User`s manual

SIP User's Manual 6. Gateway's ini File Configuration
Version 5.0 147 October 2006
6.10 RADIUS Parameters
For detailed information on the supported RADIUS attributes, refer to Section 8.9 on page
218.
Table 6-5: RADIUS Parameters (continues on pages 147 to 148)
ini File Field Name
Web Parameter Name
Valid Range and Description
EnableRADIUS
[Enable RADIUS]
0 = RADIUS application is disabled (default).
1 = RADIUS application is enabled.
AAAIndications
[AAA Indications]
0 = No indications (default).
3 = Accounting only
MaxRADIUSSessions
[Max. RADIUS Sessions]
Number of concurrent calls that can communicate with the RADIUS server
(optional).
The valid range is 0 to 240.
The default value is 240.
SharedSecret
[Shared Secret]
‘Secret’ used to authenticate the gateway to the RADIUS server. It should be a
cryptographically strong password.
RADIUSRetransmission
[RADIUS Max.
Retransmissions]
Number of retransmission retries.
The valid range is 1 to 10.
The default value is 3.
RadiusTO
The interval between each retry (measured in seconds).
The valid range is 1 to 30.
The default value is 10.
RADIUSAuthServerIP
[RADIUS Authentication
Server IP Address]
IP address of Authentication and Authorization server.
RADIUSAuthPort
[RADIUS Authentication Port]
Port number of Authentication and Authorization server.
The default value is 1645.
RADIUSAccServerIP
[RADIUS Accounting Server
IP Address]
IP address of accounting server.
RADIUSAccPort
[RADIUS Accounting Port]
Port number of Radius accounting server.
The default value is 1646.
RadiusAccountingType
[RADIUS Accounting Type]
Determines when a RADIUS accounting report is issued.
0 = At the Release of the call only (default).
1 = At the Connect and Release of the call.
2 = At the Setup and Release of the call.
DefaultAccessLevel
[Default Access Level]
Defines the default access level for the gateway when the RADIUS
(authentication) response doesn’t include an access level attribute.
The valid range is 0 to 255. The default value is 200 (Security Administrator').
BehaviorUponRadiusTimeo
ut
[Device Behavior Upon
RADIUS Timeout]
Defines the gateway’s operation if a response isn’t received from the RADIUS
server after the 5 seconds timeout expires:
0 (Deny Access) = the gateway denies access to the Web and Telnet embedded
servers.
1 (Verify Access Locally) = the gateway checks the local username and
password (default).
RadiusLocalCacheMode
[Local RADIUS Password
Cache Mode]
Defines the gateway’s mode of operation regarding the timer (configured by the
parameter RadiusLocalCacheTimeout) that determines the validity of the
username and password (verified by the RADIUS server).
0 (Absolute Expiry Timer) = when you access a Web screen, the timeout doesn’t
reset but rather continues decreasing.
1 (Reset Timer Upon Access) = upon each access to a Web screen, the timeout
always resets (reverts to the initial value configured by
RadiusLocalCacheTimeout).