Radius | USRobotics NETServer/8, NETServer/16 guide

If a SLIP or PPP user begins a session with the network, a record like the one below is sent to the accounting server:

Thurs Jan 16 16:15:53 1995

Acct-Session-Id=“06000004”

User-Name=harryk

Client-Id=201.123.234.79

Client-Id-Port=5

Acct-Status-Type=Start

Acct-Authentic=Local

User-Service-Type=Framed-User

Framed-Protocol=SLIP

Framed-Address=122.132.124.152

Framed-Netmask=255.255.124.0

When the framed user ends the session, a record like the one below is sent to the accounting server:

Thurs Jan 16 16:25:57 1995

Acct-Session-Id=“06000004”

User-Name=harryk

Client-Id=201.123.234.79

Client-Id-Port=5

Acct-Status-Type=Stop

Acct-Session-Time=664

Acct-Authentic=Local

User-Service-Type=Framed-User

Framed-Protocol=SLIP

Framed-Address=122.132.124.152

Framed-Netmask=255.255.124.0

Acct-Delay-Time=0

F-14 RADIUS

Image 274

USRobotics NETServer/8, NETServer/16 manual Radius

Contents

NETServer/8 NETServer/16 Page Table of Contents Network Dial-in Access Administrative Tools Reference Section Warranty and Service Limited Warranty Technical Support Service and SupportVii We welcome your suggestions for better documentation Viii Additional Software Enhancements Chapter OverviewWhat’s New with Release 3.1? Overview Accounting Servers Netmask TableIP Address Spoofing Accounting Server Support Radius Accounting and ANI/DNIS Multiple Name ServersRandomized Hosts Icmp Message Logging New Modem Port Features NETServer Overview IP Modem Sharing How do I get there from here? Administrative Utilities Security System Administrator Requirements Chapter Basic InstallationBasic Installation TCP/IP Reference Material Accessing the Command Line Getting Started Getting the LAN port up and running First step for IPX or IP/IPX networks Basic Installation IP Configuration You must also set the Broadcast Address. Type the following IPX Configuration Ethernet802.3 ethernet802.2 ethernet802.2II ethernetII Final Steps Password Recommended Global ConfigurationIP and IPX Default Gateways To set the IP gateway, type the following Name Service Save your work Basic Installation How to Setup Applications Chapter Configuration OverviewConfiguration Overview Where do I go from here? Application Section You can abbreviate commands Command LineCommands are not case sensitive Separate a parameter and its value by a space How to log out of the command line Reset any ports you have changedReboot when necessary Save your changes Quick Command Overview Global Configuration Overview of configurable tablesHosts Table Location Table Initialization Script ConfigurationNet0 LAN Port Configuration Netmasks Table Packet Filter Table Port Configuration Port Type Snmp Configuration Routes Table User Table Configuration Overview Terminal or Workstation Setup Chapter IP Terminal Server SetupIP Terminal Server Setup NETServer Terminal Server Setup Overview Global Default Port DefaultUser Table Set the port type to User Login Terminal Server Detailed SetupConfiguring a Port Set the port’s security Pass-Thru Login Create default user settings for the port Port Default Login Service Optional Friendly Stuff Save sport # Adding a Remote User to the User Table Configure the userAdd the user to the User Table Login Service Configure for dialback use? IP Terminal Server Case Studies Example NETServer will use ports 6, 7, and 8 for this application Save your work and reset all the ports Example IP Terminal Server Setup Dial-in User Setup Chapter Network Dial In AccessNetwork Dial In Access NETServer Setup for Network Dial-In Overview Prework Configuration NETServer Dial-In Detailed Setup Dialback Users on this Port? Save the changes to flash memory Create a new user Normal or dialback user? Add configuration information for the user This is the user’s IP subnet mask. Use the following command Option can be any one of the following IP Remote Access Case Study Configure the ports Create user table entries for the dial in users Create a user table entry for the dialback user Save your work and reset the ports Connecting to the NETServer IPX Remote Access Create User Table entries for the dial in users Chapter LAN-to-LAN Routing Setup for NETServer Routing OverviewLAN-to-LAN Routing IPX