CDMARelease 8.2.1

Configuration TutorialVersion 1.0

October 27, 2006

The manufacturer (MFR) reserves the right to make changes to this document and the products which it describes without notice. The MFR shall not be liable for technical or editorial errors or omissions made herein; nor for incidental or consequential damages resulting from the furnishing, performance, or use of this material or of the accompanying Software or any files derived from the Software.Bridgewater Systems Corporation303 Terry Fox Dr.Suite 500Ottawa, OntarioCanada K2K 3J1Phone: +1 613 591-6655Fax: +1 613 591-6656http://www.bridgewatersystems.com

Bridgewater Systems Technical SupportNorth America: 1-877 943-3772Mexico (Avantel, Telemex): 00-1-800-514-3772International: 1-800 943-37726support@bridgewatersystems.com

Bridgewater and the Bridgewater logo are trademarks of Bridgewater Systems Corporation.Other company or product names referenced may be the trademark or registered trademark of their respective companies.1997-2006 Bridgewater Systems Corporation. All rights reserved.

CDMA Configuration Tutorial CDMA Configuration TutorialTutorial 1 CDMA Configuration Tutorial

In this tutorial, you learn how to configure the AAA Service Controller for a CDMA environment, test the configuration using the radtest utility, and view the accounting records generated.

IntroductionThis tutorial provides step-by-step instructions to configure and then test your AAA Service Controller configuration. You walk through the following steps:

1 Review the prerequisites to make sure the AAA Service Controller is ready to use for this tutorial.

2 Configure the Provisioning Server and start the process.3 Configure the Accounting Framework files and start the Accounting and

RADIUS processes.4 Use the Service Manager to add a license.5 Use the Service Manager to configure the systems PDSN.6 Use the Service Manager to create the Organization Profile Set, User Profile

Sets, and Users.7 Use radtest to test the configuration.8 View the accounting records generated by the radtest examples.

Note Perform the following procedures on a non-production server. Modifying the system configuration on a production server can cause a service outage if done incorrectly.

PrerequisitesBefore starting this tutorial, make sure the following prerequisites are completed:

the packages listed in Table 1 are installed the Service Manager (either the Solaris or Windows version) is installed a valid license key was applied to the Service Manager Oracle processes are running

Note This tutorial uses a Solaris Server called hostname202 with an IP address of 192.168.167.1. Your hostname and IP address will be different and, therefore, the examples must be updated accordingly.

Table 1: AAA Service Controller installation package s

Package Contains

BWSwsoe1 or BWSwsos Oracle Server - Enterprise Oracle Server - StandardRelease 8.2.1 October 27, 2006 Page 1

CDMA Configuration Tutorial CDMA Configuration TutorialConfigure the Provisioning ServerThe Provisioning Server is used to send and receive requests to and from the AAA Service Controller Oracle database. The Provisioning Server is configured using the service.xml file.

1 Log on as the root user to the Solaris Server where the Provisioning Server is installed. For example:

telnet hostname2022 Determine if the Provisioning Server is running:

ps -ef | grep provsIf the Provisioning Server process is running, then one parent and two child processes should be returned.

If the process is running, proceed to "Configure the Accounting Framework" on page 5.

If no processes are returned, you must configure the Provisioning Server configuration files and start the process as described below.

3 Move to the Provisioning Server configuration file directory:

BWSwsdbs Database scripts

BWSwsco Common utilities, test tools, libraries

BWSdal Bridgewater data access layer

BWSprovs AAA Service Controller Provisioning Server

BWSaaapr Provisioning Server API

BWSperl PERL

BWSacctf Accounting Framework

BWSwssc AAA Service Controller client utilities, test tools

BWSwsmw Middleware Server

BWSwsrad RADIUS Server

BWSradmip Bridgewater RADIUS MIP feature

BWSmon Bridgewater Monitoring Facility

BWS wsoc1 Database Client (SQL*Net)

1. Install Oracle Enterprise for master databases (in multi-master replication). You can install Or-acle Standard for standalone or snapshot databases. If you install the RADIUS Server on a standalone machine, without the Oracle database, you must install the Oracle Client package (BWSwsoc)

Table 1: AAA Service Controller installation package (Continued)s

Package ContainsPage 2 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration Tutorialcd /WideSpan/config/provserver4 Edit the server.xml file. As the root user:

r6r6oracle.jdbc.OracleDriverjdbc:oracle:oci:@localhost:hostname202101020

a Make sure the hostname (highlighted in bold above) is correct.b Verify the user-name and password for the database are correct.

