Ericsson MINI-LINK 6351 Technical Description page 50

Technical Description
Local
The local policy supports the following features:
•
•
RADIUS
The RADIUS protocol, which is based on a client-server model, enables remote
access to networks and network services. When configured with the IP or host
name of a RADIUS server, the NE can act as a RADIUS client. The format
and validation of RADIUS packets is in accordance with the IETF protocol
specification RFC 2865. The NE does not support RADIUS accounting features.
RADIUS uses UDP, which offers best-effort delivery.
RADIUS only encrypts the password in the Access-Request packet from the
client to the server. The rest of the packet (for example, username, authorized
services, and accounting) is not encrypted.
RADIUS supports the following features:
•
46
Authentication
For local user authentication, it is necessary to supply authentication
information in the form of a username and password. During the
authentication process, the NE searches its locally stored configuration
for a user with a matching username. If a matching username cannot be
found, the request is refused. The maximum number of local users the
packet radio supports is sixteen.
Authorization
The NE uses local authorization information to distinguish which privileges
belong to a role.
The authorization process is based on the user role (system admin,
network admin, operator, or guest). For local user authentication, the role is
defined when the user account is created, and is stored locally as part of
the user configuration.
Authentication
The NE supports both local user authentication and remote authentication
using RADIUS. A user needs to have an account created on the external
server before logging on. Once the account is created, it can be
configured to receive either local authentication or remote authentication
using RADIUS. For local user authentication, it is necessary to supply
authentication information in the form of a username and password. During
the authentication process, the NE searches its locally stored configuration
for a user with a matching username. If a matching username cannot be
found, the request is refused. The maximum number of local users the NE
supports is sixteen.
1/22102-HRA 901 17/9 Uen PU1 | 2016-07-04