Dialogic INTEGRATED MEDIA GATEWAYS 1010 - Manual (Page 11)

1
An Overview of RADIUS on the IMG
Topic Location: Product Description > RADIUS
Overview
The IMG uses Remote Authentication Dial In User Service (RADIUS) protocol for
streaming the Call Detail Records (CDR). The implementation is compliant with RFC
2865 and RFC 2866. The RADIUS messages are sent to external RADIUS servers.
The IMG RADIUS interface generates an ACCESS, a START & a STOP Request for
the inbound leg and a START & STOP Request for the outbound leg of the call, as
well as data associated with the INVITE, the 200 OK, the BYE and the CANCEL
methods for those legs utilizing a SIP protocol.
Specifications
The IMG implementation of RADIUS is based on the following RADIUS RFCs:
RFC 2865 - Remote Authentication Dial-In User Service (RADIUS)
RFC 2866 - RADIUS Accounting
Formats
The IMG 1010 supports the Cantata RADIUS formats, which Includes some
attributes defined by RFC 2865 and RFC 2866, as well as Cantata Vendor Specific
Attributes (VSA).
Scenarios
The IMG 1010 supports RADIUS Authentication and Accounting. IMG 1010
customer has the option of using one of the following scenarios:
• Authentication and Accounting
In this case an Authentication Server and an Accounting Server are both
assigned to the RADIUS client on the IMG.
• Accounting only
In this case only an Accounting Server is assigned to the RADIUS client on the
IMG.
• Authentication only
In this case only an Authentication Server is assigned to the RADIUS client on
the IMG 1010.
See
RADIUS Scenarios for more details.
As per RFC 2865 and RFC 2866, the IMG 1010 uses port 1812 for Authentication
and port 1813 for Accounting by default. But these ports are also configurable.
The Authentication and Accounting servers could be the same entity, in which case
both servers will have the same IP address. Or they could be different entities with
different IP addresses.
The RADIUS attributes and VSA’s included in the messages will vary based on the
protocol for used for a specific side of the call, depending on whether it is a TDM
protocol (SS7 or ISDN) or IP protocol (SIP or H.323).
The User name and Password values configured for the Authentication Server used
will be included in the user name and password attributes in the Access Request
message sent from the IMG.