Cisco Systems 3.5 Bedienungsanleitung

Corporate Headquarters Cisco Systems, In c. 170 West Tasman Drive San Jose, CA 951 34-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553-NETS (638 7) Fax: 408 526-4100 Cisco A ccess Registrar 3.5 Concepts and Reference Guide Jul y 20 04 Customer Order Number: Text Part Number: OL -2683-02[...]

THE SPECIFICATION S AND INFORMATION RE GARDING THE PRODU CTS IN THIS MANUAL ARE SUBJECT TO CHAN GE WITHOUT NOTICE. ALL STATEMENTS , INFORMATION, AND RECOMMENDATI ONS IN THI S MANUAL ARE BE LIEVED TO BE A CCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIB ILITY FOR THEIR APPLICATION OF ANY PR[...]

iii Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 CONTENTS About This Guide ix Obtaining Documentation ix World Wide We b ix Ordering Documentation x Documentation Feedback x Obtaining Technical Assistance x Cisco.com x Technical Assistance Center xi Contacting TAC by Using the Cisco TAC Website xi Contacting TAC by Telephone [...]

Contents iv Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Script Processing Hierarchy 2-8 Cross Server Session and Resource Management 2-9 Overview 2-9 Session-Service Service Step and Radius-Session Se rvice 2-10 Configuring a Front Line Cisco Access Registrar 2-10 Configure Central AR 2-11 CHAPTER 3 Cisco Access Registrar Sc[...]

Contents v Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 ParseServiceAndAARealmHints 3-6 ParseServiceAndAASRealm Hints 3-6 ParseServiceAndProxyHints 3-6 ParseServiceHints 3-7 ParseTranslationGroupsBy CLID 3-7 ParseTranslationGroupsBy DNIS 3-7 ParseTranslationGroupsBy Realm 3-7 UseCLIDAsSessionKey 3-7 USRIncomin gScript 3-7 USR[...]

Contents vi Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Rep Members Subdirectory 4-8 Rep Members/Slave1 4-8 Name 4-8 IPAddress 4-8 Port 4-8 CHAPTER 5 Understanding SNM P 5-1 Overview 5-1 Supported MIBs 5-1 RADIUS-AUTH-CLIENT-MIB 5-1 RADIUS-AUTH-SERVER-MIB 5-2 RADIUS-ACC-CLIENT-MIB 5-2 RADIUS-ACC-SERVER-MIB 5-2 SNMP Traps 5-2[...]

Contents vii Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Accounting S tart 6-7 Data Flow 6-7 Access-Request (Quota Dep leted) 6-8 Accept-Accept (Quota Depleted) 6-8 Accounting Stop (Session End) 6-9 Accounting Response (Final Status) 6-9 Vendor-Specific Attributes 6-10 G LOSSARY[...]

Contents viii Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02[...]

ix Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 About This Guide This document pr ovides infor mation to help you und erstand RADIUS con cepts and to help you de v elop a better understandi ng of the Cisco Access Re gistrar 3.0 serv er . Thi s document contains the follo wing chapters: • Chapter 1, “Overvie w ,” ov ervi[...]

x Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 About This Guide Obtaining Te chnical Assistance Ordering Documentation Cisco documentation is a vail able in the follo wing ways : • Registered Cisco Direct Customers can order Cisco Product do cumentation from the Netw orking Products MarketPlace: http://www .cisco.com/cgi-bi[...]

xi Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 About This Guide Obtaining Technical Assista nce Customers and partners can self-register on Cisco.com to obtain additional personalized i nformation and services. Registered users can order products, check on the status of an order, access technical support, and vie w benefits [...]

xii Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 About This Guide Obtaining Te chnical Assistance[...]

CH A P T E R 1-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 1 Overview The chapter provides an overvie w of the RADIUS se rver , including connection steps, RADIU S message types, and using Cisco Access Registrar as a pr oxy server . Cisco Access Registrar is a RADIUS (Remote Authenti cation Dial-In User Servic e) server th[...]

