Radius AAA Configuration v1.0

Fortescue Metals Group Ltd (FMG)
Radius Configuration Tune up
Version 1.0
Status
Date 23-Jan-24
Security
Reference 745238126.docx
Copyright © Mavenir 2024
Copyright © Mavenir 2024. All rights reserved. This document is protected by international copyright law and may not be
reprinted, reproduced, copied or utilised in whole or in part by any means including electronic, mechanical, or other means
without the prior written consent of Mavenir.
Whilst reasonable care has been taken by Mavenir to ensure the information contained herein is reasonably accurate, Mavenir
shall not, under any circumstances be liable for any loss or damage (direct or consequential) suffered by any party as a result
of the contents of this publication or the reliance of any party thereon or any inaccuracy or omission therein. The information in
this document is therefore provided on an “as is” basis without warranty and is subject to change without further notice and
cannot be construed as a commitment by Mavenir.
The products mentioned in this document are identified by the names, trademarks, service marks and logos of their respective
companies or organisations and may not be used in any advertising or publicity or in any other way whatsoever without the
prior written consent of those companies or organisations and Mavenir.
E & OE
For more information

Please visit mavenir.com
email contactus@mavenir.com
Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

Copyright © Mavenir 2024 Status: Page 2 of 9
Table of Contents
1. Introduction.........................................................................................................5
1.1. Scope..................................................................................................................................... 5
1.2. Intended Audience................................................................................................................. 5
1.3. Prerequisites.......................................................................................................................... 5
2. R&D suggested radius configuration...............................................................6

Document Version History

Issu Date Change Summary Updated By
e
1.0 23-Jan-2024 Radius configuration fine tuning for vSAEGW Ranjit Tarade
Changes since last issue

Updated version
Table 1: Document Version History
Document control
Owner: Ranjit Tarade Title: Sr Deployment Engineer
Approved by: Nazmul Alam Title: Technical Lead
Approved by: Title:
Other Information:

1. Introduction
1.1. Scope
This document provides the necessary technical detail of radius configuration modification done on
vSAEGW during radius failover to test case performed at ELI site installed at the FMG.
1.2. Intended Audience

Deployment and Solution Architect and Operation Engineer from FMG and Mavenir who are involve in
the designing and installation of Mavenir EPC at the FMG Network.
1.3. Prerequisites
Before the configuration is attempted the following activities should be completed:
 Basic call flow is working after radius failover.
 Ensure radius peer status state (connected/dis-connected) change during AAA failover.
Network
Element vSAEGW
Context Radius parameters (Auth/Acct) tune up for failover scenarios

2. R&D suggested radius configuration

aaa group aaaGroup1
radius accounting max-retries 1
radius accounting max-outstanding 255
radius accounting response-timeout 2
radius accounting deadtime 60
radius accounting interim interval 100
radius accounting detect-dead-server consecutive-failures 0
radius accounting algorithm first-server
radius accounting server 10.231.146.213 port 1813 secret-key M@v3n1R!% acct-on enable acct-off disable 1
radius accounting server 10.231.146.214 port 1813 secret-key M@v3n1R!% acct-on enable acct-off disable 2
radius authentication max-retries 1
radius authentication max-outstanding 255
radius authentication response-timeout 2
radius authentication deadtime 60
radius authentication detect-dead-server consecutive-failures 0
radius authentication algorithm first-server
radius authentication server 10.231.146.213 port 1812 secret-key M@v3n1R!% 1
radius authentication server 10.231.146.214 port 1812 secret-key M@v3n1R!% 2

Radius Attributes brief
aaa group aaaGroup1 <AAA Group Profile>

Accounting Parameter:
radius accounting max-retries 1 <if an access request gets timedout from server, it will
retried max 1 times >
radius accounting max-outstanding 255 < This is max queue size or number of messages
which can be queued max >
radius accounting response-timeout 2 < CDF sends an access request to selected radius
server and start a timer of 2 sec and wait for response, if no response is received within 2
sec, it will be considered as timeout >
radius accounting deadtime 60 <If there is no response received in defined time for any of
request from selected server, server will marked as dead for configured dead timer(60 min).
During this 60 min, no request will go to this dead marked server. Upon dead timer expiry,
server state will be marked as active again>
radius accounting interim interval 100
radius accounting detect-dead-server consecutive-failures 0 <This configuration is for
marking a server dead permanently.0 (zero) value means server will never be marked as
permanently dead.>
radius accounting algorithm first-server <if we configure algorithm as "first-server" -> with
First server algo there is priority associated. whatever is selected first, request will go to that
server only till it's up>
Authentication Parameter:
radius authentication max-retries 1 <if an access request gets timed out from server, it will
retry max 1 times >
radius authentication max-outstanding 255 <This is max queue size or number of messages
which can be queued max >
radius authentication response-timeout 2 < CDF sends an access request to selected radius
server and start a timer of 2 sec and wait for response, if no response is received within 2
sec, it will be considered as timeout >
radius authentication deadtime 60 <If there is no response received in defined time for any
of request from selected server, server will marked as dead for configured dead timer(60
min). During this 60 min, no request will go to this dead marked server. Upon dead timer
expiry, server state will be marked as active again>

radius authentication detect-dead-server consecutive-failures 0 <This configuration is for

marking a server dead permanently.0 (zero) value means server will never be marked as
permanently dead.>
radius authentication algorithm first-server server <if we configure algorithm as "first-server"
-> with First server algo there is priority associated. whatever is selected first, request will go
to that server only till it's up>



Radius AAA Configuration v1.0

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Radius AAA Configuration v1.0

Uploaded by

Copyright:

Available Formats

Fortescue Metals Group Ltd (FMG)

Radius Configuration Tune up

Copyright © Mavenir 2024

For more information

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

Document Version History

Changes since last issue

Table 1: Document Version History

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

1.2. Intended Audience

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

2. R&D suggested radius configuration

radius accounting max-retries 1

radius accounting max-outstanding 255

radius accounting response-timeout 2

radius accounting deadtime 60

radius accounting interim interval 100

radius accounting detect-dead-server consecutive-failures 0

radius accounting algorithm first-server

radius authentication max-retries 1

radius authentication max-outstanding 255

radius authentication response-timeout 2

radius authentication deadtime 60

radius authentication detect-dead-server consecutive-failures 0

radius authentication algorithm first-server

radius authentication server 10.231.146.213 port 1812 secret-key M@v3n1R!% 1

radius authentication server 10.231.146.214 port 1812 secret-key M@v3n1R!% 2

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

Radius Attributes brief

aaa group aaaGroup1 <AAA Group Profile>

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

radius authentication detect-dead-server consecutive-failures 0 <This configuration is for

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

Fortescue Metals Group Ltd Radius Configuration Tune up Version 1.1

You might also like