Steel-Belted Radius Carrier 7.2.x Administration and Configuration Guide > Administering Profiles > Setting Up Profiles

Setting Up Profiles

The Profiles panel (Figure 38) lets you define sets of check list and return list attributes. You can then assign these profiles to users to simplify user administration.

Figure 38: Profiles Panel

Adding a Profile

To add a profile:

1. Click Profiles to open the Profiles panel.
2. Click the Add button on the SBR Administrator toolbar.

The Add Profile dialog (Figure 39) appears.

Figure 39: Add Profile Dialog

3. Enter a name for the new profile in the Name field.
4. Optionally, enter a description for the profile in the Description field.
5. Add check list attributes and return list attributes to the profile.

The following procedure describes how to add standard RADIUS attributes to a check list or return list. To add a structured attribute and the associated subattributes to a check list or return list see Adding Structured Attributes to the Check List or Return List of a Profile.

1. Click the Check List tab or the Return list tab.
2. Click Add. The Add Check List Attribute dialog or the Add Return List Attribute dialog (Figure 40) opens.

Figure 40: Add Check List Attribute and Add Return List Attribute Dialogs

1. Select the attribute you want to add from the Attributes list.
2. Select or enter a value for the attribute.

The dialog changes according to the attribute you choose. Some attributes require that you enter a value, string, or IP address. Other attributes require that you choose from a fixed list of values.

If the Multivalued indicator is dimmed, an attribute can have only one value. If the Multivalued attribute is undimmed, you can add multiple values for the attribute.

(Check List attributes only) To set this value to the default value for the attribute (which is useful in situations where the attribute is not included in the RADIUS request), check the Default value check box.

(Return list single-valued attributes only) If you do not want to specify a particular value, but want to make sure that whatever value of the attribute appears in the RADIUS request is echoed to the client in the RADIUS response, click the Echo check box.

1. Click Add to add this attribute/value pair to the list.
2. When you are finished adding attribute/value pairs, click Close to return to the Add Profile dialog.

6. Click OK to save the profile.

Adding Structured Attributes to the Check List or Return List of a Profile

The following terminologies are used in this section:

• Attribute—used to represent a standard RADIUS attribute in the packet.
• Parent or structured Attribute—used to describe an attribute that contains subattributes, rather than a conventional simple data type such as an integer. This may be a parent attribute, or it may itself be a subattribute.
• Subattribute— refers to the data items within a structured or parent attribute. While the subattributes are frequently in TLV format, occasionally they are missing Type, Length, or both.

NOTE: Structured attributes (VSAs with subattributes) defined in return lists are added to the reply message as a whole unit, rather than their subattributes being added individually to any existing response VSAs. In this way they are treated just as unstructured VSAs. For example: Attribute "ParentAttr" is defined as being a multivalue return list attribute, with possible subattributes "ChildAttrA" and "ChildAttrB". A response already has a copy of "ParentAttr" with subattribute "ChildAttrA", for example from an authentication process. A profile specifies that "ParentAttr" must be added with subattribute "ChildAttrB". The result is a response with two ParentAttr structured attributes: ParentAttr ChildAttrA ParentAttr ChildAttrB The result is not a response with a single ParentAttr: ParentAttr ChildAttrA ChildAttrB

To add a structured attribute and its subattributes to a check list or return list:

1. From the Add Profile dialog, add the parent attribute to the check list or return list by selecting it from the list of attributes under the check list or return list tab.

In the example shown in Figure 41, WiMAX-Packet-Flow-Descriptor and WiMAX-QOS-Descriptor are structured (parent) attributes to which you add subattributes.

Figure 41: Add Profile Dialog for Adding Subattributes

2. Select the parent attribute.
   

   NOTE: If you enable the Echo check box at the parent attribute level, you cannot add subattributes. The Add Child button is disabled.

   
   
3. Add the subattributes by clicking Add Child.

The Add Check List Attribute dialog or the Add Return List Attribute dialog (Figure 42) opens.

Figure 42: Subattribute Add Check List Attribute and Add Return List Attribute Dialogs

4. Select Values from the Attributes list and click Add.
   

   NOTE: In most cases the Attributes list displays the subattributes appropriate for the selected parent attribute, and you simply select the desired subattribute and click Add. However, because WiMAX structured (parent) attributes are quite long, a continuation flag attribute is required. This is denoted by the Values attribute.

   
   
5. Click Close to return to the Add Profile dialog.

Values now appears under the parent attribute, indicating that you can add a subattribute (Figure 43).

Figure 43: Parent Attributes in Add Profile Dialog

6. Select Values from the list and click Add Child.
7. Select or enter a value for the subattribute.

The dialog changes according to the subattribute. Some subattributes require that you enter a value, string, or IP address. Other subattributes require that you choose from a fixed list of values. Figure 44 shows an example in which Schedule-Type is the subattribute and the Extended-rtPS has been selected as the value.

Figure 44: Example Subattribute

8. Click Add to add this subattribute to the list.
9. When you are finished adding the subattributes click Close to return to the Add User dialog.

The subattributes appear in the Add Profile dialog (Figure 45).

Figure 45: Structured Attributes Added

10. When you are finished, click OK to save the Profile entry.

Removing a Profile

To remove a profile:

1. Open the Profiles panel.
2. Select the entry for the profile you want to remove.
3. Click the Delete button on the SBR Administrator toolbar (or right-click the profile entry and choose Delete from the context menu).
4. When you are prompted to confirm the deletion, click Yes.
   

   NOTE: Do not delete a profile that is assigned to a user. If you delete an active profile, the attributes defined in the profile are removed from all user's settings, which is likely to result in authentication failures.