HP-UX AAA Server A.08.00.01 Administrator's Guide

Table 17-2 EAP.authfile Configuration Parameters (continued)
DescriptionParameter
minimum length of an IMSI. Therefore, the check
made is as follows:
6 <= Minimum-Length-IMSI <=
Maximum-Length-IMSI <= 15
The default values are 6 and 15.
Indicates how many GSM triplets are needed for
authentication. EAP-SIM RFC 4186 indicates this
value must be 2 or 3.
Number-Of-Triplets-For-Authentication
The default value is 2.
Protected success indications are an optional
EAP-SIM feature. The
Protected-Success-Indications
Protected-Success-Indications parameter
indicates whether the server offers protected success
indications to the peer. The valid values are
Enabled and Disabled.
The default value is Enabled.
The following is an example of a EAP.authfile file that configures the EAP-SIM
protocol for a SIM realm:
#######################################################################
### Append the following to /etc/opt/aaa/EAP.authfile
#######################################################################
eapsimrealm.com -EAP EAP "comment"
{
EAP-Type SIM
{
# Following parameters specify the name of A3 and A8 algorithm to generate
# triplets. You need not configure these values if triplets are retrieved from
# an external AuC.
A3-Algorithm "3GPP-Milenage"
A8-Algorithm "3GPP-Milenage"
############################################################
# Following are optional parameters
#############################################################
Prefixed-IMSI-Permanent-IDs "Enabled"
Generic-Permanent-IDs "Enabled"
Minimum-Length-IMSI 6
Maximum-Length-IMSI 15
Number-Of-Triplets-For-Authentication 2
Protected-Success-Indications "Enabled"
}
}
EAP-SIM 229