SmartWare Software Configuration Guide

8 • RADIUS Client Configuration

 

 

The following procedure guides you through the steps necessary to enable RADIUS accounting in an existing configuration:

Mode: Configure

Step

Command

Purpose

 

 

 

1

node(cfg)# radius-client

Create a new RADIUS client

 

<client-name>

 

 

 

 

2

node(radius)[client-name]#

Define the RADIUS server to be used. If the UDP port is omit-

 

radius-server <server-

ted, the default port 1812 is used.

 

name-or-ip> [<udp-port>]

Note For accounting RADIUS servers often use

 

 

 

 

port 1813)

 

 

Note There might also be RADIUS servers, which still

 

 

use the old RADIUS ports 1645 or 1646)

 

 

 

3

node(radius)[client-name]#

Define the shared secret to access the RADIUS server

 

shared-secret authentica-

 

 

tion <secret>

 

 

 

 

4

node(radius)[client-name]#

Create an AAA profile, which uses the RADIUS client

 

profile aaa <pf-name>

 

 

 

 

5

node(pf-auth)[pf-name]#

Define your newly created radius client as the AAA method

 

method radius <radius-

to be used.

 

client-name>

Note If you require redundancy, you can create multi-

 

 

 

 

ple radius clients and add all of them to the

 

 

AAA profile.

 

 

 

6

node(pf-auth)[pf-name]#

Switch to the circuit-switching context.

 

context cs

 

 

 

 

7

node(ctx-cs)[ctx-name]#

Create an AAA call-control service

 

service aaa <name>

 

 

 

 

8

node(svc-aaa)[svc-name]#

Define the newly created AAA profile to be used for account-

 

accounting use profile

ing using this AAA service.

 

<aaa-profile-name>

 

 

 

 

9

node(svc-aaa)[svc-name]#

Define the NAS-Identifier string to be included in RADIUS

 

nas-identifier <nas-identi-

requests sent from this AAA service.

 

fier>

 

 

 

 

10

node(svc-aaa)[svc-name]#

Optionally, you can also configure the AAA service to

(Optional)

authentication use profile

request authentication using the calls calling E.164 number.

 

<aaa-profile-name>

If this is required, you can define the AAA profile used for

 

 

authentication using this command.

 

 

 

11

node(svc-aaa)[svc-name]#

Define, if calls shall be dropped, if accounting fails. The

(Optional)

accounting-failure-action

default is to ignore accounting failures.

 

[drop-calls ignore]

 

 

 

 

RADIUS configuration

109

Page 109
Image 109
Patton electronic SmartNode 4110 Series manual 109