Chapter 25 AAA Server
NXC Series User’s Guide
311
Backup Server
Address
If the RADIUS server has a backup authentication server, enter its address here.
Backup
Authentication
Port
Specify the port number on the RADIUS server to which the NXC sends authentication
requests. Enter a number between 1 and 65535.
Key Enter a password (up to 32 alphanumeric characters) as the key to be shared between the
external authentication server and the NXC.
The key is not sent over the network. This key must be the same on the external authentication
server and the NXC.
Change of
Authorization
The external RADIUS server can change its authentication policy and send CoA (Change of
Authorization) or RADIUS Disconnect messages in order to terminate the subscriber’s service.
Select this option to allow the NXC to disconnect wireless clients based on the information
(such as client’s user name and MAC address) specified in CoA or RADIUS Disconnect
messages sent by the RADIUS server.
Accounting Server Settings
Server Address Enter the IP address or Fully-Qualified Domain Name (FQDN) of the RADIUS accounting server.
Accounting Port Specify the port number on the RADIUS server to which the NXC sends accounting
information. Enter a number between 1 and 65535.
Backup Server
Address
If the RADIUS server has a backup accounting server, enter its address here.
Backup
Accounting Port
Specify the port number on the RADIUS server to which the NXC sends accounting
information. Enter a number between 1 and 65535.
Key Enter a password (up to 32 alphanumeric characters) as the key to be shared between the
external authentication server and the NXC.
The key is not sent over the network. This key must be the same on the external authentication
server and the NXC.
Maximum Retry
Count
At times the NXC may not be able to use the primary RADIUS accounting server. Specify the
number of times the NXC should reattempt to use the primary RADIUS server before
attempting to use the secondary RADIUS server. This also sets how many times the NXC will
attempt to use the secondary RADIUS server.
For example, you set this field to 3. If the NXC does not get a response from the primary
RADIUS server, it tries again up to three times. If there is no response, the NXC tries the
secondary RADIUS server up to three times.
If there is also no response from the secondary RADIUS server, the NXC stops attempting to
authenticate the subscriber. The subscriber will see a message that says the RADIUS server
was not found.
Accounting Interim
update
This field is configurable only after you configure a RADIUS accounting server address.
Select this to have the NXC send subscriber status updates to the RADIUS server at the interval
you specify.
Interim Interval Specify the time interval for how often the NXC is to send a subscriber status update to the
RADIUS server.
General Server Settings
Timeout Specify the timeout period (between 1 and 300 seconds) before the NXC disconnects from
the RADIUS server. In this case, user authentication fails.
Search timeout occurs when either the user information is not in the RADIUS server or the
RADIUS server is down.
NAS IP Address If the RADIUS server requires the NXC to provide the Network Access Server IP address
attribute with a specific value, enter it here.
Table 151 Configuration > Object > AAA Server > RADIUS > Add/Edit (continued)
LABEL DESCRIPTION
To Next Page
Loading...