Note The installation of the AAA Service Controller uses r6 and r6 as the default user and password. These values can be changed later using the changedbpass script.

c If you are using a remote Oracle database, you must change the line:jdbc:oracle:oci:hostname202to use this format:

jdbc:oracle:thin:@hostname202:1521:wspThis is an example of the server.xml file:

15

*3200032001MYSECRET10256

r6r6oracle.jdbc.OracleDriverjdbc:oracle:oci:@localhost:hostname202101020Release 8.2.1 October 27, 2006 Page 3

CDMA Configuration Tutorial CDMA Configuration Tutorial

adminADMINAdministrator127.0.0.1

middlewaremiddlewareOSSMiddlewareClient

DEBUG

DEBUG

Start theProvisioning

Server process

After you have configured and verified the service.xml file, you can start the Provisioning Server process. As the root user:

/etc/init.d/wsprovs startThe processes indicate if they were successfully started. Verify the log for any error messages. Typically, the logs are generated to the /var/adm/messages file.Page 4 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialConfigure the Accounting FrameworkThe RADIUS Server must have a buffer_config.xml file in the /WideSpan/config directory before the process can start. The Accounting Framework must have a configured acctfwk.xml file in the /WideSpan/config directory before the process can start. This section describes how to use the installed pre-configured files to get the processes running.

1 Log on as the root user to the Solaris Server where the Accounting Framework is installed. For example:

telnet hostname2022 Copy in the standalone version of the buffer_config.xml file:

cp /WideSpan/acctfwk/config.template/buffer_config_radius_standalone.xml /WideSpan/config/buffer_config.xml

3 Change the ownership and group for the buffer_config.xml file:

chown widespan:ws buffer_config.xml4 Verify the change:

ls -l buffer_config.xmlThe following should be displayed:

-rw------- 1 widespan ws 737 Jan 31 16:58 buffer_config.xml5 Copy in the standalone version of the acctfwk.xml file:

cp /WideSpan/acctfwk/config.template/STANDALONE_acctfwk.xml /WideSpan/config/acctfwk.xml

6 Change the ownership and group for the acctfwk.xml file:

chown widespan:ws acctfwk.xml7 Verify the change:

ls -l acctfwk.xmlThe following should be displayed:

-rw------- 1 widespan ws 452 Jan 31 16:58 acctfwk.xml

Start the RADIUSand Accounting

Frameworkprocesses

After you have created the buffer_config.xml and the acctfwk.xml files, start the Accounting Framework process, and the RADIUS process to create the buffer for accounting. As the root user:

# /etc/init.d/wsacctf start# /etc/init.d/wsradius startThe processes indicate if they were successfully started. Verify the log for any error messages. To view the last 10 log entries to the /var/adm/messages file:

tail /var/adm/messagesRelease 8.2.1 October 27, 2006 Page 5

CDMA Configuration Tutorial CDMA Configuration TutorialYou can use the tail -f command for an ongoing view of the log file as you start the processes.

To verify that the processes are running, as the root user:

# ps -ef | grep radiusd# ps -ef | grep acctfwk

Create a licenseThis section explains how to:

create licenses edit or view licenses

The Service Manager system verifies license validity and monitors the license limit for number of users.

A license must be created before users can be created. Only one Service Manager license is required for the entire system.

To create alicense

1 Select License -> New to display the new License Administration form.2 Enter the 16-byte hex authentication code. Contact your distributor for an

authentication code.3 Enter the customer name. This must be an exact match to the customer name

provided for generating the authentication code.4 Enter the distributor name, if applicable. This must be an exact match to the

distributor name provided for generating the authentication code.5 Enter the maximum number of allowed subscribers.6 For a trial license, click the Trial check box to enable a license expiry date and

set the day, month and year of the expiration.7 Click OK to save the license configuration.

The Service Manager verifies the license. If the license is valid, it is entered into the system. If the license is invalid, an error message is displayed. Click Yes to return to the license administration form and correct the information.

If the message "Error while saving license" appears, verify that Oracle replication is operating correctly on the AAA Service Controller to which you are connected. Changes can not be saved while replication is quiesced. Resume replication and repeat license validation.Page 6 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialConfigure RADIUSIn this section, you:

Configure the PDSN Create the DEFAULT Service Profile Configure Profiles and Users

Configure thePDSN

Use the Service Manager to configure the PDSN for a CDMA environment.

