Default retrans-primary-only is | Tut Systems SMS2000 guide

Authentication

Syntax	Description
Alias	Adding the alias parameter to the end of the auth add radius
	command will configure the SMS to receive RADIUS response
	packets from an IP address other that the IP address configured as
	the RADIUS server.

Multiple RADIUS Servers

Default

Older versions of SMS used UDP port 1645 for RADIUS authentication requests and 1646 for RADIUS accounting requests by default.

New versions of SMS will continue to use those same ports for previously configured RADIUS servers when upgraded from previous versions.

However, new RADIUS servers will be configured with port 1812 for RADIUS authentication and port 1813 for RADIUS accounting by default.

The default retrans is 5.

The default retrans-primary-only is 2.

The default timeout is 30 seconds.

The default deadtime is 0 minutes (disabled)

Usage Guidelines

Note Select a shared secret as you would a password.

Example

This example configures the SMS2000 to authenticate subscribers in the current group using the RADIUS server at 192.168.254.249.

sms2000% auth add radius 192.168.254.249 secret donttell retrans=3 retrans-primary-only=1 timeout=10 deadtime=5

Alias IP address

If the RADIUS servers are configured with a virtual interface, the RADIUS response packets will be transmitted to the SMS on a different interface than the request packet was received. The SMS will reject the packets since it did not arrive with the expected source IP address. Setting an alias IP address allows the SMS to receive the RADIUS response from a different source IP. You must configure the alias IP parameter after configuring the RADIUS server.

For example;

auth add radius 192.168.1.249 secret donttell auth add radius 10.1.1.50 alias

The above two commands will cause the SMS to send the RADIUS request to 192.168.1.249 and receive the RADIUS response from both 192.168.1.249 and 10.1.1.50.

TUT Systems, Inc

Page 54 of 104

P/N 220-06288-20

Image 54

Tut Systems SMS2000 manual Default retrans-primary-only is, Usage Guidelines Example

