Actelis Networks ML700 - RADIUS Message Parameters Supported by ML

Security Management RADIUS
12-18 User Manual ML700
4. Define the Method of access to the ML device:
 Local (ML factory default) - access is verified according to the user information
stored in the ML device.
 Radius and Local - the Radius server (including backup Server) and then locally
stored on ML user information is queried for authentication.
 Radius - only the Radius can authenticate access. If the Radius is not available, then
access the ML is not allowed.
5. If a backup Radius Server exists, under Backup Server:
 Check-mark the Enable option
 Enter the IP address of the backup Radius Server.
NOTE: If a backup server is not defined (0.0.0.0 by default) query is skipped. If both
Servers are configured with the same IP, queries will be sent twice (if no reply from
Primary Server).
6. Click OK.
RADIUS Message Parameters Supported by ML
From R6.0 and higher, RADIUS on ML supports:
 PAP (Password Authentication Protocol). (CHAP (Challenge Handshake Authentication
Protocol) is not supported, where CHAP messages are discarded by the system.)
 Authentication only (RFC 2865). All account messages (supported in RFC2866) are
discarded by the system.
ML devices support either group of the Message Parameters
Table 56: Group I - Message Parameters Supported by ML
Type
Name
Length
Description
Message(s)
1
User-Name
3-63 chars
the name of the user to be authenticated
Access-Request/
Access-Accept
2
User-
Password
16-128
chars
the password of the user to be
authenticated
Access-Request
4
NAS-IP-
Address
IP Address of the ML (MUST be used
to select the shared secret)
Access-Request
5
NAS-Port
Indicates the physical port number of the
NAS, which is authenticating the user.
Access-Request
Table 57: Group II - Message Parameters Supported by ML
Type
Name
Length
Description
Message(s)
61
NAS-Port-
Type
The type of the physical port:
15 - Ethernet
16 - xDSL - Digital Subscriber Line of
unknown type