1 Launch the Service Manager and login as root.2 Click the System tab.3 Select File > New > PDSN.4 Enter the following information in the fields:

5 Click OK.6 Click Yes when the Save dialog box appears.7 Click Apply Changes to apply the new PDSN to the System.

Create theDEFAULT Service

Profile

Use the Service Manager to create the DEFAULT Service Profile before creating the Organizational Profile Set.

1 Click the Service tab.2 Highlight the Root Organization.3 Select File > New > Service > Profile.4 In the New Profile Set dialog box:

a For Service Profile Name, enter DEFAULT.b From the Service Class Name dropdown menu, select RADIUS

ConnectionService.c Click Create.

Field Value

IP Address IP address of your server

Name Host name of the server

Description Leave blank

Shared Secret SECRET

Vendor Name RFC2138

Model Name Leave blank

Number of Sessions 100

Timezone GMTRelease 8.2.1 October 27, 2006 Page 7

CDMA Configuration Tutorial CDMA Configuration Tutorial5 In the right window, select Root Organization > Service Profiles > Connection Services > Default.

6 In the Default Edit Mode dialog box, click the Attribute Information tab.

a On the Vendor Availability tab, select RFC2138.b On the Attribute Availability tab, click Allow All>>.c Click OK.d Click Yes to save the changes.

Configure Profilesand Users

Use the Service Manager to create the Organization Profile Set, User Profile Sets, and Users.

Create an Organization Profile Set

1 Click the Service tab.2 Highlight the Root Organization.3 Select File > New > Profile Set.4 In the New Profile Set dialog:

a For Name, enter org profile set.b For Profile Set Type, select Organization.c Click Create.

5 In the New Profile Set dialog box:

a Under Connection Services, select DEFAULT.b Click Add.c Click OK.

6 In the Save Dialog box, click Yes.7 Select File > New > Organization.8 In the Add Organization dialog:

a For Organization Name, enter cdma_org.b From the Associated Domain dropdown menu, select .c For New Domain Name. enter cdma_org.net.d From the Profile Set dropdown menu, select org profile set.e Click Create.

A new dialog appears with the message cdma_org has been created successfully.

f Click OK to close the dialog.9 In the right pane, right-click cdma_org and select edit.10 In the cdma_org Edit Mode dialog box:

a In the left pane, select DEFAULT.b From the Dictionary Attributes dropdown menu, select Session-Timeout.c Set the Attribute Name value to 14400.d Click Add.Page 8 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration Tutoriale Click OK to close the new org dialog.f In the Save Dialog box, click Yes.

Create a Gold User Profile Set in the cdma_org Organization

1 In the left pane, select the cdma_org organization.2 Select > File > New > Profile Set.3 In the New Profile Set dialog:

a For Name, enter Gold.b For Profile Set Type, select User.c Click Create.

4 In the New Profile Set - Gold dialog box:

a Select the DEFAULT Connection Service.b Click Add.c Click OK.

5 In the Save Dialog box, click Yes.

Create a Bronze User Profile Set in the cdma_org Organization

1 In the left pane, select the cdma_org organization.2 Select > File > New > Profile Set.3 In the New Profile Set dialog Box:

a For Name, enter Bronze.b For Profile Set Type, select User.c Click Create.

4 In the New Profile Set - Bronze dialog box:

a Select the DEFAULT Connection Service.b Click Add.c Click OK.

5 In the right pane, right-click Gold and select edit.6 In the Gold - Edit Mode dialog box:

a In the right pane, select DEFAULT.b Click The Service Profile (DEFAULT) tab.c From Dictionary Attributes, select Idle Timeout. d Set the Attribute Name value to 3600. e Click Add.f From Dictionary Attributes, select Session Timeout. g Set the Attribute Name value to 14400.h Click Add.i Click OK.

7 In the Save Dialog box, click Yes.Release 8.2.1 October 27, 2006 Page 9

CDMA Configuration Tutorial CDMA Configuration TutorialCreate a gold user

1 In the left pane, select the cdma_org organization.2 Select File > New > User.3 For the Username, Login Name and Password, enter golduser.4 From the Profile Set dropdown menu, select Gold.5 Click Create.

The New Entity dialog appears with the message golduser has been created successfully.

