Bay Networks Bay Dial VPN, Configuration And Troubleshooting Manual

Page: 82 / 186

Configuring and Troubleshooting Bay Dial VPN Services
6-2 BayStream Multiservice Software Version 7.2 115623B Rev. 00
Figure 6-1. Simplified Dial VPN Network
The RADIUS server on the service provider network includes a TMS database,
indexed by the domain name-DNIS pair. The fields in the database are the same as
those described for TMS in the previous chapter.
The RADIUS server parses the domain and DNIS identifier from the Username
field in the access request message and matches it against these fields in the
RADIUS TMS database.
The RADIUS server also maintains an active count of the number of sessions or
links to a particular user from a particular client. If this count exceeds the
specified limit, the RADIUS server rejects the authentication request. The
resource tracking starts with the authentication request. The server uses RADIUS
accounting information to confirm and decrement the count.
The NAS recognizes the returned tunnel attributes of the authentication request
and passes the information to its internal TMS client. The TMS client retrieves the
tunnel information it needs from the RADIUS attributes it receives in the access
acceptance message.
Tunnel
Network
access server
(NAS)
Gateway
PPP
connection
Service
provider network
Frame Relay
connection
DVS0011A
Remote
node
Tunnel
management server
/Service provider
RADIUS server
RADIUS
Client
CPE
router
Customer
"Home"
network
Customer
RADIUS
server
User
data
Tunnel
domain
data