routing LAN-to-LAN Routing An Introduction to NETServer Routing NETServer Routing LAN-to-LAN Routing Static vs. Dynamic Routes How RIP Dynamically Builds the Routing Table How Packets are Routed Establishing Connections to Remote Gateways Routing Procedure PAP/CHAP Authentication PAP Password Authentication Protocol Chap Setup for the NETServer Chap Challenge Example LAN-to-LAN Routing Detailed Setup Configuring the Port Creating a Dial-Out Group Create a new location table entry Adding a Remote Device to the Location TableSet Required Location Parameters This is the remote device’s IP address Set location location name netmask netmask Dial Group Number Multiple lines for a single connection Maximum Ports Create a Dial Script Set location Chicago script 1 atds slot#\r Connect Create a User Table Entry Adding the Remote Device to the User TableTell the NETServer about the Remote Device Set user user name protocol ppp slip Set netuser user name compression on off LAN-to-LAN Routing Case Study Setting Up NETServer a Add netuser nsb password xyzabc Setting Up NETServer B Now, save your work and reset the ports Testing the Connection Connecting to NETServer a from NETServer B What If I Don’t Want to Use Chap Authentication? TCP/IP Modem Sharing Configure the port as a host deviceChapter Talking to the Modems Assign the modem a TCP port number Save your work and reset the port Turn modem control carrier detect off Implementing Security with Host Device Dial Out Configuring modems as Unix pseudo TTYs Talking to the Modems Add a New Initialization Script Modem Initialization ScriptsHow To Assign Text to an Initialization Script Delete an Initialization Script Use an Existing Initialization ScriptDisplaying an Initialization Script Default initialization string Initialization Script Example Sending AT commands to the modems Talking to the Modems Packet Filters Chapter Packet FiltersPacket Filters Types of Filters Packet Filters and the NETServer Input filters vs. Output filters Information Sources Adding Packet Filters Input filters vs. Output filters Rule Type Filter Rule FormatName Permit or Deny Rule NumberOptions TCP/IP packet filtering Destination Address TCP and UDP parameters Standard Port Numbers TCP UDP Filtering RIP messages FTP Packet Filtering Client opens a control channel FTP Example Filtering Icmp packets Type Description IPX packet filtering IPX Rules Dsthost SAP Rule Options Delete a Packet Filter Rule Editing Packet FiltersEdit a Packet Filter Delete a Packet Filter View a Packet Filter View the Packet Filter Table Changing the command prompt Chapter Administrative ToolsConfiguring the !root account Root Access Telnet Access Port Dial Command Manually Connecting to a Remote SiteNslogin, Rlogin and Telnet Commands Troubleshooting Commands Viewing Debug messages Turn off the output console by typing the following Ifconfig MTU Ping Ptrace Traceroute Version Show command Show Show arp Show flash Show memory Show netconns Show netstat Show sap Show sessions Administrative Tools Global Configuration Chapter Command ReferenceCommand Reference Get help View the Global Configuration TableSave Changes Assigned Address Default HostGlobal user parameters Connect Message Randomize Hosts Default Gateways Global routing parameters Default Route IP Address Spoofing Proxy ARP NetBIOS Packet PropagationPAP Authentication System Name Service Name ServiceServer name DNS Cache Reset Time-out Domain name Alternate Radius Server Radius securityPrimary Radius Server Radius Secret Radius Accounting Syslog Accounting Icmp Logging Delete a Host Hosts TableAdd a Host View the Hosts Table Add a Location to the Location Table Bring Up the List of CommandsLocation Table Change a Location’s Parameters View the Location Table Save Location Table ChangesView a Particular Location Location Table Parameters Connection Type Netmask IP AddressIPX Network Routing ProtocolCompression Dial Group Maximum Ports Idle Time-out High Water Mark MTU PPP Async Map Input Filter Output FilterDial Script Send Reply LAN Port Net0 Configuration Reset the Network Interface Card LAN Port Parameters View LAN Port ConfigurationEthernet Status Configured Ethernet Media Interface Address Broadcast Address IPX Frame Type Set net0 