Toolpack:Adding RADIUS server D

From TBwiki
(Difference between revisions)
Jump to: navigation, search
(Created page with "=== '''''Applies to version(s): v2.9''''' === {{DISPLAYTITLE:Toolpack: Adding RADIUS Server(s)}} Multiple RADIUS servers can be configured to provide RADIUS redundancy. 1- S...")
 
 
(10 intermediate revisions by 2 users not shown)
Line 1: Line 1:
=== '''''Applies to version(s): v2.9''''' ===
 
 
{{DISPLAYTITLE:Toolpack: Adding RADIUS Server(s)}}
 
{{DISPLAYTITLE:Toolpack: Adding RADIUS Server(s)}}
 +
{| class="wikitable"
 +
|-
 +
|rowspan="3"|This article applies to:
 +
|'''Product'''
 +
|'''Version'''
 +
|-
 +
|Tmedia
 +
|2.9, 2.10, 3.0, 3.2
 +
|-
 +
|SBC
 +
|3.0, 3.1
 +
|}
 +
 +
These instructions are used to add a RADIUS accounting server or a RADIUS authorization server target to the configuration.
 +
 +
[[Call_detail_record|Call Detail Records (CDR)]] or Call authorization requests will be sent to these servers.
 +
 
Multiple RADIUS servers can be configured to provide RADIUS redundancy.
 
Multiple RADIUS servers can be configured to provide RADIUS redundancy.
  
Line 6: Line 22:
 
1- Select '''RADIUS''' from the navigation panel.
 
1- Select '''RADIUS''' from the navigation panel.
  
[[Image:EnableCdr_0.png|border]]
+
[[Image:Select_radius_config.png|border]]
  
  
Line 16: Line 32:
 
3- Configure the RADIUS server with these parameters:
 
3- Configure the RADIUS server with these parameters:
 
*'''Name''' to recognize the server.
 
*'''Name''' to recognize the server.
*'''RADIUS server address and port''' is the IP address and port of the RADIUS server we want to access. The format is x.x.x.x for the IP and you can add the port with a colon if it is different than the default port 1813 (for example 10.10.10.10:12345)
+
*'''Server IP address''' is the IP address of the RADIUS server we want to access.
*'''RADIUS timeout''' is the request timeout in milliseconds for each request to this server.
+
*'''Server UDP Port''' is the UDP port of the RADIUS server we want to access (default port is 1813 for accounting and 1812 for authorization/authentication)
*'''RADIUS retries''' is the number of retries the RADIUS client will try before falling back to other methods. See full details on functionality here: [[CDR redundancy|CDR redundancy]]
+
*'''Server type''' is Accounting for [[CDR]] and Authorization for [[Toolpack:Call_Routes_Settings_B#RADIUS_Authorization_and_Authentication|Authorization and Authentication]].
 
*'''Server secret''' is the passphrase to authenticate the TMG on the RADIUS server.
 
*'''Server secret''' is the passphrase to authenticate the TMG on the RADIUS server.
  
[[Image:AddRadiusServers_1.png|border]]
+
Advanced Parameters:
 +
*'''Public IP address''' is used if the TMG is behind a NAT
 +
*'''Timeout''' is the request timeout in milliseconds for each request to this server.
 +
*'''Retries''' is the number of retries the RADIUS client will try before falling back to other methods. See full details on functionality here: [[CDR redundancy|CDR redundancy]]
 +
 
 +
 
 +
[[Image:Creating_new_radius_server.png|border]]
  
  
Line 33: Line 55:
 
'''Path'''
 
'''Path'''
 
<pre>
 
<pre>
 +
/configurations/@[configuration_name]/radius_servers/@[radius_server]
 
</pre>
 
</pre>
  
 
'''Parameters (text)'''
 
'''Parameters (text)'''
 
<pre>
 
<pre>
 +
/configurations/@[configuration_name]/radius_servers/@[radius_server]
 +
ip_address          = "@[address_number]"
 +
name                = "@[radius_server]"
 +
port                = @[port_number]
 +
secret              = "@[secret]"
 +
type                = "Accounting"
 +
 +
/configurations/@[configuration_name]/radius_servers/@[radius_server]/advanced_parameters
 +
associated_authorization_server = ""
 +
ip_header_tos                  = 0
 +
polling_delay                  = "5 seconds"
 +
polling_enabled                = false
 +
public_ip_address              = ""
 +
retries                        = 2
 +
timeout                        = "10 seconds"
 
