Technical Documentation

Configuring Authentication Support for the DHCP Relay Agent (NSM Procedure)

You can configure the parameters the router sends to the external Authentication, Authorization, and Accounting server. A group configuration takes precedence over a global DHCP relay or DHCP local server configuration.

  1. In the NSM navigation tree, select Device Manager > Devices.
  2. Click the Device Tree tab, and then double-click the device to select it.
  3. Click the Configuration tab. In the configuration tree, expand Forwarding Options > DHCP Relay.
  4. Select Authentication.
  5. Add or modify Authentication settings as specified in Table 1.
  6. Click one:
    • OK—Saves the changes.
    • Cancel—Cancels the modifications.

Table 1: Authentication Configuration Details

Task Your Action

Configure the password.
  1. Expand Authentication.
  2. In the Comment box, enter the comment for authentication.
  3. In the Password box, enter the password to be sent to the external AAA authentication server for subscriber authentication.

Configure the username.
  1. Click Username Include next to Authentication.
  2. In the Comment box, enter the comment.
  3. In the Delimiter box, enter the character used as the delimiter between the concatenated components of the username.

    You cannot use the semicolon (;) as a delimiter.

  4. In the Domain Name box, enter the domain name that is concatenated with the username during the subscriber authentication process.
  5. In the User prefix box, enter the user prefix concatenated with the username during the subscriber authentication process.
    • Select Mac Address check box if the MAC address from the client PDU be concatenated with the username during the subscriber authentication process.
    • Select Logical System Name check box if the logical system name be concatenated with the username during the subscriber authentication process.
    • Select Routing Instance Name check box if the routing instance name be concatenated with the username during the subscriber authentication process.
    • Select Option 60 check box if the payload of the Option 60 (Vendor Class Identifier) from the client PDU be concatenated with the username during the subscriber authentication process.
    • Select Circuit Type check box if the circuit type be concatenated with the username during the subscriber authentication process.
  6. Click Option 82 next to Username Include.
  7. Select the Circuit-id or remote id check box to select the string for the agent circuit ID suboption.

Published: 2009-08-23