User Guide for Edgecore models including: EAP101 Framed IP Address Feature, EAP101, Framed IP Address Feature, Address Feature, Feature
Technical Guide Framed-IP-Address Feature Copyright Notification Edgecore Networks Corporation © Copyright 2018 Edgecore Networks Corporation. The information contained herein is subject to change without notice. This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered by Edgecore Networks Corporation. Edgecore Networks Corporation shall not be liable for technical or editorial errors or omissions contained herein. Table of Contents Revision ............................................................................................................................................................................. 2 Introduction ...................................................................................................................................................................... 3 Flow Diagram .................................................................................................................................................................... 4 Configuration .................................................................................................................................................................... 9 1 Revision Firmware version V12.4.0 or later V12.4.0 or later V12.4.0 or later V12.4.1 or later Supported Model EAP101, EAP102 EAP101, EAP102 EAP101, EAP101 EAP101, EAP102 Date 29th May 2023 20th June 2023 18th July 2023 28th July 2023 Author Alex Tan Corner Wang Alex Ho Alex Tan Remarks 1st revision 2nd revision 3rd revision Add description for firmware v12.4.0 and v12.4.1. 2 Introduction This feature is an enhancement to the RADIUS accounting functionality. It is ONLY supported on EAP101, EAP102 with firmware version V12.4.0 or later. Any firmware version prior to V12.4.0 will not contain this feature. In previous RADIUS accounting implementation, the IP address of a supplicant or client is not included in the Accounting Start Request. This causes the RADIUS server not able to log the IP address of a supplicant. This new feature called "Framed-IP-Address" will now include the IP address of the supplicant in the Accounting Start Request packet. The concept is to wait for the DHCP 4-way handshaking process to complete and the IP address of a supplicant can then be obtained. This feature is enabled by default in V12.4.0 and disabled in V12.4.1 or later. If using attribute to enable this feature, there will be no "Framed-IP-Address" in Accounting Start packet but will be in Interim Update and Accounting Stop packets. 3 Flow Diagram Original implementation (FW ver. 12.3.1 or before) 4 FW ver. 12.4.0 - Default Setting 5 FW ver. 12.4.0 - Behavior can be changed as follows by attribute information 6 FW ver. 12.4.1 or newer - Default Setting 7 FW ver. 12.4.1 or newer - Behavior can be changed as follows by attribute information 8 Configuration Default Setting Feature Client IP address is included into RADIUS Accounting Start Client IP address is included into RADIUS Accounting Interim Client IP address is included into RADIUS Accounting Stop *ONLY IPv4 is supported. Ver 12.4.0 Default Enabled (Disable through attribute) Always Enabled Always Enabled Enabling and Disabling 1. Enable SSH service and login to the device. 2. Create a dictionary file such as "dictionary.zvendor". Ver 12.4.1 or newer Default Disabled (Enable through attribute) Always Enabled Always Enabled 3. Edit the dictionary file to the format below. 4. Add the newly created dictionary file to the RADIUS main dictionary file and save. 9 5. Create an account with the attribute as below. Explanation: 1. Using account "test": In v12.4.0, Accounting Start Request packet will be sent by the AP until Frame-IP-Address obtains client IP address, i.e. client is not able to access the network before the process is finished In v12.4.1, Accounting Start Request packet will be sent by the AP with no Frame-IP-Address 2. Using account "test1" (Framed-IP-Address enabled): Accounting Start Request packet will be sent by the AP with no Frame-IP-Address 3. Using account "testing" (Framed-IP-Address disabled): Accounting Start Request packet will be sent by the AP until Frame-IP-Address obtains client IP address, i.e. client is not able to access the network before the process is finished 10Microsoft Word for Microsoft 365