Radius messages and radius attributes, Network parameters – Proxim ORiNOCO AP-2500 User Manual

Page 91

Advertising
background image

91

Network Parameters

Data Volume Information Transmission (bytes sent/received)

The AP’s RADIUS client implementation allows a hotspot operator to accurately track the exact number of bytes sent
and received by a subscriber based on:

•

User Name

•

IP address (Framed IP)

•

MAC address of the user (Calling Station ID)

As shown in the

Sample RADIUS Transmissions

, the byte counts are sent in the Accounting “Alive” and Accounting

“Stop” messages. As mentioned previously, Accounting “Stop” messages can be generated by:

•

An explicit customer logout (via ICC or by typing http://1.1.1.1/)

•

Session time-out

•

Idle time-out

•

Deleting the user from the AP’s

Current Subscribers Table

.

The message will indicate the type of action that initiated the Accounting “Stop”. To ensure accuracy, the AP
temporarily saves the Accounting information per user in case of a device reboot.

RADIUS Messages and RADIUS Attributes

The AP-2500’s RADIUS functionality can be broken down into the following categories:
•

Access-Request

•

Access-Accept Parsing

•

Acct-Request

Access-Request Attributes

–

Username
•

Included if enabled.

–

Password

–

Service-Type

–

NAS-Port (communication port number)

–

NAS-Identifier
•

Included if enabled on AP; see

RADIUS Configuration Parameters

>

Miscellaneous Options

.

–

Framed-IP
•

The subscriber’s IP address.

•

Included if enabled on AP; see

RADIUS Configuration Parameters

>

Miscellaneous Options

.

–

Called-Station-Id
•

The AP’s MAC address.

–

Calling-Station-Id
•

The subscriber’s MAC address.

–

NAS-IP
•

The AP’s IP address

–

NAS-Port-Type
•

Included if enabled on AP; see

RADIUS Configuration Parameters

>

Miscellaneous Options

.

–

Acct-Session-ID
•

The Acct-Session-ID is created when the RADIUS authentication request is built. It is transmitted in both
the Access-Request and the Accounting-Request.

–

State
•

Used for challenge/response authentication; since the AP uses the Password Authentication Protocol
(PAP) for authentication purposes, this attribute is not currently in use.

Advertising