User's Manual

Chapter 4 - Operation and Administration ASN-GW Menu
BreezeMAX Extreme 96 System Manual
The Access-Request is submitted to the RADIUS server via the network. If no
response is returned within a length of time, the request is re-sent a number of
times. Once the RADIUS server receives the request, it validates the sending
client. A request from a client for which the RADIUS server does not have a shared
secret must be silently discarded. If the client is valid, the RADIUS server consults
a database of users to find the user whose User Name matches the request. The
user entry in the database contains the User Password that must be verified.
The MS authentication and service provisioning process when the BTS Working
Mode is Embedded Distributed ASN-GW Authenticated is:
1 User Name and Password should be configured in the MS.
2 All required Service Profiles and Multiple Service Flows, including their
components, should be configured in the BTS.
3 The RADIUS Authentication server(s) should be configured with the relevant
MS’s details (User Name and Password) and their corresponding services,
including the relevant service parameters (references to Service Profiles and
Multiple Service Flows).
4 When an MS attempt registering at the BTS, the BTS searches within its local
database. The details of each MS (and the provisioned Services) are
maintained in the database for about 20 minutes after being disconnected. If
this MS will reconnect within 20 minutes, they will be provisioned with the
same service(s) without re-authentication.
5 The RADIUS server searches for the corresponding service(s) defined for the
MS (based on the User Name and Password).
» If it finds the applicable service(s) the RADIUS server replies to the
ASN-GW with an access-accept message that includes the relevant
Service(s) parameters.
» If the RADIUS server does not find matching MS’s credentials or defined
service(s), it replies to the ASN-GW with a reject message.
6 According to the response from the RADIUS server, the ASN-GW either
authenticates the MS and provides the appropriate service(s) or rejects the MS.
7 Part of the information sent from the RADIUS server can include the
Authentication Time Out. Before the end of this time the ASN-GW should
re-authenticate the MS with the RADIUS server. This allows the operator to
stop service for a customer even if the MS was not reset and the network entry
process was not re-started.