RADIUS Interface for Cisco SPS
Preface
Downloads: This chapterpdf (PDF - 206.0KB) The complete bookPDF (PDF - 1.63MB) | Feedback

Preface

Table Of Contents

Preface

Scope

Overview

Audience

Documentation Organization

Document Conventions

Obtaining Documentation

Cisco.com

Documentation CD-ROM

Ordering Documentation

Documentation Feedback

Obtaining Technical Assistance

Cisco TAC Website

Opening a TAC Case

TAC Case Priority Definitions

Obtaining Additional Publications and Information


Preface


Scope

RADIUS Interface for Cisco SPS is based on Cisco Session Initiation Protocol (SIP) Proxy Server (SPS) Version 2.1. Subsequent releases of Cisco SPS support the same interface. The examples involve integration with the FreeRADIUS Remote Authentication Dial-In User Service (RADIUS) server, Version 0.9.1. Additional information about FreeRADIUS is available at http://www.freeradius.org/.

You can configure and integrate Cisco SPS with a RADIUS server for:

Accounting

Authentication

Preauthentication

Overview

Cisco SPS acts as an RFC 2865- and RFC 2866-compliant RADIUS client interfacing to an RFC 2865- and RFC 2866-compliant RADIUS server. In some cases, additional functionality not covered by these RFCs is required on behalf of the RADIUS server for the desired results to occur. These cases, and a detailed description of the requirements, are highlighted in this document.

RADIUS is an Internet Engineering Task Force (IETF) protocol based on the User Datagram Protocol (UDP). RADIUS functions by exchanging a set of attribute/value pairs between the client and server. For accounting, Cisco SPS acts as a RADIUS client sending Accounting-Request packets with the corresponding attribute value (AV) pairs to a RADIUS server to provide the necessary information for the server to form Call Detail Records (CDR). For authentication, Cisco SPS acts as a RADIUS client sending Access-Request packets with the corresponding AV pairs to a RADIUS server to facilitate the validation of a user's credentials. For preauthentication, Cisco SPS acts as a RADIUS client sending Access-Request packets with the corresponding AV pairs to a RADIUS server to enforce service-level agreements (SLA).

Audience

This document is intended for Cisco internal, customer and partner network support engineers, and network managers responsible for planning, designing, implementing, or integrating Cisco SPS to a RADIUS server.

Documentation Organization

This document includes the following chapters:

"RADIUS Accounting for Cisco SPS"—Describes the specifics of the accounting interface.

"RADIUS Authentication for Cisco SPS"—Describes the specifics of the authentication interface.

"RADIUS Preauthentication for Cisco SPS"—Describes the specifics of the preauthentication interface.

Document Conventions

Within Cisco IOS software documentation, the term router is generally used to refer to a variety of Cisco products (for example, routers, access servers, and switches). Routers, access servers, and other networking devices that support Cisco IOS software are shown interchangeably within examples. These products are used only for illustrative purposes; that is, an example that shows one product does not necessarily indicate that other products are not supported.

The following conventions are used in Cisco IOS documentation:

Convention
Description

^ and Ctrl

The ^ and Ctrl symbols represent the Control key. For example, the key combination ^D or Ctrl-D means press the Control key and D keys simultaneously. Keys are indicated in capital letters but are not case sensitive.

String

A string is a nonquoted set of characters shown in italics. For example, when setting an SNMP community string to the public, do not use quotation marks around the string, or the string will include the quotation marks.


Command syntax descriptions use the following conventions:

Convention
Description

Bold

Text in bold indicates commands and keywords that you enter literally as shown.

Italics

Text in italics indicates arguments for which you supply values.

[x]

Square brackets enclose an optional element (keyword or argument).

|

A vertical line indicates a choice within an optional or required set of keywords or arguments.

[x | y]

Square brackets enclosing keywords or arguments separated by a vertical line indicate an optional choice.

{x | y}

Braces enclosing keywords or arguments separated by a vertical line indicate a required choice.


Nested sets of square brackets or braces indicate optional or required choices within optional or required elements. For example:

Convention
Description

[x {y | z}]

Braces and a vertical line within square brackets indicate a required choice within an optional element.


Examples use the following conventions:

Convention
Description
screen

Examples of information displayed on the screen are set in Courier font.

boldface screen

Examples of text that you must enter are set in Courier bold font.

<     >

Angle brackets enclose text that is not printed on the screen, such as passwords.

!

An exclamation point at the beginning of a line indicates a comment line. (Exclamation points are also displayed by the Cisco IOS software for certain processes.)

[     ]

Square brackets enclose default responses to system prompts.


IP addresses and telephone numbers use the following conventions:

Convention
Description

The letter a used in the high-order address range for an IP V4-formatted address.

Example: a.23.10.224

Represents a public Class A Internet address or network. These are used for illustrative purposes in place of public numbers.

The letter b used in the high-order address range for an IP V4-formatted address.

Example: b.23.10.224

Represents a public Class B Internet address or network. These are used for illustrative purposes in place of public numbers.

The letters x and y used within phone numbers

Example: xxx.yyy.1234

Represents the area code and prefix for a telephone number. These are used for illustrative purposes in place of public numbers.



Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.


Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in this manual.



Timesaver Means the described action saves time. You can save time by performing the action described in the paragraph.


Obtaining Documentation

Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

International Cisco websites can be accessed from this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation CD-ROM

Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated regularly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual or quarterly subscription.

Registered Cisco.com users can order a single Documentation CD-ROM (product number DOC-CONDOCCD=) through the Cisco Ordering tool:

http://www.cisco.com/en/US/partner/ordering/ordering_place_order_ordering_tool_launch.html

All users can order annual or quarterly subscriptions through the online Subscription Store:

http://www.cisco.com/go/subscription

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace:

http://www.cisco.com/en/US/partner/ordering/index.shtml

Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA.) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).

Documentation Feedback

You can submit comments electronically on Cisco.com. On the Cisco Documentation home page, click Feedback at the top of the page.

You can send your comments in e-mail to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance.

Cisco TAC Website

The Cisco TAC website (http://www.cisco.com/tac) provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365 days a year.

Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:

http://tools.cisco.com/RPF/register/register.do

Opening a TAC Case

The online TAC Case Open Tool (http://www.cisco.com/tac/caseopen) is the fastest way to open P3 and P4 cases. (Your network is minimally impaired or you require product information). After you describe your situation, the TAC Case Open Tool automatically recommends resources for an immediate solution. If your issue is not resolved using these recommendations, your case will be assigned to a Cisco TAC engineer.

For P1 or P2 cases (your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.

To open a case by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447

For a complete listing of Cisco TAC contacts, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

TAC Case Priority Definitions

To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.

Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:

http://www.cisco.com/en/US/products/products_catalog_links_launch.html

Cisco Press publishes a wide range of networking publications. Cisco suggests these titles for new and experienced users: Internetworking Terms and Acronyms Dictionary, Internetworking Technology Handbook, Internetworking Troubleshooting Guide, and the Internetworking Design Guide. For current Cisco Press titles and other information, go to Cisco Press online at this URL:

http://www.ciscopress.com

Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/go/packet

iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet business strategies for executives. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html

Training—Cisco offers world-class networking training. Current offerings in network training are listed at this URL:

http://www.cisco.com/en/US/learning/index.html