Cisco Service Control Subscriber Manager LEGs User Guide, Release 5.1.x

Configuring the RADIUS Client

---

Published: February 25, 2015

Introduction

This chapter describes the configuration procedure for a RADIUS client.

Configuring the RADIUS Client

The RADIUS clients are needed to send RADIUS messages to the RADIUS listener and must be configured to do so.

Step 1 Configure the Subscriber Manager machine as the destination of accounting messages.

You must configure the following parameters:

• SM IP address
• UDP ports to which the RADIUS listener listens
• Shared secret configured for this client in the Cisco Service Control Subscriber Manager configuration file

Step 2 Verify that the Accounting-Start message is sent with the correct attributes.

• Attributes configured in the subscriber ID attribute mapping in the Subscriber Manager configuration file. See Mapping a RADIUS Attribute to a Subscriber ID.
• Attributes configured in the subscriber IP address attribute mapping in the Subscriber Manager configuration file, the Framed-Route or the Framed-IP-Address. See Mapping of RADIUS Attribute to Subscriber IP Address.
• (Optional) Attributes configured in the Subscriber package attribute mapping in the Subscriber Manager configuration file. See Mapping RADIUS Attribute to Subscriber Policy.

Step 3 Verify that the Accounting-Stop message is sent with the correct attributes.

• Attributes configured in the subscriber ID attribute mapping in the Subscriber Manager configuration file. See Mapping a RADIUS Attribute to a Subscriber ID.
• Attributes configured in the subscriber IP address attribute mapping in the Subscriber Manager configuration file, the Framed-Route or the Framed-IP-Address. See Mapping of RADIUS Attribute to Subscriber IP Address.

Note If you do not have a requirement to use Accounting Interim Message, to reduce the load of packet handling, it is recommended that you configure the RADIUS client to not send the Authentication and Accounting-Intermediate messages to the Subscriber Manager. If you are configuring the RADIUS client to send the messages, configure the minimum value of Accounting Interim Transmit Interval and Packet Reply/Retry Timeout between 30 seconds and 60 seconds. This is to make sure that the RADIUS client avoids sending duplicate packets before it receives the ACK message from RADIUS Listener LEG.