1-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 1 Overvi ew RADIUS Protocol Figure 1 -1 Pack et Exchange Be tw een User , NAS, and RADIUS Cisco Access Registrar can also reject the packet if it needs to den y network access to the user . Or, Cisco Access Registrar may issue a challenge that the N A S sends to the use[...]

1-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 1 Overview RADIUS Protocol Step 8 Cisco Access Registrar formats the response based on the Response dictionary an d sends it back to the client (N AS). Step 9 The N AS recei ves the response an d communicates with the user , whic h may include sending the user an IP add[...]

1-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 1 Overvi ew RADIUS Protocol The Attribute Dictionary The Attrib ute dictionary contains a list of preconf igured authentication, auth orizati on, and accounting attributes that can be part of a client’ s or user’ s co nf iguration. The dictionary en tries translate [...]

1-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 1 Overview Basic Authentica tion and Authorization Figure 1 -2 Pro xying to an LD AP Server f or A uthentication Basic Authentication and Authorization This section pro vides basic in formation about ho w Cisco Access Registrar performs the basic RADIUS functions of aut[...]

1-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 1 Overvi ew Basic Authentication and Authorization – Performs resource management fo r each Resource Manager in th e Session Manager . The Cisco AR server directs the req uest to the approp riate resource mana ger listed in /Radius/SessionManagers/<Nam e>/<Re[...]

CH A P T E R 2-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 2 Understanding Cisco Access Registrar This chapter describes the Cisco Access Registrar ob ject structure, and e xplains when Ci sco Access Registrar references each of these objects during the processing of client requests. Cisco Access Registrar lets you manipul[...]

2-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cisco Access Registrar Hierarchy UserLists and Groups Cisco Access Registrar lets you organize your us er community through th e configuration objects UserLists , users , and UserGroups . • Use UserLists to group us ers b y orga[...]

2-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Cisco Access Registrar Hie rarchy For e xample, to use Services for authentication: • When you want the authentication to be performed b y the Cisco Access Registrar RADIUS serv er , you can specify the local service. In this, c[...]

2-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cisco AR Dire ctory Structure concurrently , you might creat e two Session Manage rs and three Resource Managers. One dynamic IP Resource Manager that is referenced b y both Session Managers, and two concur rent session Resource M[...]

2-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Program Flow Scripting Points Cisco Access Registrar lets you in vok e scripts you can use to affect the Request, Response, or En vironment dictionaries. Client or NAS Scripting Points Ta b l e 2 - 3 sho ws the location of the scr[...]

2-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Program Flow Authentication and/or Authorization Scripting Points Ta b l e 2 - 4 sho ws the location of t he scripting points within the section that determines wheth er to perform authentication and/or authorizatio n. T able 2-4 [...]

2-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Program Flow Session Management The Session Management feature requires the cli ent (N AS or proxy) to send all RADIUS accountin g requests to the Cisco Access Registrar serv er perform ing session management. (Th e only exception[...]

2-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Program Flow • The secondary server w ill not kno w about th e cu rrent acti ve sessions that are maintained on the primary server . Any resources managed b y the se condary serv er must be distinct fro m those managed by the p [...]

2-9 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Cross Se rver Session and Resource Managemen t T able 2-8 Cisco A ccess Registr ar Pr ocessing Hierar c h y for Outg oing Scr ipts Cross Server Session and Resource Management Prior to Cisco AR1.6, sessions and resources were ma n[...]

2-10 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cross Server Sessio n and Resource Management When the front line Cisco AR server receives the acc ess-request, it does the regul ar AA processing. If the packet is not rejected and a Cent ral Resource Cisco AR server is al so co[...]

2-11 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Cross Se rver Session and Resource Managemen t IncomingScript = OutgoingScript = OutagePolicy = RejectAll OutageScript = MultipleServersPolicy = Failover RemoteServers/ 1. central-server [ //localhost/Radius/RemoteServers ] centr[...]

2-12 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cross Server Sessio n and Resource Management[...]

CH A P T E R 3-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 3 Cisco Access Registrar Scripts This chapter describes the scripts pr ovided with Cisco Access Registrar . Using Cisco AR Scripts The Cisco Access Registrar scripts are stored in /localhost/Radius/Scripts . Most of the scripts are written in the RADIUS Extension l[...]

