Table of Contents
Advertisement
Chapter 4 - Operation and Administration
»
During initial network entry, the MS first executes initial ranging with the BS,
4
then exchanges capabilities with the ASN, after which it is asked for identity
by the latter. The EAP process starts at this point. Access-Request &
Access-Challenge messages are exchanged and relayed between the RADIUS
server, ASN and MS, until the tunnel is complete and the user credentials are
securely sent over to the authenticator.
Depending on the match of the MS's credentials with the RADIUS server's
5
database, the latter may send back an Access-Accept or an Access-Reject
message to the ASN (to be relayed to the MS).
In case of successful authentication, the Access-Accept packet contains the
6
service parameters that the ASN must provision the MS with.
The ASN checks for the received service parameters and, if defined, starts the
7
DataPath Registration (MS provisioning).
A RADIUS server can be used for authentication purposes only, for accounting
purposes only, or for both authentication and accounting purposes. In the current
release one server of each type can be defined.
The AAA menu includes the following options:
Show Summary
Configuration
4.6.1.2
Show Summary
Select the Show Summary option to view the configuration and status details for
the general AAA Client parameters and for each of the defined Authentication
and/or Accounting Servers. For more details on these parameters refer to the
relevant sections in the AAA Configuration menu below.
4.6.1.3
Configuration
The AAA Configuration menu includes the following options:
AAA Client
BreezeMAX Extreme
Profiles and Multiple Service Flows as defined in the ASN), and other
optional attributes that need to be sent to the users (e.g session-timeout).
General settings configuring the use of EAP-TTLS tunneling and
MSCHAPv2 encryption.
121
ASN-GW Menu
System Manual
Advertisement
Table of Contents
