Bay Networks Baystream 7 Configuration And Troubleshooting Manual page 82

Configuring and Troubleshooting Bay Dial VPN Services
PPP
connection
Remote
node
Figure 6-1. Simplified Dial VPN Network
The RADIUS server on the service provider network includes a TMS database,
indexed by the domain name-DNIS pair. The fields in the database are the same as
those described for TMS in the previous chapter.
The RADIUS server parses the domain and DNIS identifier from the Username
field in the access request message and matches it against these fields in the
RADIUS TMS database.
The RADIUS server also maintains an active count of the number of sessions or
links to a particular user from a particular client. If this count exceeds the
specified limit, the RADIUS server rejects the authentication request. The
resource tracking starts with the authentication request. The server uses RADIUS
accounting information to confirm and decrement the count.
The NAS recognizes the returned tunnel attributes of the authentication request
and passes the information to its internal TMS client. The TMS client retrieves the
tunnel information it needs from the RADIUS attributes it receives in the access
acceptance message.
6-2
Network
Service
access server
provider network
(NAS)
Tunnel
Tunnel
Tunnel
management server
domain
/Service provider
data
RADIUS server
BayStream Multiservice Software Version 7.2
Gateway
Frame Relay
connection
RADIUS
Client
Customer
"Home"
network
CPE
User
router
data
Customer
RADIUS
server
DVS0011A
115623B Rev. 00