Availability monitoring for external RADIUS servers

Use this feature to monitor whether a RADIUS server is available. RADIUS requests are sent at regular intervals to check whether the RADIUS service is functional.

Monitoring can be performed as follows:

• By sending status server requests (DEFAULT). These are specifically used to check the availability of RADIUS services. However, they are not supported by all RADIUS servers (a positive example is FreeRADIUS).
• By sending access requests ("dummy requests"). Only use this method if the server does not support status server requests.

The configuration is carried out in LANconfig under Wireless-LAN > 802.1X > RADIUS server availability monitoring > Availability monitoring profiles.

Name

Enter the name of the availability monitoring profile here.

Monitoring packet type

Your choices are as follows:

Access request (default)

Only use this type if the server does not support status server requests.

Status server

This type is specifically for the availability monitoring of RADIUS services, but it is not supported by all RADIUS servers.

Attribute values

An attribute is only required for access requests. It is not required for status server requests. Here you can assign user-defined values to RADIUS attributes. The individual name-value pairs must have the form <Name>=<Value>, and they are separated by semicolons. <Name> identifies the RADIUS attribute by its name or number. The associated attribute names can be found in the corresponding RADIUS RFCs. Attribute names can be abbreviated as long as the identifiers are unequivocal. As the number of characters is limited, the name can abbreviated. The abbreviation must be unique, however. Examples:

• NAS-Port=1234 is not allowed, because the attribute is not unique (NAS-Port, NAS-Port-Id or NAS-Port-Type).
• NAS-Id=ABCD is allowed, because the attribute is unique (NAS-Identifier).

Attribute values can be used to specify names or RFC-compliant numbers. For the device , the specifications Service-Type=Framed and Service-Type=2 are identical. Specifying a value in quotation marks ("<Value>") allows you to specify special characters such as spaces, semicolons or equals signs. The quotation mark in a value requires a leading backslash (\"), as does the backslash itself (\\). It is also possible to use a number of placeholders:

• %n – replaced by the configured device name.
• %e – replaced with the serial number of the device as displayed in the device system info.
• %% – replaced by a single % character.
• %{name} – replaced by the original value of the corresponding RADIUS attribute. Any new / re-definitions within this attribute list are ignored. The identifier can be truncated as long as it remains unique.

Monitoring Interval

Here you define the interval in seconds used by the RADIUS server to check the availability.

The RADIUS servers monitored in this way and their status can be viewed in the table Status > TCP-IP > RADIUS-Supervision-Servers > Servers. An alternative is to view the status table under Status > SLA‑Monitor > RADIUS > Servers.