292
Appendix D. RADIUS Accounting
This section is trying to organize the basic configuration with RADIUS server to work with VSA. The aim is
trying to control the maximum usage (upload; download or download traffic) of clients in each
session.
This
VSA
will send from RADIUS server to gateway along with an
Access-Accept
packet. In other words,
when the external RADIUS server accepts the request, it will not only reply with an
Access-Accept
and it will
also carry a maximum value in bytes that each user is allowed to transfer. This value may be the maximum
upload traffic; download traffic or the summation of each user’s download plus upload traffic in bytes.
Gateway will check this value every minute, if the user is reached this value, gateway will stop the session of
this user and send a “Stop” to RADIUS server.
1. Description
This Attribute is available to allow vendors to support their own extended Attributes not suitable for general
usage. It MUST not affect the operation of the RADIUS protocol.
The standard
Attribute Type
of VSA is “26”. Also we need to know the “
Vendor ID
”, in this example; the
Vendor ID
of LevelOne is “31932”. There must have other attribute to define the amount of traffic with
“
Attribute Number
” and “
Attribute Value
”:
Attribute Name
Attribute Number
Attribute Value
LevelOne-Byte-Amount
10
To be defined by administrator for different user group
LevelOne-MaxByteIn
11
To be defined by administrator for different user group
LevelOne-MaxByteOut
12
To be defined by administrator for different user group
LevelOne-Byte-Amount-4GB 20
To be defined by administrator for different user group
LevelOne-MaxByteIn-4GB
21
To be defined by administrator for different user group
LevelOne-MaxByteOut-4GB
22
To be defined by administrator for different user group
If the amount of traffic is larger than 4 GB, then the attribute of “XXXX-4GB” is for the carry. For example, if
the amount is 5 GB, you must set “LevelOne-Byte-Amount = 1048576” and “LevelOne-Byte-Amount-4GB =
1”.
On the other hand, if administrator fills in all attributes, it means that if any condition is reached, the user will
be kicked out from system. For example, if administrator set “LevelOne-Byte-Amount = 1048576”; “LevelOne-
MaxByteIn = 1048576” and “LevelOne- MaxByteOut = 1048576”. It means that whatever the downlink or
uplink or total traffic exceeded the limit, the user will be kicked out from system.
Summary of Contents for WHG-311
Page 1: ...LevelOne Secure WLAN Controller WHG 311 315 401 505 515 707 User Manual...
Page 61: ...61...
Page 67: ...67...
Page 103: ...103...
Page 118: ...118...
Page 250: ...250 price duration serial number number is account s n...
Page 252: ...252...
Page 268: ...268...
Page 273: ...273 4 Select root certification and then click View Certificate 5 Click Install Certificate...
Page 275: ...275 8 Click Finish...
Page 307: ...307 P N VWHG50020110601...