Contents

TUT Systems SMS2000 User Guide SMS2000 User’s Guide SMSUser’s Guide Contents Configuring Snmp Polling Configuring SmtpConfiguring NTP Connectivity and Testing Authentication with Radius Authentication Configuring the Command ServerAuthentication Authorization Groups Using Rule PrioritiesConfiguring Radius SMS2000 Rules SMS2000 Troubleshooting Procedures Using Both Radius and OCS AuthenticationWeb Proxy Settings SMS2000 Status Attributes and Statistics Radius Attributes in Access-Accept Packets List of TablesList of Figures Documentation available for this Release PrefaceAudience Related Documentation Subscriber Management Features Introduction Introduction Subscriber Management Components Subscriber Management Components SMS2000 OCS Introduction Getting Started User Interface Ifconfig portnumber ipaddress /masklen Accessing Help for CommandsFor example restore config web original-confi g Style Conventions Cursor Movement Cursor Motion Keystrokes Establishing a Connection with the SMS2000 Initial ConfigurationClick Configure Establishing a Connection Via a Serial Interface Establishing a Connection Via Telnet Initial Configuration Initial Configuration Changing Your PasswordSetting the Quick Configuration Setting the Hostname Disabling AuthenticationSaving the Configuration Rebooting the System Verifying the ConfigurationReboot Setting the Default Configuration E-mail System AdministrationConfiguration E-Mail Settings Set config-mailrecipient@SMTPserver SMTPserver Deleting the Configuration E-mail Configuration and System File ToolsMailing the Current Configuration Committing Configuration Changes Commit auto Automatically Committing Configuration ChangesDisabling Automatic Configuration Changes Commit noauto Saving a Configuration Loading a Configuration FileRestoring a Previous Configuration Setting the Smtp Server Configuring SmtpRestoring the Default Configuration Deleting the Smtp Server Setting the Timezone Configuring NTPSetting the Smtp ID Set smtpid on off Setting the Time Configuring Snmp PollingConfiguring the NTP server Enabling Snmp Polling Testing to See if Snmp Polling will Work Disabling Snmp PollingSnmp-pollmacaddress Setting Specialized System Options Connectivity and TestingTesting Connectivity System Tools Leftrighthelp ? Setting and Deleting Static PortsDefining Ports Port-definition mixed tut vlan Event Tracking Disconnecting a Session on a PortSetting the Syslog Server Displaying Log Messages System Administration Tools Displaying Version InformationExiting the Management Session Passwd Changing a PasswordDisplaying Control Keys Keys Snmp System Contact Snmp ManagementSnmp Agent Snmp System Location Snmp Community Snmp Trap Recipient SMS2000% snmp delete trap-recipient Troubleshooting ToolsSystem Information Tools Show snmp trap-recipient Setting the ARP Failure Limit Subscriber Connectivity CommandsUpgrades Setting the ARP Polling Period Upgrading from Tut Systems’ Website Archiving SMS2000 Firmware and distributing it from a Server Verifying a Successful Upgrade Returning to an Older Firmware VersionLoading Another Image System Administration Authentication Authentication Deleting the Command Server Configuring the Command ServerSetting the Command Server for OCS Interaction Adding the OCS as the Authentication Server Auth add web url secret secret cmd-serv Deleting an Authentication ServerTesting Authentication Auth on Auth off forcedweb authokurl blockall Setting the Authentication IntervalBypassing Authentication Auth interval minutes off Allow-Nets Setting the Http Request ThrottleHttp Request Throttle Deleting the Http Request Throttle Setting an Allow-Net Set allow-netipaddress netmask dns-name Deleting an Allow-Net Setting the Automatic Redirection URLAutomatic Redirection URLs Set authok url Adding a Radius Server Authentication with RadiusDeleting the authok Delete authok Command Syntax Description Default Default retrans-primary-only isUsage Guidelines Example Set NAS port type parameter Set nas-port-type integerSet nas-port-type Show status radius Testing Authentication on the Radius ServerConfiguring a Radius SSL Back Channel Show status radius Example Authorization AuthorizationAuthorization Server Functionality Accounting AccountingSending Accounting Messages to a Syslog Server Sending Accounting Messages to a Radius Server Radius Accounting ConfigurationConfiguring Accounting Parameters Deleting a Radius Accounting Server Provisioning Provisioning Billing Billing Adding a Group Service Creation Using Groups and RulesGroups Group add groupname noinherit inherit groupname Setting Maximum Users Per Port Setting the Active Group ContextSubscribers that Cannot Support Authentication Deleting a Group Deleting a Rule SMS2000 RulesAdding a Rule Set rule rulename groupname priority rulestring MAC Address Rule Expression ComponentsIP Address Ip=ipaddress ,netmask Not Operator Vlan=vlanida-vlanidbTut=ipaddress-linenum*-portnum Parenthesis OperatorOr Operator Expression and expression Using Rule Priorities IP Addressing IP AddressingPlug and Play With NAT Static Routable Addresses Dhcp Pools Static Non-Routable Addresses IP Multicasting Configuring IP Types Iptype default NAT static Dhcp 1to1 1to1UniqueUnderstanding 1to1 and 1to1 Unique IP Types Source-Nets Setting a Source-NetDeleting a Configured Source-Net Set source-netstartaddress endaddress subnet-mask Removing a Dhcp Assignment Setting the DNS Server AddressCreating Dhcp Pools Dhcp-server release macaddress Adding Routes Static RoutesDeleting the DNS Server Address Set dns add ipaddress Setting up the LPR Host PrintingSet lpr hostname off queuename maxpages maxbytes Using SMS2000 with a Radius Server Configuring RadiusObtaining the Radius Server Software Configuring Service Parameters Adding the SMS2000 as a Client on the Radius ServerAdding Users to the Radius Server Using Real IP Addresses Radius Ports SMS2000 Status Attributes and Statistics SMS2000 NAS FileRadius Attributes Sent in Accounting Messages Using Both Radius and OCS Authentication Radius Attributes Sent In Access Request PacketsRadius Attributes Received in Access- Accept Packets Shape xbps/rbps Setting Traffic ShapingDeleting Traffic Shaping Shape xbps/rbps delete Setting the PMS Server SMS2000 and Property Management Systems PMS Protocol Modes TTY ACK-NAK ENQ-ACK-NAK ENQ-ACK-NAK Mode Files For Groups Customizing SMS2000 Web Authentication with RadiusLoading and Deleting Customized Web Pages Loading Web Pages or Files Load web url defaults Path ComponentsImage Links Deleting Web Pages or Files Customizing Web PagesUpgrading Preserving the Web Form Size For Web Pages and External Links Web Page Redirection Active Page Components Viewing CustomizationsReference Setting the Wpad Curl Configuring Web Proxy SettingsWeb Proxy Settings Setting the Wpad Timeout Web Proxy Server Set proxy-ports port Delete proxy-ports portShow proxy-ports SMS2000 Troubleshooting SMS2000 Troubleshooting Procedures Browser Snmp PollingMultiple frames opened Unable to do credit card Verify OCS screens off Line Appendix a Radius Access-Accept Dictionary File Radius Attributes in Access-Accept Packets Appendix Appendix TUT Systems, Inc 100 Internet Telephone Appendix B Technical Assistance and Customer SupportTechnical Support Equipment Return and Repair Limitations of Warranty Appendix C SMS2000 Limited WarrantyHardware Limited Warranty Exclusive Remedies Assistance Electrical Safety AdvisoryTut Systems, Inc., Customer Service Department FCC Radio Frequency Interference Statement TUT Systems, Inc 104