Dialogic 1010 manuale d’uso

September 20 08 www.dialog ic.com D i a l o g i c ® I M G 1 0 1 0 / 1 0 0 4 I n t e g r a t e d M e d i a G a t e w a y s R a d i u s R e l e a s e 1 0 . 3 . x / 1 0 . 5 . x[...]

Copyright and Legal No tice Copyright © 2005-2 008 Dialog ic Corporat ion. All Rights Reserved. Y ou may not repr oduce th is document in wh ole or in part without permission in writing from D ialogic Corpor ation at the a ddress prov ided below. All contents of this docu ment are f urnished for informationa l use only and are subject to ch ange w[...]

Hardware Limited Warranty Warranty for Ha rdware P roducts: D ialogic Corporat ion or its sub sidiary that orig inally sold the hardware product ("Dialogic") warrants to th e original purchase r of th is hardware pr oduct, that at the time of de livery the hardware produ ct supplied her eunder will be free from defects in mater ial and wo[...]

v Table Of Contents An Overview of RADIUS on the IMG .......................... ................. ................ .........1 RADIUS Sc enarios ................. ................ ................ ................ ................. ..........5 Generic RAD IUS Attribu tes ................. ................ ................ ................ ..........[...]

1 An Overview of RADIUS on t he IMG Topic Locat ion: Product Description > R ADIUS Overview The IMG uses Remote A uthenti cation Dial In Us er Service (RAD IUS) for streamin g the Call Detail Records ( CDR). The i mplementation i s compli ant with R FC 2865 and RFC 2866. Th e RADIUS m essages are sent to ext ernal RAD IUS servers. The IMG RADIUS[...]

RADIUS 2 RADIUS Server Redundancy The IMG sup ports an Act ive/Stan dby redundancy sch eme. Redun dancy logi c is ind ependent for Authent ication an d Accounti ng Servers. When configu ring RADIUS servers they may get cr eated wit h an initi al priority preferenc e. The IM G will b egin usin g the Active Serve r(s) and switch over to a S tandby se[...]

Overview of RADIUS 3 RADIUS Server Failure Alarm The IMG pro vides auto matic alarmi ng notifica tion to IMG users when a Radi us Server has changed states and can no lon ger be acce ssed. The al arm, reported in EventVi ew, will inclu de the RADIUS S erver Type (A ccess, Accoun ting) , the Server ID, the mode of the Radi us Server (norma l, debug)[...]

5 RADIUS Scenarios Topic Locat ion: Product Description > R ADIUS The IMG sup ports RADI US Authent ication an d Accounting. IMG customer has th e option of usi ng one of t he followi ng scenarios: Authenticat ion and Ac counting In this cas e an Authenti cation Server and an Ac counti ng Server are bot h assigned to the RADIUS cli ent on the IM[...]

RADIUS 6 Authenticat ion only In this cas e only an A uthenti cation Server i s assign ed to the RADIUS client on the IMG.[...]

7 Generic RADIUS Attribute s Topic Locat ion: Product Description > R ADIUS RADIUS Att ributes carry the specifi c authenticat ion, auth orization, in formation and configurat ion detail s for the request a nd reply. Some Attri butes may be inclu ded more than on ce. IETF Attribute # Attribute Name Values Example Description 1 User-Name String 5[...]

RADIUS 8 RADIUS server. For example, a fully qualified domain name would be suitable as a NAS- Identifier. 40 Acct-Status- Type Numeric (4 octets) Values Start Indicates whether this Accounting-Request marks the beginning of the use r service (Start) or the end (Stop). 41 Acct-Delay- Time Numeric (4 octets) 0 This attribute indicat es how many seco[...]

Generic RAD IUS Attribu tes 9 48 Acct-Output- Packets Numeric (4 octets) 0 This attribute indicat es how many packets have been sent to the port in the course of delivering this service to a Framed User, and can only be present in Accountin g-Request records where the Acct- Status-Type is set to Stop. 49 Acct- Terminate- Cause Values NAS-Request Th[...]

11 RADIUS Call Flow: SS7 to SI P Topic Locat ion: Product Description > R ADIUS[...]

13 RADIUS Call Flow: SS7 to H .323 - Release from S S7 Topic Locat ion: Product Description > R ADIUS[...]

15 Incomplete Call B ehavior Topic Locat ion: Product Description > R ADIUS This secti on outlin es the behavior of the IMG ga teway in cas e of the most common incompl ete calls.  User Busy  No Answer f rom User  No Circuit /Channel Available  Unall ocated Number  H.323 Rel ease Reason  H.323 non- Fast-Start[...]

