Radius Authentication; Xtacacs Authentication - Paradyne 8540 Network Configuration Manual

RADIUS Authentication

XTACACS Authentication

8000-A2-GB21-20
If the authentication server is a RADIUS server, an Access-Request message will
have the following format:
The user_name will be the end-user's user ID as received by the DSLAM in
the type 0 client ID field of the DHCP request.
If the end-user request does not contain a user ID, the corresponding domain
name is used as the user_name.
The password will always be hotwire.
The passwords configured at the authentication server should not be set with
an expiration time.
The NAS-IP will be the DSL card's e1a address (gateway address)
associated with this domain.
The NAS-PORT will be the port number that received the end-user's request.
The service type will be Authentication-Only.
The RADIUS Secret value used for encryption is configured on the DHCP
Relay Server screen.
The authentication request is sent to UDP port 1812 (as specified in RFC 2138).
If an Access-Accept message is returned, the DHCP request is relayed to the
DHCP server.
If the authentication server is an XTACACS server, a Login message will have the
following format:
The user_name will be the end-user's user ID as received by the DSLAM in
the type 0 client ID field of the DHCP request.
If the end-user request does not contain a user ID, the corresponding domain
name is used as the user_name.
The password will be the e1a IP address (gateway address) associated
with this domain in ASCII dotted decimal format.
The passwords configured at the authentication server should not be set with
an expiration time.
The local_line will be the port number that received the end-user's
request.
The authentication request is sent to UDP port 49 (as specified in RFC 1492).
If the authentication request is successful, the DSLAM sends a LOGOUT message
to the XTACACS server and the DHCP request is relayed to the DHCP server.
November 1997
IP Routing
6-9