| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:dpi_components:radius:radius_requirements [2025/08/29 09:21] – elena.krasnobryzh | en:dpi:dpi_components:radius:radius_requirements [2026/02/12 11:10] (current) – [Minimum FastRADIUS Configuration] elena.krasnobryzh |
|---|
| * ''0x20'' — all TACACS+ packets | * ''0x20'' — all TACACS+ packets |
| * ''rad_check_code_pdu=2:4'' — analyze PDU with codes 2 and 4 | * ''rad_check_code_pdu=2:4'' — analyze PDU with codes 2 and 4 |
| * ''rad_check_acct_status_type=1:3'' — analyze PDU with statuses 1 and 3 | * ''rad_check_acct_status_type=1:3'' — analyze PDUs with status (1) Start, (2) Stop, (3) Interim-Update. Regardless of the settings, packets with type 2 (accounting stop) are always processed. If you need to disable the processing of accounting stop packets (the ''del'' command will not be executed — deletion of IP-login bindings in DPI), then you need to use the parameter ''radius_acct_status_check_type=1,3''. In it, you can specify both a list of type numbers separated by commas and ranges separated by hyphens. Example: ''radius_acct_status_check_type=1,3-5''. In this case, radius accounting packets with statuses ''1'', ''3'', ''4'', and ''5'' will be processed. **''rad_check_acct_status_type'' has a lower processing priority than ''radius_acct_status_check_type''.** |
| * ''mem_preset=1'' — initialize memory on startup | * ''mem_preset=1'' — initialize memory on startup |
| * ''fdpi_servers=127.0.0.1:29000,123.45.67.85:29000'' — list of DPI servers to send data to, where 29000 is the default control port | * ''fdpi_servers=127.0.0.1:29000,123.45.67.85:29000'' — list of DPI servers to send data to, where 29000 is the default control port |
| * ''64'' — bind only for /64 subnets | * ''64'' — bind only for /64 subnets |
| * ''-1'' — bind for any subnets.\\ The subnet is taken from the RADIUS attribute ''Delegated-IPv6-Prefix(123)'' | * ''-1'' — bind for any subnets.\\ The subnet is taken from the RADIUS attribute ''Delegated-IPv6-Prefix(123)'' |
| | |
| | Parameters ''bind_ipv6_address'' and ''bind_ipv6_subnet'' can be set simultaneously.\\ If a /128 mask is present in Framed-IPv6-Prefix, it is not checked against the restriction set by the ''bind_ipv6_subnet'' value. |
| |
| The subscriber is identified by the RADIUS attribute ''User-Name'' or ''Calling-Station-ID'' (depending on the ''login_replace'' setting) | The subscriber is identified by the RADIUS attribute ''User-Name'' or ''Calling-Station-ID'' (depending on the ''login_replace'' setting) |