6 In the left pane, select the DEFAULT Connection Service. On the right-side of the display, the following are under Attributes in Effect:

Idle-Timeout 3600

Session-Timeout 14400

7 Click OK to close the dialog.

Create a bronze user

1 Select the cdma_org organization in the left pane.2 Select File > New > User.3 For the Username, Login Name and Password, enter bronzeuser.4 From the Profile Set dropdown menu, select Bronze.5 Click Create.

The New Entity dialog appears with the message bronzeuser has been created successfully.

6 In the left pane, select the DEFAULT Connection Service. On the right-side of the display, the following are under Attributes in Effect:

Session-Timeout 14400

7 Click OK to close the dialog.

Note The attribute values come from the organization and user profile set.Page 10 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialConfigure and run Trace ToolThe RADIUS Trace Tool allows you to monitor RADIUS communication with NASs and other RADIUS Servers. Use this tool to view incoming RADIUS packets.

The Trace Tool connects to the RADIUS Server as a client. The Trace Tool can run on the same host machine as the RADIUS Server, or on a remote machine connected through TCP/IP.

Add a Trace Toolclient

Edit the traceclients file to add a traceclient for the IP address of the machine running Trace Tool. Use the IP address of the machine where the AAA Service Controller is installed.

The traceclients file is located in /WideSpan/config/radius/traceclients.

This is an example of a traceclients file:

PORT 30000TRACEBIND 192.148.143.2CONNECTIONS 4TRACECLIENT 192.148.123.67TRACECLIENT 192.148.123.68TRACECLIENT 192.168.167.1Note The address 192.168.167.1 is used for the examples in the following

procedures. Use your own server address.

After editing the traceclinets file, you must send the RADIUS Server a HUP signal so it can reread the TRACECLIENTS field:

pkill -HUP radiusdIf the PORT or TRACEBIND fields are changed, restart the RADIUS Server.

Start Trace Tool Trace Tool must be started before radtest.1 Log in as the widespan user and go to the tracetool directory:

cd /WideSpan/testtools/ 2 Run Trace Tool:

./tracetool -f filter.cfg -h To stop Trace Tool:

CRT+cRelease 8.2.1 October 27, 2006 Page 11

CDMA Configuration Tutorial CDMA Configuration TutorialRun radtest as the gold userThe radtest utility simulates a PDSN requesting authentication from the RADIUS Server.

In this test, you:

run the radtest utility as the gold user run radtest to mimic a full RADIUS session

This example of radtest prompts you three times to press Enter:

to send the Access-Request message to send the Acct-Start message to send the Acct-Stop message

Note You require a different IP Address from the one provided in this example. Use the IP address of the machine where the AAA Service Controller is installed.

Before running this radtest example, telnet to the AAA Service Controller Server and run the following command to view incoming logs:

tail -f /var/adm/messagesThis enables you to view the logs for the Authentication Request, the Accounting Start, and the Accounting Stop records.

Open another telnet session to complete the following steps:

1 Log on as the widespan user to the Solaris Server where the AAA Service Controller is installed. For example:

telnet hostname2022 Move to the radtest directory:

cd /WideSpan/testtools/radtest3 Enter the following radtest command:

./radtest -Uv 192.168.167.1 SECRET User-Name=golduser User-Password=golduser NAS-Port=1The following output is displayed:

RADIUSIP address : 192.168.167.1Auth UDP Port: 1812Acct UDP Port: 1813User Interact: disabledTimeout Intvl: 120Retry Count: 1Acct Wait Int: 0Page 12 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration Tutorial4 Press Enter to send the Authentication Request. The following output is displayed:

Sending Authentication Request (1:1) SentUsing Request Authenticator:

e4.36.61.3e.f1.69.3c.2d.83.55.cf.c2.86.9c.3b.94User-Name = golduserUser-Password = golduserNAS-Port=1ready to receive RADIUS auth response (1:1)Access Accepted - time = 1 secondstotal time is >149< ms

Class ="42.57.53.0.1.0.e.2f.0.16.0.2.3.7.1.0.0.0.f.7.3.0"

The following log message is generated in the /var/adm/messages file:

Aug 13 14:57:19 kansparc321 radiusd[478]: [ID 559039 local7.info] INFO RADOP(102) auth for golduser from 192.168.167.1[5=1;] accepted with service: DEFAULTThe following is the Trace Tool output:

===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Access Request| 192.168.167.1| 54022| 192.168.167.1| 1812|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:13:30 27-Oct-2006| IN| 51| 1| 0| 3|===============================================================================| Authenticator | Tracking ID || e4.36.61.3e.f1.69.3c.2e.8e.55.cf.c2.86.9c.3b.94| 1|===============================================================================[ 1] =(golduser) 8Byte-------------------------------------------------------------------------------[ 2] =(db.32.13.bf.0a.5b.16.5c.e9.3b.f8.a0.37.9d.32.8a) 16Byte-------------------------------------------------------------------------------[ 5] =(1) 4ByteRelease 8.2.1 October 27, 2006 Page 13

CDMA Configuration Tutorial CDMA Configuration Tutorial~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Access Accept| 192.168.167.1| 54022| 192.168.167.1| 1812|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:13:30 27-Oct-2006| OUT| 51| 1| 0| 6|===============================================================================| Authenticator | Tracking ID || de.fb.be.50.29.87.87.9f.2e.39.20.7.fc.e2.68.4d| 1|===============================================================================[ 6] =(Framed) 4Byte-------------------------------------------------------------------------------[ 7] =(PPP) 4Byte-------------------------------------------------------------------------------[ 8] =(255.255.255.254) 4Byte-------------------------------------------------------------------------------[ 25] =(42.57.53.00.01.00.0e.2f.00.16.00.02.03.07.01.00.00.00.59.07.03.00) 22Byte-------------------------------------------------------------------------------[ 27] =(14400) 4Byte-------------------------------------------------------------------------------[ 28] =(3600) 4Byte

5 Press Enter to send the Accounting Start Request. The following output is displayed:

Sending Accounting start Request (3:1)... Sentready to receive RADIUS acct start response (3:1)Received Accounting start Response - time = 0 secondsSTART REQ: total time is >4< msThe following log message is generated in the /var/adm/messages file:Page 14 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialAug 13 14:46:20 radiusd[478]: [ID 664437 local7.info] INFO RADOP(13) acct start for golduser (IP=10.168.152.2) from 192.168.167.1[5=1;] recorded OK.The following is the Trace Tool output:

===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Accounting Request| 192.168.167.1| 54022| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:14:08 27-Oct-2006| IN| 35| 3| 0| 6|===============================================================================| Authenticator | Tracking ID || d9.a9.71.57.20.9f.18.73.b0.d8.af.8a.8d.80.2a.5a| 2|===============================================================================[ 1] =(golduser) 8Byte-------------------------------------------------------------------------------[ 5] =(1) 4Byte-------------------------------------------------------------------------------[ 8] =(10.168.167.1) 4Byte-------------------------------------------------------------------------------[ 25] =(42.57.53.00.01.00.0e.2f.00.16.00.02.03.07.01.00.00.00.59.07.03.00) 22Byte-------------------------------------------------------------------------------[ 40] =(Start) 4Byte-------------------------------------------------------------------------------[ 44] =(45423E3A-5F49A-0-1) 18Byte~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port |Release 8.2.1 October 27, 2006 Page 15

CDMA Configuration Tutorial CDMA Configuration Tutorial|Accounting Response| 192.168.167.1| 54022| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:14:08 27-Oct-2006| OUT| 35| 3| 0| 0|===============================================================================| Authenticator | Tracking ID || 93.c4.4c.44.d8.96.5e.a3.9d.5a.a0.39.e7.8a.a7.83| 2|===============================================================================

6 Press Enter to send the Accounting-Stop Request. The following output is displayed:

Sending Accounting stop Request (4:1)... Sentready to receive RADIUS acct stop response (4:1)Received Accounting stop Response - time = 0 secondsSTOP REQ: total time is >18< ms==================== Final Result ======================Request Rate: 0.0227273 Cycles/Sec

Call-Check(auth) : Success = 0, Failures = 0Authentication : Success = 1, Failures = 0, Min = 149, Max = 149, Avg = 149Accounting Start: Success = 1, Min = 4, Max = 4, Avg = 4Accounting Stop: Success = 1, Min = 18, Max = 18, Avg = 18Overall Cycle : Success = 1/1, Min = 171, Max = 171, Avg = 171Cycles per Sec. : 5.8479532The following log message is generated in the /var/adm/messages file:

