Bay Networks RADIUS User manual

Issue 1.0 MAN-RADIUS-REF
RADIUS
REFERENCE MANUAL
Issue 1.0

MAN-RADIUS-REF Issue 1.0
All rights reserved. This document may not in whole or part be copied,
photocopied, reproduced, translated or reduced to any electronic medium or
machine readable form without the prior written permission from Bay
Networks.
The information contained in this manual is believed to be accurate,
however, no responsibility is assumed by Bay Networks for its use, nor for
any infringements of patents or other rights of third parties resulting from
its use.
All trademarks are acknowledged.
1996 Scorpion Logic Ltd. A Bay Networks company

Issue 1.0 MAN-RADIUS-REF
ABOUT THIS MANUAL
Chapter 1 - Introduction
This chapter gives an overview of the features of the RADIUS Server and
provides an introduction to its features and facilities.
Chapter 2 - Tutorial
This chapter gives a step by step guide to the configuration of a sample
Network. It covers the configuration of the RADIUS Server, the Network
Access Server (in this case a Nautica Marlin Router), a small office
Network and a mobile dial-in user.
Chapter 3 - Reference
All RADIUS specific management structure and forms, configuration
parameters and status information are described in detail in this chapter.

MAN-RADIUS-REF Issue 1.0

CONTENTS
Section ……………………………………………… Page
v
Chapter 1 - Introduction
Welcome to Nautica RADIUS 1-1
About This Manual 1-1
Nautica Radius Features 1-2
RADIUS Background 1-2
Theory Of Operation 1-3
Document Conventions 1-4
What You Need 1-6
Hardware 1-6
Software 1-6
Knowledge 1-7
RADIUS Installation 1-8
Chapter 2 - Reference
Introduction 2-1
The Marlin Router and RADIUS 2-1
RADIUS Manager Menu Map 2-2
NAS Types 2-3
Configure NAS Types 2-3
NAS Device Types 2-4
NAS Units 2-5
Configure NAS Units 2-5
NAS Name 2-6
Quality Of Service 2-9
Grade of Service 2-10
Priority Timebands 2-11
Accounts 2-13
Account Information 2-14
Path Type 2-17
Multi-Link Operation (PPP or Nautica Paths) 2-18
Multi-Link Nautica/PPP 2-19
Undistinguished (OEM NAS Connections to RADIUS) 2-20
IP Networking 2-21
RIP Operation 2-22
RIP Type 2-22
Static Route Tables 2-23
IPX Networking 2-24
Outgoing Call Support 2-26
Service 2-27

CONTENTS
Section …………………………………………….. Page
vi
Chapter 2 - Reference (cont.)
Session Parameters 2-27
Accounting 2-28
RADIUS Server 2-29
Nautica Radius Server Menu Map 2-29
File 2-30
RADIUS Server Settings 2-30
Event Log 2-34
Status 2-35
Device Status 2-35
QOS Status 2-36
Account Status 2-37
Account Allocation 2-38
Account Rollover 2-38
Event Log Window 2-39
Breakdown of Account Records 2-39
Example Event Log of an Incoming Connection 2-41
Example Event Log of an Outgoing Connection 2-44
Chapter 3 - Tutorial
Nautica RADIUS Tutorial 3-1
Overview of Sample Test Network 3-2
RADIUS Configuration Tutorial 3-4
RADIUS Installation 3-5
Configuration Procedure 3-6
RADIUS Manager Configuration 3-7
1. Configuring a NAS Type 3-7
2. Configuring a NAS Unit 3-8
3. Configuring the Quality Of Service (QOS) Option 3-10
4. Configuring the Accounts Option 3-14
Configuring the Marlin Router on the HQ Backbone LAN 3-34
Configuring the CLAM Router at the Remote Office 3-47
Configuring the Roving User’s P.C. 3-55

CONTENTS
v

CONTENTS
vi

Introd
u
ction
1-1
INTRODUCTION
Welcome to Nautica RADIUS
Thank you for purchasing Nautica RADIUS as part of your remote access
strategy.
We believe you will be delighted with this product as it is easy to use, and
provides unrivalled Security, Accounting and Quality of Service facilities for
both Intranet and Internet users alike.
ABOUT THIS MANUAL
This reference Manual describes how Nautica RADIUS is installed and
configured with the Nautica family of routers. It should be used in
conjunction with the relevant manuals for each Nautica unit you will be using.
If you wish to use Nautica RADIUS in conjunction with other manufacturers’
products, then the relevant manuals for their products must also be available.

INTRODUCTION
1-2
NAUTICA RADIUS FEATURES
Nautica RADIUS is an Authentication, Authorisation and Accounting system
based on the R.A.D.I.U.S. (Remote Authentication Dial In User Service)
standard which can be adapted to a broad range of different network
requirements of Enterprise, Internet Service Providers (ISPs), Telcos, Value
Added Networks (VANs), Intranets and other service operations. Such
networks may operate in a variety of environments such as:
Public companies providing access to networks for general or specific
usage, such as ISPs, financial information services and scientific
information services for example.
Private Networks for large organisations, where access is provided for
internal operational divisions and perhaps external trading companies
with security and on a chargeable basis. These include: Financial
Services, University Campus, Software Services and large companies
providing remote office, home and Intranet connections for many
departments.
All of these network systems have a common theme :- Remote Access, for the
individual user or the Remote Branch Office, whether via PSTN or ISDN.
RADIUS BACKGROUND
RADIUS consists of two functions, RADIUS Authentication and RADIUS
Accounting. It uses a client/server based security system designed in
accordance with a model of distributed security recommended by the Network
Access Server Working Group of the IETF. RADIUS has been submitted as
an RFC to become an Internet standard, and has been adopted as the protocol
and system of choice by most of the security product manufacturers. RADIUS
is rapidly gaining popularity as an open protocol and architecture with all the
key manufacturers of communications products, as it is both an easy and
efficient means of controlling and accounting for access to backbone
networks.