RADIUS Server - Accounting

What can I do here?

Use this window to configure the RADIUS server to allocate IP addresses.

IP Pool Management

IP Pool management makes it possible for a Security Gateway to authenticate RADIUS-defined users, and use the RAS IP pools on the RADIUS server. The RADIUS server is configured to assign an IP address to successfully authenticated users from the internal pool.

• You can use a default RADIUS server for all RADIUS authentications, overriding the specific configuration of a RADIUS server. This may be important when configuring the system to work with one pool.
• Configure the RADIUS server to the correct authentication port as well as the relevant service for RADIUS accounting.
• When a user connects to the Security Gateway, the gateway verifies the user credentials. The RADIUS server then locks the IP assignment associated with this authentication.
• When the user logs out, the RADIUS server releases the lock on the assigned IP address.

Note - Do not use a group of RADIUS servers (for high availability) since it will not be clear from which pool the IP was assigned from. Instead, for high availability, use solutions from the RADIUS server vendor that can synchronize all IP pool information between the servers.

RADIUS IP Pool Management fields

• Enable IP Pool Management means that IP addresses will be assigned. The RADIUS server assigns IP addresses to RADIUS-defined users who have successfully authenticated. When the users log out, the Security Gateway notifies the RADIUS server, which returns the IP address to the RADIUS IP pool.

  The Gateways & Servers will use this accounting interface to notify the server when users login and logout.

• Service is the port that the RADIUS server uses to communicate with clients.