PureStream PureLink VIP-NET-M28A Media Hub, User Manual

Page: 137 / 196

VIP-NET-M28A Network Switch - USER MANUAL
VERSION 1.0
AAA (Authentication, Authorization, and Accounting)
An AAA server is an application that provides authentication, authorization, and accounting services for
attempted access to a network. An AAA server can reside in a dedicated computer, an Ethernet switch, an
access point or a network access server. The current standard by which devices or applications
communicate with an AAA server is RADIUS (Remote Authentication Dial-In User Service). RADIUS is a
protocol used between the switch and the authentication server. This page allows you to configure common
settings for an authentication server.
Label Description
Timeout
The timeout, which can be set to a number between 3 and 3600
seconds, is the maximum time to wait for a reply from a server.
If the server does not reply within this time frame, we will consider
it to be dead and continue with the next enabled server (if any).
RADIUS servers are using the UDP protocol, which is unreliable
by design. In order to cope with lost frames, the timeout interval
is divided into 3 subintervals of equal length. If a reply is not
received within the subinterval, the request is transmitted again.
This algorithm causes the RADIUS server to be queried up to 3
times before it is considered to be dead.
Retransmit
The number of times the switch tries to connect to a RADIUS
server.
Dead Time
The dead time, which can be set to a number between 0 and
3600 seconds, is the period during which the switch will not send
new requests to a server that has failed to respond to a previous
request. This will stop the switch from continually trying to contact
a server that it has already determined as dead.
Setting the dead time to a value greater than 0 (zero) will enable
this feature, but only if more than one server has been
configured.
NAS-IP-Address
Indicates the identifying IP Address of the NAS which is
requesting authentication of the user, and SHOULD be unique to
the NAS within the scope of the RADIUS server.
NAS-ID
Network Access Server identifier (NAS-ID) for the interface. The
NAS-ID is sent to the RADIUS server by the controller (as a
RADIUS client) using the authentication request, which is used
to classify users to different groups. You can enter up to 32
alphanumeric characters.