</pre>
 
</pre>
  
 
'''Parameters (json)'''
 
'''Parameters (json)'''
 
<pre>
 
<pre>
 +
{
 +
  "advanced_parameters" : {
 +
    "associated_authorization_server" : "",
 +
    "ip_header_tos" : 0,
 +
    "polling_delay" : "5 seconds",
 +
    "polling_enabled" : false,
 +
    "public_ip_address" : "",
 +
    "retries" : 2,
 +
    "timeout" : "10 seconds"
 +
  },
 +
  "ip_address" : "@[address_number]",
 +
  "name" : "@[radius_server]",
 +
  "port" : @[port_number],
 +
  "secret" : "@[secret]",
 +
  "type" : "Accounting"
 +
}
 
</pre>
 
</pre>
 
</div>
 
</div>
 +
 +
 +
==List of Parameters==
 +
* [[Parameter: Name|Name]]
 +
* [[Parameter: Server IP address|Server IP address]]
 +
* [[Parameter: Server UDP port|Server UDP port]]
 +
* [[Parameter: Server type|Server type]]
 +
* [[Parameter: Server secret|Server secret]]
 +
 +
Advanced Parameters
 +
* [[Parameter: Public IP address|Public IP address]]
 +
* [[Parameter: Timeout|Timeout]]
 +
* [[Parameter: Retries|Retries]]
 +
* [[Parameter: Associated server|Associated server]]
 +
* [[Parameter: Use polling (Status-Server)|Use polling (Status-Server)]]
 +
* [[Parameter: Polling delay|Polling delay]]
 +
* [[Parameter: IP Header Type of Service (ToS)|IP Header Type of Service (ToS)]]

Latest revision as of 14:10, 9 December 2020

This article applies to: Product Version
Tmedia 2.9, 2.10, 3.0, 3.2
SBC 3.0, 3.1

These instructions are used to add a RADIUS accounting server or a RADIUS authorization server target to the configuration.

Call Detail Records (CDR) or Call authorization requests will be sent to these servers.

Multiple RADIUS servers can be configured to provide RADIUS redundancy.


1- Select RADIUS from the navigation panel.

Select radius config.png


2- In the Editing RADIUS client configuration page, select Create new RADIUS server

AddRadiusServers 0.png


3- Configure the RADIUS server with these parameters:

  • Name to recognize the server.
  • Server IP address is the IP address of the RADIUS server we want to access.
  • Server UDP Port is the UDP port of the RADIUS server we want to access (default port is 1813 for accounting and 1812 for authorization/authentication)
  • Server type is Accounting for CDR and Authorization for Authorization and Authentication.
  • Server secret is the passphrase to authenticate the TMG on the RADIUS server.

Advanced Parameters:

  • Public IP address is used if the TMG is behind a NAT
  • Timeout is the request timeout in milliseconds for each request to this server.
  • Retries is the number of retries the RADIUS client will try before falling back to other methods. See full details on functionality here: CDR redundancy


Creating new radius server.png


4- You can configure multiple RADIUS servers to provide redundancy protection for RADIUS servers. Each entry can have different settings.

AddRadiusServers 2.png


Path

/configurations/@[configuration_name]/radius_servers/@[radius_server]

Parameters (text)

/configurations/@[configuration_name]/radius_servers/@[radius_server]
ip_address          = "@[address_number]"
name                = "@[radius_server]"
port                = @[port_number]
secret              = "@[secret]"
type                = "Accounting"

/configurations/@[configuration_name]/radius_servers/@[radius_server]/advanced_parameters
associated_authorization_server = ""
ip_header_tos                   = 0
polling_delay                   = "5 seconds"
polling_enabled                 = false
public_ip_address               = ""
retries                         = 2
timeout                         = "10 seconds"

Parameters (json)

{
  "advanced_parameters" : {
    "associated_authorization_server" : "",
    "ip_header_tos" : 0,
    "polling_delay" : "5 seconds",
    "polling_enabled" : false,
    "public_ip_address" : "",
    "retries" : 2,
    "timeout" : "10 seconds"
  },
  "ip_address" : "@[address_number]",
  "name" : "@[radius_server]",
  "port" : @[port_number],
  "secret" : "@[secret]",
  "type" : "Accounting"
}


List of Parameters

Advanced Parameters

Personal tools