ifilter filter name Delete a netmask Netmask TableAdd a netmask View the netmask table Save Port Configuration Change a Port’s Parameters To view all of the S-ports, use the following command View the Ports Table Idle Port is idle View an Individual Port Determining a Port’s Type User LoginHost Device Device Service Network Dial In Port Parameters Login MessageLine Hangup Login Prompt Security Pass-Thru Login Dialback Delay User Login Port ParametersAutolog Name Host Login Service Terminal Type Hardwired Port Parameters IPX Network Number Set s0 netmask netmask NETServer sends RIP information across Databits Serial Communications ParametersPort Speed Stopbits Host Override ParityFlow Control Modem Control Add a Route to the Routes Table Routes Table ConfigurationChange a Route’s Information Save Routes Table Changes Delete a Routes Table EntryView the IP Routes Table Viewing the IPX Routes Table Flag Parameter IP Parameters IPX Parameters Save the Snmp Table Changes Snmp TableDelete Snmp Hosts Enabling/Disabling Snmp Read Community Name Snmp Table ParametersView Snmp Table Write Community Name Read Hosts Write Hosts User Table Add a User to the User Table Save User Table Changes Change a User’s ParametersDelete a User View the User Table Access Filter Login User ParametersDialback Number Set user name service rlogin telnet netdata portmux Command Reference Network User Parameters Dialback IPX connections require the PPP protocol NETServer sends RIP information to the dial Set user filter name ofilter filter name Command Reference Appendix a Technical Specifications 16 port NETServer Hardware Maximum Input Power Power RequirementsMaximum Output Power Typical Input Power Technical Specifications A-3 External Serial Port Console Ethernet Network Interface Card 10Base-T 10Base-2 BNC SignalTechnical Specifications A-5 Isolated GND Technical Specifications Technical Specifications A-7 Token Ring⎯STP ConnectorToken Ring Network Interface Card Token Ring⎯UTP Connector Technical Specifications A-9 NETServer Firmware SpecificationsAdministration Routing Support Industry Standards Support PPP Specific FeaturesClient Dial-up Support Technical Specifications A-11 Slip and PPP Client Software Support Technical Specifications IP Addressing Basics Appendix B Addressing SchemesIPX Addressing Basics Addressing Schemes B-1 Subnetting Address ClassesAddressing Schemes Mask Binary Subnets Hosts Addressing Schemes B-3 Reserved Addresses Supernetting Advanced TCP/IP Addressing Schemes B-5 Cidr Each Supernet is treated as a single entity Addressing Schemes B-7 Step two Select a range of addresses for each supernet Addressing Schemes B-9 Supernetting and the NETServer Appendix C Software Download SDL Using a Direct Connection to a PCWhy Perform an SDL Software Download? Software Download C-1 Loading the Software Download SDL Program Make Backup Copies of the NETServer FirmwareSoftware Installation Starting SDL SDL Command Syntax Software Download C-3 Optional -d Parameter Filename Prefixes Entering SDL Mode Software Download C-5 From the Windows Management Software Upgrading NETServer Firmware Upgrading the Modem Firmware Software Download C-7 For the Isdn NETServer, the file names are Error Messages Software Download C-9 PC SDL program detected unknown command line argu- ments Software Download C-11 Invalid Control Word Software Download C-13 File you are trying to download is not a NETServer file Appendix D Boot Process Boot Process D-1 Boot Process Appendix E Syslog Accounting Using SyslogSyslog Accounting E-1 Syslog System Message Format Syslog System MessagesSpotting Unused Ports Syslog Accounting Syslog System Message Examples Syslog Accounting E-3 Someone has logged in as !root on port S16 Syslog Accounting E-5 Syslog Accounting Appendix F Obtaining Radius Security a Centrally Managed User Table Setting Up Radius User Table Entries Authentication Items Response Items Radius F-5 Framed-Netmask Radius F-7 User Types Radius F-9 Making NETServer talk to a Radius security server Chap authentication using Radius Radius accounting fields Acct-Delay-TimeRadius Accounting Acct-Status-Type Acct-Authentic Accounting ExamplesAcct-Session-Time Radius Alphabetical Index Index Index Icmp MTU NIC PPP SAP Slip Index Index