What is a radius server ?

[ndiayemalick]

Hello to all the pros online,

Can you please explain me what is a Radius Server used for?

Thank you

[makchitale]

Remote Authentication Dial-In User Service (RADIUS) protocol is an authentication / Authorization and accounting protocol. RADIUS is a client/server protocol.

For eg, in a dial setup, user dialing into a NAS (using Radius) the Radius server will authenticate the user (check username/password), will authorize what the user can or cannot do on the network & keep accounting records like how long the user was connected etc.

http://www.cisco.com/warp/public/707/32.html

http://www.cisco.com/warp/public/793/access_dial/basicradius.shtml

Thanks, Mak.

[ndiayemalick]

Thanks, Mak.

Now can you explain to me what is an access server used for?

Thanks

[makchitale · Accepted solution]

The Access Server consists of modem banks used for remote users to dial into. The modem banks used could be digital modems or analog modems depending on the type of lines used from the telephone cloud....that is, T1/ PRI/ BRI/ POTS lines etc.

http://www.cisco.com/warp/public/44/jump/access_servers.shtml

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Internetworking:ASYNC&viewall=true

Thanks, Mak.

[ndiayemalick]

Thanks again Mak,

I want to be an ISP and a Service provider will give me an E1 connection to start. I want to buy the equipment but I don't know which product to buy. I am thiniking about buying a AS 5300 and 3660 router to start for dial-up users.

Can you give me any suggestion?

PS: I live in Senegal, West Africa

Thank you

[makchitale]

The choice of the Access server platform will depend on various factors:

1)How many incomming E1s are there.

2)The number of modems required, that is, how many max users at a given time will be logged in, how much over subscription you have thought of , how long users are expected to reamin connected.

as5300 is EOL...as5350 / as5400 are good Access platforms.

3600 / 3700 too can be used.

Thanks, Mak.

[Mpolak]

How to force the as5350 to accept Service Type(6):Callback-Framed 4 from RADIUS? as5350 sends Service Type(6):Framed 2 and I cannot find the way in config how to change it. The authorization phase fails in debug due this 4<>2.

Tnx

M.

[makchitale]

For callback to work thru Radius on as5350, use service-type=framed-User and not callback-framed-user.

User profile:

==========

user = mak{

profile_id = 1023

set server current-failed-logins = 0

profile_cycle = 56

radius=Cisco {

check_items= {

2=abcd (password)

}

reply_attributes= {

6=2 (Service-type=Framed-User) Note that the service-type IS NOT Callback-framed-User

7=1 (Framed-protocol=PPP)

9,1="lcp:callback-dialstring=246" Note the mandatory "lcp:"

}

}

debug ppp nego / debug callback / debug radius /debug aaa authen

debug aaa autho

Thanks, Mak.

[ndiayemalick]

Mak can you give me your email address please, because I want to send you the network picture that I want to have for my ISP.

Thanks, Malick