17 Configuring RADIUS Topic Locat ion: Config uration > RAD IUS You can confi gure a tota l of 256 RAD IUS server s. Before You B egin Make sure you have m oved the RAD IUS dicti onary files ( diction ary and dictionary.can tata) to y our RADIUS install ation folder. The files are l ocated in th e foll owing directory: /opt /cantata (di alogic)/[...]

RADIUS 18 Configuring a RADIUS Acco unting Server 1. Right- click External Ne twork Elem ents and sel ect New Radi us Servers . 2. Right- click Radius Serv ers and sel ect New Radiu s Server . The Radiu s Server pan e appears. The foll owing field s are automati cally popul ated: Radius Serve r ID - the ne xt number i n sequen ce 3. Select Accou nt[...]

Configu ring RADIUS 19 Configuring a RADIUS Client 1. Right- click the desired P hysical IMG and select Ne w Radius Cli ent . The Radiu s Client pan e appears. 2. The foll owing fiel ds are automati cally popul ated. Change any def ault val ues, if required. Radius Cli ent Networ k Interface - IP Address of the Physi cal IMG. Authenticat ion Port -[...]

21 Configuring Free RADIUS us ing GCEMS as a RADI US Server Topic Locat ion: Config uration > RAD IUS The IMG run s a RAD IUS client t hat is confi gured to send CDR start & sto p events to the RADIUS s erver, whi ch can b e the GCEMS Li nux serv er or anoth er RADIUS serve r. Requirements  GCEMS serv er runni ng Linux Redhat ES 3 .0, 4.0[...]

RADIUS 22 4. Add access for each IMG Edit th e freeRadius cli ents.conf fil e (/etc/raddb/ clients.conf) If you have multipl e IMG ’ s, the Us ername shoul d be different f or each IMG. Shortname = Your use rname confi gured in th e RADIUS us ers fil e and ClientVi ew A unique use rname is recomm ended for ea ch IMG.us ername Secret = a pa ssword[...]

Configu ring Free RADIU S usin g GCEMS as RADIU S Server 23 10. Archi ve & delete CD R detail files. A copy of th e followi ng files can be f ound at /o pt/cantata/ IMG/radius . a. In the /va r/log/radi us/radacct fol der create a script to archi ve fil es. Name the fil e “ CDR ” #!/bin/ sh # CDR # Sampl e scrip t to archive CDR's. # F[...]

25 Radius Client Topic Locat ion: ClientV iew Pane Refer ence Overview Description This pan e configures a Radiu s Client for a sing le Physical IMG. Before c onfigurin g a client, at l east one Radiu s Server mu st be confi gured. Related Topics An Overview of RADIUS Configu ring a RADIUS C lient A ccessing this Pane IMG EMS-> Logi cal IMG ->[...]

RADIUS 26 Field Descriptions Radius Cli ent Networ k Interface This drop-down list i s populated wi th all of the Network Inte rfaces conf igured on th is particul ar IMG. It is th e responsibi lity of the us er to make su re the in terface may reach the pa rticul ar server. If you ar e Authenticat ion Port The port on t he physi cal IMG that wi ll[...]

RADIUS Cli ent 27 RADIUS Tim e Format This setti ng determin es the format tha t will be used in CDR i n attri butes that incl ude time.  Legacy Format This i s the format used before the avail ability of the Tim e Zone featu re (10.3.2 ER6). Use th is for back ward compati bility i f you are not usin g local ti me. Example: Cantata-set up-time [...]

29 Radius Server Topic Locat ion: ClientV iew Pane Refer ence Overview Description Use this pan e to confi gure informati on about the Rad ius Servers that are i n the network. The re are two types of Radi us Servers , accounti ng and aut horization ; each type may ha ve a prim ary and second ary server. The same ser ver may a lso do both accounti [...]

RADIUS 30 Radius Serve r Data Format  Cantata Format Radius Serve r IP Add ress The IP Addr ess of the Ra dius Server. Radius Serve r Port The port on t he serve r which will accept the Ra diu s connection. Radius Serve r UserName A Username to access t his server. Radius Serve r Passw ord The passw ord to acces s this server . Radius Serve r Au[...]

31 Radius Servers Topic Locat ion: ClientV iew Pane Refer ence Overview Description To create a Ra dius Serv er, right- click Radiu s Server and sel ect New Ra dius Servers . Related Topics An Overview of RADIUS Configu ring a RADIUS A ccounti ng Server Configu ring a RADIUS A uthenti cation Server A ccessing this Pane IMG EMS -> N ew Extern al [...]