IP Routing
6-9
8000-A2-GB21-20
November 1997
RADIUS Authentication
If the authentication server is a RADIUS server, an Access-Request message will
have the following format:
The
user_name
will be the end-user’s user ID as received by the DSLAM in
the type 0 client ID field of the DHCP request.
If the end-user request does not contain a user ID, the corresponding domain
name is used as the
user_name
.
The
password
will always be
hotwire.
The passwords configured at the authentication server should not be set with
an expiration time.
The
NAS-IP
will be the DSL card’s e1a address (gateway address)
associated with this domain.
The
NAS-PORT
will be the port number that received the end-user’s request.
The
service type
will be
Authentication-Only.
The
RADIUS Secret
value used for encryption is configured on the DHCP
Relay Server screen.
The authentication request is sent to UDP port 1812 (as specified in RFC 2138).
If an
Access-Accept
message is returned, the DHCP request is relayed to the
DHCP server.
XTACACS Authentication
If the authentication server is an XTACACS server, a Login message will have the
following format:
The
user_name
will be the end-user’s user ID as received by the DSLAM in
the type 0 client ID field of the DHCP request.
If the end-user request does not contain a user ID, the corresponding domain
name is used as the
user_name
.
The
password
will be the e1a IP address (gateway address) associated
with this domain in ASCII dotted decimal format.
The passwords configured at the authentication server should not be set with
an expiration time.
The
local_line
will be the port number that received the end-user’s
request.
The authentication request is sent to UDP port 49 (as specified in RFC 1492).
If the authentication request is successful, the DSLAM sends a
LOGOUT
message
to the XTACACS server and the DHCP request is relayed to the DHCP server.
