User manual XC-32 XC-320 XC-4200
XI.2 - Radius
XI.2.1 - Introduction
Radius is a client-server protocol aiming at centralizing the users authentication on a
dedicated server (see RFC 2138).
To use Radius terminology, we will call Xcell NAS (Network Access Server).
The obvious interest of this protocol is the fact that it enables to manage all the accesses
to an information site with only one users database, and whatever the type and number of
NAS may be.
In addition to its authentication function, a RADIUS server also enables to rule the
connection type and parameters, (PPP, telnet, admin, asynchronous or/and RNIS access,
connection time...), according to the user who wish to connect.
An extension of the Radius protocol, (RFC 2139), also enables to count the connections.
You can thus keep a track of the connections made by all the users (name, connection
length, amount of informations transmitted and received, cause of the end of session).
The working process of Xcell integrated Radius client is the following :
A user authentication request, (login, PAP, CHAP), is first locally analysed. If Xcell
contains a suitable user account, connection type and parameters are managed by Xcell.
When the session starts, Xcell sends a starting signal to the RADIUS server (START).
When the session ends, Xcell transmits an ending signal (STOP).
If Xcell cannot manage to authenticate the user, the request is transmitted to the RADIUS
server. If RADIUS accepts the request, it will transmit the connection type and parameters
to Xcell. Later, informations about beginning and end of session are transmitted to
RADIUS.
XI.2.2 - Xcell-hold Radius attributes
Attribute
Definition
Notes
User-Name
Name of the user to identify.
Maximum size : 16
alphanumerical characters
User-Password
User password
Maximum size : 8
alphanumerical characters
CHAP-Password
Challenged user answer
emitted by the NAS
Size : 128 bits
NAS-IP-Address
NAS IP address
NAS-Port
Asynchronous port or ISDN
channel number
NAS-Port-Type
Port type
Asynchronous or ISDN
-81-
