User's Manual

Table Of Contents
PMP 450 Operations Guide
Configuring a RADIUS server
pmp-0049 (September 2012)
2-29
Table 12 SM User Authentication and Access Tracking attributes
Attribute
Meaning
User Authentication Mode
Local: The local SM is checked for accounts. No centralized
RADIUS
accounting (access control)
is
performed.
Remote: Authentication by the centralized RADIUS server
is
required to gain access to the SM if the SM is registered to an
AP
that
has RADIUS AAA Authentication Mode selected. For up to
2
minutes
a test pattern will be displayed until the server responds
or
times
out.
Remote then Local: Authentication using the centralized
RADIUS
server is attempted. If the server sends a reject message,
then
the
setting of Allow Local Login after Reject from AAA
determines
if
the local user database is checked or not. If the
configured
servers
do
not respond within 2 minutes, then the local
user database
is
used. The successful login method is displayed in the
navigation
column of the SM.
Allow Local Login after
Reject from AAA
If a user authentication is rejected from the AAA server, the user will be
allowed to login locally to the radio‘s management interface.
Accounting Messages
disable no accounting messages are sent to the RADIUS server
deviceAccess accounting messages are sent to the RADIUS server
regarding device access (see Table 13).
Access
Tracking
To track logon and logoff times on individual radios by technicians, installers, and administrators,
on the AP or SM‘s Account > User Authentication and Access Tracking tab
under
Accounting
(Access Tracking) set Accounting Messages to ―deviceAccess‖.
Device Access Tracking is enabled separately from User Authentication Mode. A given AP
or
SM can be configured for both, either, or
neither.
RADIUS Device Data Accounting
PMP 450 systems include support for RADIUS accounting messages for usage-based billing. This
accounting includes indications for subscriber session establishment, subscriber session disconnection,
and bandwidth usage per session for each SM that connects to the AP. The attributes included in the
RADIUS accounting messages are shown in the table below.