3-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts AltigaOutgoingScript AltigaOutgoi ngScript maps Altig a attrib utes from Cisc o Access Registrar’ s global attribute space to the appropriate Altiga-proprietary attributes. ANAAAOutgoing AN AAA Outgoing can be r[...]

3-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 3 Cisco Access Registrar Scripts Using Cisco AR Scripts AuthorizeTelnet AuthorizeT elnet is referenced from either the user record for users who’ s sessions are always telnet or from the from the scr ipt Authori zeService, which checks the request to determine whic h [...]

3-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts ExecDNISRule ExecDNISRule is referenced from the polic y engine to determine the auth entication and authori zation service and policy based on the DNIS set in the polic y engine. ExecFilterRule ExecFilterRul e is[...]

3-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 3 Cisco Access Registrar Scripts Using Cisco AR Scripts LDAPOutage LD APOutage is referenced from LD AP Services as OutageScript. LD APOutage logs wh en the LD AP binding is lost. MapSourceIPAddress MapSourceIP Address is referenced from the Cisco Access Registrar serv [...]

3-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts ParseProxyHints ParseProxy Hints is referenced from the N AS IncomingScript scripting point. It lo oks for a realm name on the user name at tribute as a hi nt of which AAA services should be used fo r this request[...]

3-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 3 Cisco Access Registrar Scripts Using Cisco AR Scripts ParseServiceHints ParseServiceHints is referenced from the N AS Incomi ngScript scripting poi nt. Check to see if we are gi ven a hint of the service type or the r ealm. If so, se t the appropriate attrib utes in t[...]

3-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts USROutgoingScript USR OutgoingScript maps USR attr ibutes from Ci sco Access Regist rar’ s global attribu te space to the appropriate USR-proprietary attributes.[...]

CH A P T E R 4-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 4 Understanding Replication This chapter describes Cisco Access Re gistrar's conf ig uration replicat ion features, functions, limitation s and operation. Replication Overview Cisco Access Registrar replication feature can maintain identical config urations on[...]

4-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication How Replic ation Works When there is a configuration change , the master serv er propagates the change set to all member serv ers ov er the netw ork. All member server s hav e to update their conf iguration after receiving the change set not[...]

4-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication How Replicat ion Works Slave Server Step 1 When the slav e server recei ves the transaction, its contents are verif ied. Step 2 Once verif ied, the changes are appl ied to the sla ve serv er's database Step 3 The changes are then applie[...]

4-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication How Replic ation Works Transaction Data Verification When the master prepares a transaction for replica tio n to a slav e, the master calculate s a 2's complement Cyclic Redundancy Check (CRC) for each element (individual conf igur atio[...]

4-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication C onfiguration Settings Full Resynchronization Full Resynchronization means that the slav e has missed more transactions than are stored in the master's replication archi ve and cann ot be resynchron ized automaticall y . Th[...]

4-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication Configuration Settings RepType RepT ype indicates the type of replication. The choices a v ailable are SMDBR and NONE. When RepT ype is se t to NONE, repli cation is disabled. T o ena ble replication, s et RepT ype to SMDBR for S[...]

4-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication C onfiguration Settings If the sla ve should go do wn or otherwise be taken of f line, the v alue of RepT ransactionArchiv eLimit and the frequency o f aregcmd sa ves wi ll determine ho w long the sla ve may be of f-line before a[...]

4-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication Configuration Settings Rep Members Subdirectory The Rep Members subdirectory cont ains the list of sla ves to which the master will replicate transactio ns. Rep Members/Slave1 Each slav e is added much like a client is added. Ea[...]

CH A P T E R 5-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 5 Understanding SNMP This chapter pro vides informatio n about Cisco Access Registrar support for SNMP . Overview Cisco Access Registrar 3.0 provides SNMP MIB and trap support for users of network management systems. The supported MIBs enable the ne twork ma nageme[...]

5-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps RADIUS-AUTH-SERVER-MIB The RADIUS-A UTH-SER VER-MIB describ es the server side of the RADIUS authen tication protocol. The information cont ained in this MIB describe s managed objects used for managin g a RADIUS authentication server . [...]

