User's Manual Part 1

30 APCD-LM043-8.0 (DRAFT C)
3: Detailed Description
Figure 16 depicts the typical exchange of RADIUS messages between the CCU RADIUS
Client and the remote RADIUS Server.
Figure 16 RADIUS Authorization
1. The CCU queries the RADIUS server with an Access Request message, which
contains an EUM ID and RADIUS client (CCU) IP address.
2. After receiving the Access Request message, the RADIUS server authenticates the
CCU as a recognized RADIUS client and then validates the received EUM ID against
the database entries.
3. If the EUM is allowed, the RADIUS server returns an Access Accept message,
containing the extracted GOS value from the database, to the CCU. The CCU then
updates the GOS entry in the Authorization table for the requested EUM.
NOTE: If the GOS is not present in the Access Accept message, the
current default GOS value will be used. The CCU will not make
an entry in the Authorization table, and it will not send out any
more Access Request messages for the EUM.
4. If the RADIUS Server responds with an Access Reject message (for example, if there
is no entry for that EUM in the database), the CCU marks the EUM as “DENIED” in the
Authorization table.
The RADIUS database contains the EUM IDs and the desired GOS value.
You may make static authorization entries in the CCU through the CLI. Static entries override
any RADIUS replies and are marked “STATIC” in the Authorization table.
3.3.8 RADIUS Accounting
The RADIUS client on the CCU provides support for RADIUS accounting. RADIUS accounting
packets are sent to the remote RADIUS server on a periodic basis and on special events for
each EUM.
Figure 17 illustrates the RADIUS messages that are sent to the RADIUS server.
Figure 17 RADIUS Accounting
1. For each EUM authorized through RADIUS, the CCU sends an “Account Request –
Start” message upon registration.
2. Subsequently, the RADIUS server sends an “Account Request – Update” message at
fixed intervals, with updates of Acct-Input-Octets, Acct-Output-Octets, Acct-Input-
Packets, and Acct-Output-Packets.
EUMs
RADIUS
Client
CCU
RADIUS
Server
Database
Access Request
Access Accept
Access Reject
EUMID, GOS
Deregisteration
Registeration
EUMs
RADIUS
Client
CCU
RADIUS
Server
Account Request - Start
Account Request - Update
Deregisteration
Registeration
Account Request - Stop
Accounting Response