Brocade Mobility RFS Controller System Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 367

Advertising
background image

Brocade Mobility RFS Controller System Reference Guide

355

53-1003099-01

7

12. Set the following Network Access Identifier routing values for the accounting server:

13. Select the Settings tab.

Request Attempts

Displays the number of attempts a client can retransmit a missed frame to the RADIUS accounting
server before it times out of the authentication session. The available range is between 1 and 10
attempts. The default is 3 attempts.

Request Timeout

Specify the time for the re-transmission of request packets. The default is 5 seconds. If this time is
exceeded, the authentication session is terminated.

Retry Timeout Factor

Specify the amount of time between 50 and 200 seconds between retry timeouts for the
re-transmission of request packets. The default is 100.

DSCP

Displays the DSCP value as a 6-bit parameter in the header of every IP packet used for packet
classification. The valid range is between 0 and 63 with a default value of 34.

NAI Routing Enable

Check to enable NAI routing. AAA servers identify clients using the NAI. The NAI is a character string
in the format of an e-mail address as either user or user@ but it need not be a valid e-mail address
or a fully qualified domain name. The NAI can be used either in a specific or generic form. The
specific form, which must contain the user portion and may contain the @ portion, identifies a
single user. The generic form allows all users in a given or without a to be configured on a single
command line. Each user still needs a unique security association, but these associations can be
stored on a AAA server. The original purpose of the NAI was to support roaming between dialup
ISPs. Using NAI, each ISP need not have all the accounts for all of its roaming partners in a single
RADIUS database. RADIUS accounting servers can proxy requests to remote servers for each.

Realm

Enter the realm name in the field. The name cannot exceed 50 characters. When the RADIUS
server receives a request for a user name the server references a table of usernames. If the user
name is known, the server proxies the request to the RADIUS server.

Realm Type

Specify whether the Prefix or Suffix of the username is matched to the realm.

Strip Realm

Check strip to remove information from the packet when NAI routing is enabled.

Advertising