Toolpack: Configuring RADIUS Client
From TBwiki
Revision as of 10:33, 9 July 2012 by Luc Morissette (Talk | contribs)
Applies to version(s): v2.6
This page describes how to configure a RADIUS client for CDR accounting.
- Version 2.6 adds new features to the Radius Client:
- Multiple Radius servers can be configured for redundancy
- CDR text fallback
- Improved connection management to the Radius Server
- Better performance - concurrent requests
- More status information
- Configurable record queue size
- Radius requests will be sent from the TMG management port (mgmt0) or from the Virtual IP Interfaces if they are configured.
1- Select RADIUS from the navigation panel.
2- In the Editing RADIUS client configuration page, you can modify some general parameters:
- Timezone will use the local timezone or the GMT timezone in the CDR records
- Time format describes how to display the time in human readable format in the CDR records. This is based on the strftime function
- In Advanced Parameters you have:
- Maximum accounting concurrent records is the maximum number of simultaneous accounting records to be sent to the Radius servers. This improves the Radius performance of the system: it allows the RADIUS client to deal with servers that have high latency relative to the number of request/responses per second to be achieved. Default value is 10 records.
- Maximum accounting queued records is the maximum number of accounting records to queue when the maximum number of pending records has been reached. When the maximum number of queued messages is reached, CDR records will be dropped. To prevent this, make sure the system supports CDR redundancy. Default value is 12000 records.
- Click Save to save your changes.
2- Select Create New Radius Server to add one more Radius server
- Configure the Radius server with these parameters:
- Name to recognize the server
- Radius server address and port is the IP address and port of the RADIUS server we want to access. The format is x.x.x.x for the IP and you can add the port with a colon if it is different than the default port 1813 (for example 10.10.10.10:12345)
- Radius timeout is the request timeout in milliseconds for each request to this server.
- Radius retries is the number of retries the Radius client will try before falling back to other methods. See full details on functionality here: CDR redundancy
- Server secret is the passphrase to authenticate the TMG on the Radius server.
3- You can configure multiple Radius servers to have Radius redundancy. Each entry can have different timeouts and retries.
