Toolpack: Configuring RADIUS Client

Applies to version(s): v2.6

This page describes how to configure a RADIUS client for CDR accounting.

• Version 2.6 adds new features to the Radius Client:
  • Multiple Radius servers can be configured for redundancy
  • CDR text fallback
  • Improved connection management to the Radius Server
  • Better performance - concurrent requests
  • More status information
  • Configurable record queue size

• Radius requests will be sent from the TMG management port (mgmt0) or from the Virtual IP Interfaces if they are configured.

1- Select RADIUS from the navigation panel.

2- In the Editing RADIUS client configuration page, you can modify some general parameters:

• Timezone will use the local timezone or the GMT timezone in the CDR entries
• Time format describes how to display the time in human readable format in the CDR entries. This is based on the strftime function
• In advanced Parameters you have:
  • Maximum accounting concurrent records is the maximum number of simultaneous accounting records to be sent to the Radius servers. This improves the Radius performance of the system. Default value is 10.
  • Maximum accounting queued records is the maximum number of accounting records to queue when the maximum number of pending records has been reached.
  • Click Save to save your changes.

2- Select Create New Radius Server to add one more Radius server

• Configure the Radius server with these parameters:
  • Name to recognize the server
  • Radius server address and port is the IP address and port of the RADIUS server we want to access. The format is x.x.x.x for the IP and you can add the port with a colon if it is different than the default port 1813 (for example 10.10.10.10:12345)
  • Radius timeout is the request timeout in milliseconds for each request to this server.
  • Radius retries is the number of retries the Radius client will try before falling back to other methods. See full details on functionality here: CDR redundancy
  • Server secret is the passphrase to authenticate the TMG on the Radius server.

3- You can configure multiple Radius servers to have Radius redundancy. Each entry can have different timeouts and retries.