Settings in a radius route profiles, Route settings in a radius user profile – Lucent Technologies 6000 User Manual

Page 422

Advertising
background image

9-58

MAX 6000/3000 Network Configuration Guide

Configuring IP Routing
Configuring IP routes

Settings in a RADIUS route profiles

A route profile is a pseudo-user profile in which the first line has this format:

route-name-N Password = "ascend", Service-Type = Outbound-User

The name argument is the MAX system name (specified by the Name parameter in the System
profile), and N is a number in a sequential series, starting with 1. Make sure there are no
missing numbers in the series specified by N. If there is a gap in the sequence of numbers, the
MAX stops retrieving the profiles when it encounters the gap in sequence.

To specify routes that may be dialed out by more than one system, eliminate the name
argument. In that case, the first word of the pseudo-user profile is

route-N.

Each pseudo-user profile specifies one or more routes with the Framed-Route (22) attribute.
The RADIUS protocol limits the number of Framed-Route definitions in a single route profile.
The limit varies with the exact contents of the routes. However, 25 Framed-Route definitions
per profile is the recommended maximum.

The value of the Framed-Route attribute uses the following syntax:

dest-addr gateway-addr metric [private] [profile][preference][VRouter]

Route settings in a RADIUS user profile

You can also include the Framed-Route (22) attribute in a RADIUS user profile to define a
static route. See “Settings in a RADIUS route profiles” on page 9-58 for details about
Framed-Route usage.

In a user profile, you can specify the zero address as the gateway-address. In this context, the
0.0.0.0 address is a wildcard entry the MAX replaces with the caller’s IP address.When
RADIUS authenticates the caller and sends the MAX an Access-Accept message with a value
of 0.0.0.0 for the router address, the MAX updates its routing tables with the Framed-Route
value, but substitutes the caller’s IP address for the router. This setting is useful when the MAX
assigns an IP address from an address pool and RADIUS cannot know the IP address of the
caller.

Syntax element

Specifies

dest-addr

Destination IP address, which can include a subnet specification.
The default value is 0.0.0.0, which represents a default route.

gateway-addr

IP address of the next-hop router to reach the specified destination.

metric

RIP metric for the specified route (a number between 1 to 15,
default 8). If preference values are equal, the higher the metric, the
less likely that the MAX will use the route.

private

Enables/disables advertisement of the route when the router sends
RIP or OSPF updates. If set to Yes, the route is excluded from
update packets. Set to Y to make the route private.

profile

Name of the dialout user profile for the route. The default value is
null.

preference

Preference value of the route.

VRouter

Virtual router option.

Advertising
This manual is related to the following products: