In Policy Enforcement Manager™, the RADIUS client has the ability to initiate RADIUS authentication for a subscriber. You can configure the virtual servers that are used to request for authentication of DHCPv4 and DHCPv6 discovered subscribers. The subscriber authentication may be triggered by subscriber discovery based on other means, such as obtaining RADIUS accounting messages. The ability to generate accounting messages helps to track subscriber usage as a RADIUS client.
RADIUS authentication is initiated when PEM receives messages, showing that the subscribers are attempting to connect to the network. The two factors of initiation are:
Create a RADIUS profile, which contains the shared secret of the RADIUS server, the transaction timeout, password, and retransmission timeout details, for configuring the RADIUS authentication profile settings.
The RADIUS profile that you created can be chosen from the RADIUS profile in, depending on the virtual server IP address type.
|Session||Select Session to log details about subscribers and application sessions.|
|Flow||Select Flow, for more granular reporting of every TCP connection.|
|Transaction||select Transaction, for more granular reporting of every HTTP transaction.|