background image

 

14 

GATEWAY 

REFERENCE GUIDE 

R1C 

14 of 25

 

Chapter 4: Integration 

In this section we detail how to integrate the Gateway towards external systems. 

RADIUS for AAA 

RADIUS interfaces allow for integration towards external Authentication,  Authorization 
and  Accounting  (AAA)  servers.  In  Chapter  3  we  illustrated  how  to  configure  these 
interfaces.  In  this  section  we  provide  technical  specifications  necessary  to  verify 
compatibility with external systems. 

Authentication 

The following RADIUS message types are supported on the authentication interface: 

 

Access-Request

 

 

Access-Challenge

 

 

Access-Accept

 

 

Access-Reject

 

The following table lists the RADIUS attributes supported on the authentication interface, 
as well as the message types that may contain them. 

Table 1: Supported RADIUS authentication attributes. 

Attribute 

Message types 

State 

all 

Message-Authenticator 

all 

NAS-IP-Address 

Access-Request 

NAS-Port-Type 

Access-Request 

User-Name 

Access-Request 

Calling-Station-Id 

Access-Request 

Called-Station-Id 

Access-Request 

Session-Timeout 

Access-Accept, Access-Challenge 

Содержание Carrier Wi-Fi System

Страница 1: ...TEWAY REFERENCE GUIDE Overview Installation Basic Configuration Wi Fi Client Isolation Wi Fi Security Settings IEEE 802 1X and EAP RADIUS for AAA GRE for Payload System Monitoring V stergatan 31 B 211...

Страница 2: ...OTICES Anyfi Networks proprietary Anyfi is a registered trademark of Anyfi Networks AB All other trademarks are the property of their respective owners RELEASE DATE 14th of April 2014 DOCUMENT REVISIO...

Страница 3: ...Tunnel Termination Point 2 Service 2 Chapter 2 Installation 3 Installing as a Virtual Appliance 3 Installing as a Vyatta Package 3 Upgrading to a Newer Version 5 Chapter 3 Configuration 6 Basic Netwo...

Страница 4: ...ERENCE GUIDE R1C UDP IP Port Range 12 Load Balancing and Failover 13 Chapter 4 Integration 14 RADIUS for AAA 14 Authentication 14 Authorization 15 Accounting 17 GRE for User Payload 18 SNMP for System...

Страница 5: ...ts are encouraged to study the materials available at www anyfinetworks com resources Document Conventions This guide contains advisory paragraphs and uses the below typographic conventions Advisory P...

Страница 6: ...command line italics An argument or variable where you supply a value Also concepts and principles when mentioned inline key A key on your keyboard such as Enter Combinations of keys are joined by pl...

Страница 7: ...ta center or mobile core safe in the knowledge that the radio access problem can be separately addressed later The Gateway implements an IEEE 802 11 stack complete with WPA and WPA2 security CCMP AES...

Страница 8: ...utes one or two Basic Service Sets BSSes to an Extended Service Set ESS A single Gateway can contribute millions all the virtual access points allocated on connected SDWN radios Service The IEEE 802 1...

Страница 9: ...d in Open Virtual Appliance OVA format essentially a bundle of virtual machines in one file Each OVA file comes with a Getting Started Guide containing step by step instructions on how to import the e...

Страница 10: ...rks PGP key vyatta vyatta wget http packages anyfinetworks com vyatta pubkey gpg O sudo apt key add Update the software package database vyatta vyatta sudo apt get update Once the repository has been...

Страница 11: ...vyatta vyatta sudo apt get install y anyfi gateway vyatta anyfi gateway Restart the Gateway vyatta vyatta restart anyfi gateway Stopping anyfi gateway anyfi gateway Starting anyfi gateway anyfi gatew...

Страница 12: ...can instead be tunneled out over GRE Enter configuration mode vyatta vyatta configure edit Configure basic IP networking vyatta vyatta set interfaces ethernet eth1 address x x x x xx edit vyatta vyatt...

Страница 13: ...edit service anyfi gateway open gw vyatta vyatta top edit Review changes vyatta vyatta show service anyfi gateway gateway open gw bridge br0 controller x x x x ssid Open Wi Fi edit Commit save and exi...

Страница 14: ...tta show service anyfi gateway gateway 1x gw authentication eap radius secret secret radius server x x x x bridge br0 controller x x x x ssid Secure Wi Fi wpa2 edit Commit save and exit configuration...

Страница 15: ...and or TKIP block ciphers It is also possible to configure the group rekey interval and whether or not to renegotiate the group key after every disassociation strict rekeying Enter configuration mode...

Страница 16: ...ice anyfi gateway 1x gw authentication vyatta vyatta set eap radius secret secret edit service anyfi gateway 1x gw authentication vyatta vyatta top edit Commit save and exit configuration mode vyatta...

Страница 17: ...tta edit service anyfi gateway 1x gw accounting edit service anyfi gateway 1x gw accounting vyatta vyatta set radius server x x x x edit service anyfi gateway 1x gw accounting vyatta vyatta set radius...

Страница 18: ...e Software Defined Networking SDN sense of the word not in the typical corporate WLAN sense For example the Controller is not involved in IEEE 802 1X authentication and does not have access to end use...

Страница 19: ...he service UUID vyatta gw 1 set service anyfi gateway 1x gw uuid uuid edit Commit save and exit configuration mode anyfi gw 1 commit anyfi gw 1 save anyfi gw 1 exit Disconnect from the first Gateway v...

Страница 20: ...rnal systems Authentication The following RADIUS message types are supported on the authentication interface Access Request Access Challenge Access Accept Access Reject The following table lists the R...

Страница 21: ...cess Accept Access Reject Disconnect Request Disconnect ACK Disconnect NAK CoA Request CoA ACK CoA NAK The following table lists the RADIUS attributes supported on the authorization interface as well...

Страница 22: ...s Accept CoA Request WISPr Bandwidth Max Up Access Accept CoA Request WISPr Bandwidth Max Down Access Accept CoA Request Cisco AV Pair url redirect Access Accept CoA Request The following table lists...

Страница 23: ...ge types that may contain them Table 4 Supported RADIUS authentication attributes Attribute Message types Message Authenticator all NAS IP Address Accounting Request NAS Port Type Accounting Request U...

Страница 24: ...bridge br0 edit interfaces tunnel tun0 vyatta vyatta set remote ip x x x x edit interfaces tunnel tun0 vyatta vyatta top edit Commit save and exit configuration mode vyatta vyatta commit vyatta vyatta...

Страница 25: ...rget x x x x community name edit service snmp vyatta vyatta set location location edit service snmp vyatta vyatta set contact contact edit service snmp vyatta vyatta top edit Commit save and exit conf...

Отзывы: