|
|
|---|
vendor-product
|
Specifies the name of the product. A product name must be unique, cannot include blanks and must consist of 31 or fewer characters. These product names are used only in the Make/model list in the RADIUS Clients panel. This list is used when adding a new RADIUS client or when selecting a vendor-specific attribute.
|
dictionary
|
Specifies the dictionary file to use for this product. The dictionary file must be located in the same directory as the Steel-Belted Radius Carrier daemon or service. You do not need to specify an extension on the dictionary name; Steel-Belted Radius Carrier automatically attaches an extension of .dct to the dictionary names listed in this parameter.
|
call-filter-attribute
|
Specifies the attribute used for call filter functions. Used only by Ascend/Lucent network access devices.
|
challenge-response- attribute
|
Specifies the attribute number in which a network access device sends responses to challenge sequences.
If not specified, the default behavior is to expect responses to be encoded in the User-Password attribute.
|
data-filter-attribute
|
Specifies the attribute used for data filter functionality. Used only by Ascend/Lucent network access devices.
|
discard-after
|
Used for inbound proxy RADIUS servers that send username information in a decorated format. For example, if a proxy RADIUS server sends usernames of the form username@company, then specifying @ results in the @ delimiter character and all text after the @ delimiter character being discarded for authentication purposes; the string username is used.
|
discard-before
|
Used for inbound proxy RADIUS servers that send username information in a decorated format. For example, if a proxy RADIUS server sends usernames of the form company$username, then specifying $ results in the $ delimiter character and all text before the $ delimiter character being discarded for authentication purposes; the string username is used.
|
help-id
|
Help context for the vendor's product in the vendor information help file.
|
ignore-acct-ss
|
If set to Yes, the digital signature of accounting packets based on the shared secret is ignored. This accommodates devices that do not properly sign accounting packages.
Default value is No.
|
ignore-ports
|
Determines whether Steel-Belted Radius Carrier may infer that one user has logged off if the port that was assigned to that user is now being used by another user.
- If set to
No, an inference is made and the previous user is removed from the Active Users list.
- If set to
Yes, no inference is made and both users are deemed active.
Default value is No.
|
max-eap-fragment
|
Specifies a maximum EAP fragment length on a make/model basis. The maximum EAP fragment length emitted by TLS or TTLS is the lesser of the maximum specified in their .eap/.aut files and this setting.
Default value is 1020. This may be inefficient, however, as the fragment length must be set to a number low enough to work with all of a customer's Access Points.
|
port-number-usage
|
- If set to per-port-type, entries in the Active List containing duplicate port numbers and port types are deleted.
- If set to unique, entries in the Active List containing duplicate port numbers are deleted; port type information is ignored.
Default value is per-port-type.
|
product-scan-acct
|
Specifies the name of the section in the vendor.ini file that contains rules for dynamically determining the product associated with an accounting request by the contents of the request packet.
|
product-scan-auth
|
Specifies the name of the section in the vendor.ini file that contains rules for dynamically determining the product associated with an authentication request by the contents of the request packet.
|
send-class-attribute
|
If set to No, the Class attribute is not sent to the client on Access-Accept. (This feature is designed to accommodate devices that do not handle the Class attribute properly.)
Default value is Yes.
|
send-session-timeout-on-challenge
|
- If set to
Yes, the Session-Timeout attribute is sent to the client on Access-Challenge responses that include EAP messages. This attribute advises a network access device on how long it should wait for a user response to the challenge.
- If set to
No, the Session-Timeout attribute is not sent to the client on Access-Challenge responses that include EAP messages.
Default value is Yes.
|
send-extra-attributes-on-auth-only
|
- If set to
Yes, attributes in the WiMAX dictionary are included in responses to auth-only (reauthentication) requests.
- If set to
No, attributes in the WiMAX dictionary are not included in responses to auth-only (reauthentication) requests.
|
WiMAX-Revision-Number
|
The WiMAX specification revision number. The WiMAX Mobility module changes behavior based on the revision number. Valid values are 1.0 and 1.2.
- 1.2, include any revision greater than 1.0 up to and including 1.2.
The default is 1.2.
|
|
|
|---|
Vendor-Product
|
Creates a label that appears as a selection in the Make/Model list in the RADIUS Clients dialog of the SBR Administrator.
|
Product-Scan-Auth=name
|
Applies only to authentication servers. name references a section heading that appears elsewhere in vendor.ini.
|
Product-Scan-Acct=name
|
Applies only to accounting servers. name references a section heading that appears elsewhere in vendor.ini.
|
[name]
|
Provides rules that govern dynamic make/model selection. These rules apply on authentication requests if the value name is assigned to Product-Scan-Auth; they apply on accounting requests if the value name is assigned to Product-Scan-Acct.
|
Product=String
.
.
.
Product=
|
Product is a product name. String is a regular expression to match against attributes in the packet. Character by character, Product must match a Vendor-Product value defined elsewhere in the vendor.ini file.
The default vendor.ini provided with Steel-Belted Radius Carrier includes a number of Vendor-Product values from which you may choose. Each value corresponds to a vendor-specific RADIUS attribute dictionary.
The list of product names and strings is tried in order. If the packet does not come from the first device, the next is tried, and so on until the last entry in the list is tried.
You can set up a default at the end of the list by making sure the last Product entry in the list has no String assigned. If no match is found earlier in the list, Steel-Belted Radius Carrier assumes that the packet comes from the type of device specified in the final entry.
|