5-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 5 Understanding SNMP SNMP Trap s Supported Traps The traps supported by Cisco Access Registrar enab le Cisco AR to notify interested management stations of e vents, f ailure, or impending f ailure conditions. T raps are a network message of a specif ic f or ma t is s ue[...]

5-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps carOtherAuthServerNotResponding carOtherA uthSer verNotResponding indicates that an au thentication server i s not responding to a request sent from this serv er . This trap has three objects: • radiusA uthServerAddr ess— indicates t[...]

5-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 5 Understanding SNMP SNMP Trap s carOtherAccServerResponding carOtherAccServerResponding signifi es that an accounting serv er that had pre viously sent a not r esponding messag e is now responding to req uests from th e Cisco AR server . This trap has three objects: ?[...]

5-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps These files are option al and are only used to configu re the extensibl e portions of the agent, the v alues of the community strings, and the optional trap destinations. By def ault, the f irst community string (“public” by def ault[...]

5-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 5 Understanding SNMP SNMP Trap s Community String A community string is used to authenticate the trap message sender (SNMP agent) to the trap recipient (SNMP management station). A communit y string is required in the list o f trap recei vers.[...]

5-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps[...]

CH A P T E R 6-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 6 Prepaid Billing Solution This chapter describes the generic call flo w between the t hree components required to supp ort a prepaid billing solution usi ng the RADIUS protocol: the AAA client, the Cisco Access Registrar 3.5 server , and a prepaid billing server .[...]

6-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Overview Cisco AR 3.5 prov ides maximum flexibil ity to billin g server s by allo wing the metering v ariable to be modif ied as the service is used. This requires netw ork nodes to measure all parameters all the time, b ut to report v alues [...]

6-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Configuring Prepaid Billing Configuring Prepaid Billing Cisco AR 3.5 uses a pr epaid service to support prepaid b illing solutions. A prep aid service has the follo wing properties: [ //localhost/Radius/Services/prepaid ] Name = prepaid Descri[...]

6-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Figur e 6-1 Gener ic Call Flow Diagr am Generic Call Flow This section describes th e generic call flo w for the Cisco AR 3.5 prep aid billing soluti on. The call flo w is controlled b y the AAA client. The Cisco AR 3.5 serv[...]

6-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow Note In the follo wing attrib ute tables, entries be ginning with APPL indicate applicat ion-specif ic attribu tes. Another application migh t use the fi eld for dif ferent purp ose or ignore the field. All the f i elds with [...]

6-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Access-Accept (Authentication) Flow 2b sho ws the billing serv er returning the authentication resul t. The billing server return s a failure if the prepaid subscriber ha s an inadequate balance. Flow 2s sho ws the Cisco AR [...]

6-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow In Flow 4s , the Cisco AR 3.5 serv er con verts the quota array recei ved into VSA s and sends an Access-Acce pt with the assembl ed VSAs to the AAA c lient. Ta b l e 6 - 5 lists the prepaid-specific VSAs that might be includ[...]

6-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Access-Request (Quota Depleted) Flow 7c sho ws the client sending an Access-Request to the Cisco AR 3.5 server because at least one quota has been depleted. The Acc ess-Request includes different measurements of ho w much of[...]

6-9 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow Accounting Stop (Session End) In Flow 9c , the client sends an Accounting-Stop to the Cisco AR 3 .5 server to end th e session. The Accounting-Stop message includes an updated quota array w ith the usag e adjustments since th[...]

6-10 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Vendor-Specific Attributes V endor-speci fic a ttrib utes are in cluded in spec if ic RADIUS packets to communicate prepaid user balance information from the Cisco AR 3.5 serv er to the AAA client, and actual usage, either [...]

6-11 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow CRB_USER_TYPE crb-entity-type Int8 4s T ype of user: 1. Prepaid user 2. Post-paid with no credit lim it 3. Post-paid with credit limit 4. In v alid user The source for this VSA value could be from the Su bscriber profil e or[...]

