Alvarion BreezeACCESS II System Manual page 214

2-78
the client and RADIUS server, using a method based on the RSA
Message Digest Algorithm MD5.
The Access-Request is submitted to the RADIUS server via the network.
If no response is returned within a length of time, the request is re-sent
a number of times. Once the RADIUS server receives the request, it
validates the sending client. A request from a client for which the
RADIUS server does not have a shared secret must be silently
discarded. If the client is valid, the RADIUS server consults a database
of users to find the user whose name matches the request. The user
entry in the database contains a list of requirements that must be met
to allow access for the user. This always includes verification of the
password, but can also specify the client(s) or port(s) to which the user
is allowed access.
In the BreezeACCESS system there is a RADIUS NAS (Network Access
Server) implemented in each Subscriber Unit. The RADIUS server can
be used for authentication purposes only, for accounting purposes only,
or for both authentication and accounting purposes.
The RADIUS Parameters menu includes three sub-menus:
a. General RADIUS Parameters – intended for all users of RADIUS.
b. Authentication Parameters.
c. Accounting Parameters.
NOTE:
Different servers may be used for authentication and for accounting.
General RADIUS Parameters Menu
The General RADIUS Parameters menu is used to define general
RADIUS parameters that must be configured by all SUs to be served by
a RADIUS server, either for authentication only, for accounting only, or
for both authentication and accounting.
User Name – To define the user name that will be used by the
RADIUS server to identify the SU.
Valid values: A string of up to 64 printable ASCII characters, case
sensitive.
Default value: The unit's MAC Address
User Password – To define the password to be used by the RADIUS
server to confirm the identity of the SU.
Valid values: A string of up to 64 printable ASCII characters, case
sensitive.
Default value: RadiusPassword1.
Shared Secret – To define the key that will be used for encrypting
the User Password for increased security. The algorithm used for
encrypting the User Password is MD5.
Manual Revision: 3.0
BreezeACCESS Version 4.3 Operations and Administration