Configuring the local database accounts
108
IPLink Software Configuration Guide
9 • RADIUS Client Configuration
Attributes in the RADIUS accept message
After the user and his credentials are approved by the authentication procedure on the RADIUS server, the
IPLink expects a RADIUS accept message with the following attributes:
Most of the attributes are standard RADIUS attributes and are supported by the RADIUS servers. You have to
specify a value for each of them as it is described in your RADIUS server’s user manual.
The attribute Protocol (26) is vendor specific and defined by Patton. Servers not equipped to interpret the ven-
dor-specific information will ignore it. It is defined as follows:
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Vendor-Id
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Vendor-Id (cont) | Vendor-Type | Vendor-Length |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Vendor-String ...
+-+-+-+-+-+-+-+-+-+-+-+-
Type: 26
Length: Length of the whole attribute including the vendor data
Vendor-Id: 1768
Vendor-Type: 16
Vendor-Length: Length of all vendor data including Vendor-Type and Vendor-Length
Vendor-String: Not null terminated String with the value console or Telnet
Configuring the local database accounts
The final step in configuring the authentication and authorization service in IPLink software is to set up local
user accounts. The local database—which is queried with the AAA method local as described previously—can
contain administrator and operator accounts. For example, to grant access to the local IPLink if all RADIUS
Attribute
number
Attribute Type
Description
6
Service-Type
If the value is set to 'administrative', the user has administrator rights on
the IPLink, otherwise operator rights
18
Reply-Message
Contains the text that is printed to the user after login. If the attribute is not
included in the message, no text will be printed
27
Session-Timeout
Number of seconds the user is allowed to logged on. If the attribute is
not included, the default value is infinite
28
Idle-Timeout
Number of seconds to stay in idle state before automatic logout pro-
ceeds. If the attribute is not included, the default value is 30 minutes. The
command
terminal idle-time-logout
overwrites the value set by the
attribute