6-12 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow CRB_TERMIN A TE_CA USE crb-terminate-cause Int8 4se Identif ies why a subscriber f ailed authentication: 1. Exceeded the balance 2. Exceeded the o verdr aft 3. Bad credit 4. Services suspended 5. In v alid User CRB_PRIV A T[...]

GL-1 Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 GLOSSARY A Access point A de vice that bridges the wir eless link on one side to the wired n etwork on the other . Analog Channel A circuit-switched commu nication path intended to carry 3.1 KHz audio in each direction. ARP Address Resolution Prot ocol is the TCP/IP protocol t[...]

Glossary GL-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 CSU/DSU Channel Service Unit/Data Service Un it isolates your network from y our exchange carr ier’ s network. It also receiv es the timing, lo w-lev el framing inform ation, and data passed fro m the termination point. CSU/DSUs are specific to the general circuit t[...]

Glossar y GL-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 F FT Field T echni cian is someone w ho installs your ca ble modem in you r house. Frame Relay Frame Relay is a cost-ef fecti ve, lightwei ght, many-to-man y , medium-speed, virtual network , link-layer technology . I ISDN Integrated Services Digi tal Netw ork enable[...]

Glossary GL-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 M MIB Manageme nt Information Base—D atabase of network ma nagement informa tion used and ma intained by a network manageme nt protocol such as SNM P . The value of a MIB obj ect can be changed or retrie ved using SNMP comm ands. MIB objects are or ga nized in a tre[...]

Glossar y GL-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 P packet A bloc k of data in a standa rd format for transmission. PAP Password Authenticati on Protocol is a simple PPP authentication mechanis m in whic h a cleartext username and password are transmitted to pro ve identit y . Payload The contents of a request packe[...]

Glossary GL-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 RADIUS Dictionary The RADIUS dictionary passes in formation between a script and the RADIUS ser ver , or between scripts running on a single packet. RADIUS Proxy In order to pro vide for the routing of RADI US authentication and acco unting requests, a RADIUS proxy ma[...]

Glossar y GL-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Service A means of specifying the method to use to perfo rm a function. A service can be specified for the follo wing functions: auth entication, authorizatio n, accounting, and authenticat ion-authorization. For example, a service can specify that authentication be [...]

Glossary GL-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 T TACACS T erminal Access Controller A ccess Control System, a an authentication server that validates user IDs and passwords, thus controlling entry into systems. Telnet A service that lets you log in to a system o ve r a network just as though y ou were logging in f[...]

Glossar y GL-9 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 VPN V irtual Pri vate Netw ork is a way for companies to use the Internet to securely transport pri vate data. VRF V irtual routing and forwarding. A per VPM routing t a ble on the PE router . Each VPN instantiated on that PE router has its own VRF . X X.25 A reliabl[...]

Glossary GL-10 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02[...]

IN-1 Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 INDEX A AAA Servers multiple 2-9 Access Registrar definition 1-1 objects 2-1 Access-Accept 2-7 Access-Challenge 1-2 Accounting attributes 1-4 database 1-1 definition 1-1 AltigaOutgoingScript 3-2 ANAAAOutgoing 3-2 AscendIncomingScrip t 3-2 AscendOutgoing Script 3-2 Attribute Di[...]

Index IN-2 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 RadiusServer object 2-1 RepIPMaster 4-7 Replication ix, 4-1 archive 4-3 automatic resync hronization 4-4 configuration settings 4-5 data flow 4-2 data integrity 4-3 hot configuration 4-5 hot-standby 4-1 impact on request processing 4-5 RepIPAddress 4-7 RepTransactionArch[...]

Index IN-3 Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 definition 1-2 SLIP 1-4 SNMP ix, 5-1 configuration files 5-5, 5-6 traps 5-2 SNMP Configuration community string 5-7 snmp.conf file 5-6 snmpd.conf file 5-6 T Tcl scripts 3-1 tMapSourceIPAddress 3-5 tParseAARealm 3-5 tParseServiceAndAAASRealmHints 3-6 tParseServiceAndA ARe[...]

Index IN-4 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02[...]