3Com MSR 50 Series, Руководство по настройке

Страница: 2412 / 2443

2412 C
HAPTER
139: V
OICE
RADIUS C
ONFIGURATION
n
■
For direct inward dialing (DID), it is unnecessary to dial an access number
before a called number, relative to two-stage dialing.
■
If you want to prohibit users from making calls when their account balance in
the RADIUS server which is a composite access management server (CAMS) is
0, and allow them to make calls when there is sufficient account balance, you
must configure the authentication, authorization, and accounting functions on
the voice gateway. This rule applies to one-stage dialing users and two-stage
dialing users.
■
Calls will be released in the case of an accounting failure.
Enabling Authentication
Function for One-Stage
Dialing Users
For one-stage dialing users, there is no access number. It is impossible to enable
the authentication function for an individual user according to the identification.
Therefore, the authentication function can only be enabled for all one-stage
dialing users.
Before enabling the authentication function, you must ensure that the RADIUS
server and RADIUS client (voice gateway) can communicate with each other at the
network layer and that a list of one-stage dialing users as well as authentication
policies has been configured on the RADIUS server.
Configuration prerequisites
A voice interface card (for example, an FXS interface card) is inserted in the router.
Configuration procedure
Follow these steps to enable the authentication function for one-stage dialing
users
Enabling Authorization
Function for One-Stage
Dialing Users
Similar to the authentication function, it is impossible to enable the authorization
function for an individual one-stage dialing user according to the identification
because there is no access number. Therefore, the authorization function can only
be enabled, if necessary, for all one-stage dialing users.
Before enabling the authorization function, you must ensure that the
authentication function is enabled on the RADIUS client, that the RADIUS server
and RADIUS client can communicate with each other at the network layer, and
that a list of one-stage dialing users as well as authorization policies has been
configured on the RADIUS server.
Enable the accounting
function for one-stage dialing
users accounting-did Required
Disabled by default
To do... Use the command... Remarks
To do... Use the command... Remarks
Enter system view system-view -
Enter voice view voice-setup -
Enter voice AAA client view aaa-client -
Enable the authentication
function for one-stage dialing
users authentication-did Required
Disabled by default.