasConfiguring Nfas Degraded Minutes dsx1FarEndTotalDMs RAS hosts 1 Nfas group containing 3 PRIs Sync PPP Sync PPP WAN Circuit Configuration window Line Status-Channel Assignment PPP configuration PPP Main Window Ip Address pppServiceIpAddress Ip Mask pppServiceIpMaskDefault Settings State pppActState Authentication Technique pppDefaultAuthenticationTechnique Authentication Side pppDefaultAuthenticationSideAuthentication Username pppDefaultAuthenticationUsername Authentication Password pppDefaultAuthenticationPassword Compression pppDefaultIpCompression PPP Link WindowLink frDlcmiIfIndex Status framerelStatus Link Configuration Authentication Side pppAuthenticationSide Authentication Username pppAuthenticationUsernameAuthentication Password pppAuthenticationPassword Security Level pppAccessLevel Link Compression pppLinkCompression Allow Magic Number Negotiation pppMagicNumberBad Address pppStatBadAddresses Bad Controls pppStatBadControls LCP AuthenticationpppStatLcpAuth ACC Map pppStatLocalToPeerACCMapPeer-Local ACC Map pppStatPeerToLocalACCMap Local-Remote AC ComprsnpppStatLocalToRemoteACComp Remote-Local AC Comprsn pppStatRemoteToLocalACComp Transmit Frame Check Seq. Size pppStatTransmitFcsSizeReceive Frame Check Seq. Size pppStatReceiveFcsSize Operational Status pppIpOperStatus Remote Max Slot ID pppIpRemoteMaxSlotId Local Max Slot ID pppIpLocalMaxSlotIdOctets Sent pppActSentOctets Octets Received pppActReceivedOctets Modify Link Configuration Window Link Configuration Layer 2 Tunneling Protocol L2TP L2TP Configuration Static Authentication Radius Authentication L2TP Radius Authentication Configuration Example Cisco Configuration This will enable the use of tunnel authentication Contacting Patton Patton Electronics Company contact information About window License End User License Agreement Definitions Warranty TitleTerm Grant of License Appendix a Supported Radius Attributes Access-Accept Attributes Access-Request Attributes Access-Challenge Attributes Accounting-Start Attributes Accounting-Stop Attributes Appendix B MIB trees Model 2960 MIB Tree Structure Appendix C Technical Reference Configuring a Radius server What Is RADIUS?Radius Client/Server Architecture Radius Services Radius Authentication Procedure Radius Standards RADIUS-Where Can I Get It? Radius Resources Configuring Radius Configuring Radius AuthenticationOverview Authentication window Using Snmp with the Access Server Finding the Snmp Name Finding the branch where the Snmp parameter resides MIB tree for Model 2960 access server Configuring Non-Facility Associated Signaling Nfas Configuring Nfas Configuring Frame Relay Line Configuration WAN Channel Assignment main screen Configuring Frame Relay link parameters Configuring PVCs Configuring Permanent Virtual Circuits Click on Submit Query Configuring IP routing with a Frame Relay Link IP routing with Frame Relay example Link Status and the IP Forwarding Click Add Route Configuring Dnis Setting up IP address pools by configuring Dnis Ip PoolsSetting up a Dnis user profile Setting up a Dnis group Configuring a leased line/dedicated line connection Configuring the RAS Configuring the remote end using Microsoft Windows Modem properties window Under the Options tab set Redial attempts to a high number

Appendix A Supported RADIUS Attributes

Chapter contents