Page History

This page contains some high-level technical tips when authenticating a RADIUS user between the Sonus SBC 1000/2000 to

...

In this section, we provide sample FreeRADIUS configuration bits relevant to RADIUS user authentication on Sonus SBC 1000/2000.

Users

We configure a RADIUS user called raduser who's User Class is ReadOnlyClass. This class name needs to be configured on the Sonus SBC 1000/2000 - see Managing RADIUS User Class Access Level Mapping.

...

This defines the RADIUS client information with the RADIUS Server settings configured on Sonus SBC 1000/2000

client 172.16.250.246/32 {
       secret          = Passw0rd
       shortname       = Sonus SBC 1000/2000246SBC246
}

RADIUS Server Authentication Message Exchange

When a RADIUS user attempts to authenticate on the Sonus SBC 1000/2000 system, the Sonus SBC 1000/2000 behaves as a RADIUS authentication client and sends an Access-Request to the RADIUS server:

...

Sending Access-Accept of id 170 to 172.16.250.246 port 38525
        Class == 0x41646d696e6973747261746f72436c617373

After Sonus SBC 1000/2000 receives the Access-Accept, Sonus SBC 1000/2000 uses the Class attribute returned by RADIUS to map the appropriate access level.

If the request is not authenticated

...

Sending Access-Reject of id 215 to 172.16.250.246 port 5412