Chapter 6: Authenticated DHCP
Configuring Authenticated DHCP
Configuration of the DHCPatriot system for use with authenticated DHCP is slightly
more involved than configuration for standard DHCP. The following sections outline
each element that must be configured in order to use authenticated DHCP. Generally
speaking: an Authentication server or servers must be specified; at least the default
Captive Portal definition must be configured; a Shared Network must be setup; at least
one Unauthenticated and one Authenticated subnet must be added. Instructions for
each of these things follow as well as other less mandatory things related to
authentication including report viewing. Not all topics are covered here as some are
covered elsewhere in the manual in more appropriate sections.
Authentication Servers
There are two types of Authentication Servers, the internal (local) or built-in server, and
an external RADIUS server.
These two types of servers are
generally mutually exclusive,
however, there is nothing
preventing you from configuring
both in some type of failover
manner, or using one for
authentication and the other for
accounting records. To enter
the Authentication server
configuration area, expand the
Auth DHCP Config menu and
click on Authentication. You
should get a screen that looks
like figure 6.1.
Please note that as of 5.3.0,
two features have been
addded. A new packet, interim-update (ALIVE) accounting packets can be sent from
the DHCPatriot system to the RADIUS server. Turning this setting on in System
Configuration -> General Setup will cause the DHCPatriot system to send an ALIVE
packet each time the lease is renewed. This could be problematic on systems with
many broken devices sending lots of renews rapidly. Secondly, forwarding of RADIUS
accounting packets to one or more arbitrary destinations has been added. A new type
of server (AFOR) has been added to the authentication setup. The DHCPatriot does
not wait for an accounting response with these types of destinations. This feature can
be used for sending accounting data to Sandvine or Procera traffic shapers or various
CALEA devices, for example.
Chapter 6: Authenticated DHCP
32
DHCPatriot Version 6 Operations Manual This document © 2017 First Network Group Inc. All Rights Reserved
Figure 6.1
Summary of Contents for DHCPatriot Version 6
Page 1: ...Operations Manual Version 6...
Page 2: ......