Aug 13 14:58:20 radiusd[478]: [ID 664437 local7.info] INFO RADOP(13) acct stop for golduser (IP=10.168.152.2) from 182.168.152.2[5=1;] recorded OK.The following is the Trace Tool output:

===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Accounting Request| 192.168.167.1| 54022| 192.168.167.1| 1813|===============================================================================Page 16 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration Tutorial| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:14:37 27-Oct-2006| IN| 51| 4| 0| 12|===============================================================================| Authenticator | Tracking ID || a6.17.65.f6.a3.58.35.8f.a6.15.97.35.31.88.e7.61| 3|===============================================================================[ 1] =(golduser) 8Byte-------------------------------------------------------------------------------[ 5] =(1) 4Byte-------------------------------------------------------------------------------[ 8] =(10.168.167.1) 4Byte-------------------------------------------------------------------------------[ 25] =(42.57.53.00.01.00.0e.2f.00.16.00.02.03.07.01.00.00.00.59.07.03.00) 22Byte-------------------------------------------------------------------------------[ 40] =(Stop) 4Byte-------------------------------------------------------------------------------[ 44] =(45423E3A-5F49A-0-1) 18Byte-------------------------------------------------------------------------------[ 46] =(67) 4Byte-------------------------------------------------------------------------------[ 49] =(554068) 4Byte-------------------------------------------------------------------------------[ 42] =(3456) 4Byte-------------------------------------------------------------------------------[ 43] =(7345) 4Byte-------------------------------------------------------------------------------[ 47] =(101) 4Byte-------------------------------------------------------------------------------[ 48] =(202) 4ByteRelease 8.2.1 October 27, 2006 Page 17

CDMA Configuration Tutorial CDMA Configuration Tutorial~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port ||Accounting Response| 192.168.167.1| 54022| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:14:37 27-Oct-2006| OUT| 51| 4| 0| 0|===============================================================================| Authenticator | Tracking ID || eb.58.d5.b5.20.db.31.c8.93.1f.b7.20.72.a9.ac.ab| 3|===============================================================================

Run radtest as the bronze userThe radtest utility simulates a PDSN requesting authentication from the RADIUS Server.

In this test, you:

run the radtest utility as the bronze user run radtest to mimic a full RADIUS session

This example of radtest prompts you three times to press Enter:

to send the Access-Request message to send the Acct-Start message to send the Acct-Stop message

Note You require a different IP Address from the one provided in this example. Use the IP address of the machine where the AAA Service Controller is installed.

Before running this radtest example, telnet to the AAA Service Controller Server and run the following command to view incoming logs:

tail -f /var/adm/messagesThis enables you to view the logs for the Authentication Request, the Accounting Start, and the Accounting Stop records. Page 18 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialOpen another telnet session to complete the following steps:

1 Log on to the AAA Service Controller as the widespan user.2 Move to the radtest directory:

cd /WideSpan/testtools/radtest3 Enter the following radtest command:

./radtest -Uv 192.168.167.1 SECRET User-Name=bronzeuser User-Password=bronzeuser NAS-Port=1The following output is displayed:

RADIUSIP address : 192.168.167.1Auth UDP Port: 1812Acct UDP Port: 1813User Interact: disabledTimeout Intvl: 120Retry Count: 1Acct Wait Int: 0

4 Press Enter to send the Authentication Request. The following output is displayed:

Sending Authentication Request (1:1) SentUsing Request Authenticator:

e4.36.61.3e.f1.69.3c.2e.8e.55.cf.c2.86.9c.3b.94 User-Name = "bronzeuser" User-Password = "bronzeuser" NAS-Port = 1ready to receive RADIUS auth response (1:1)Access Accepted - time = 1 secondstotal time is >149< ms

Class ="42.57.53.0.1.0.e.2f.0.16.0.2.3.7.1.0.0.0.f.7.3.0"

The following log message is generated in the /var/adm/messages file:

Aug 13 14:57:19 kansparc321 radiusd[478]: [ID 559039 local7.info] INFO RADOP(102) auth for bronzeuser from 182.168.152.2[5=1;] accepted with service: DEFAULTThe following is the Trace Tool output:

===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Access Request| 192.168.167.1| 54099| 192.168.167.1| 1812|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr |Release 8.2.1 October 27, 2006 Page 19

CDMA Configuration Tutorial CDMA Configuration Tutorial|17:20:38 27-Oct-2006| IN| 51| 1| 0| 3|===============================================================================| Authenticator | Tracking ID || e4.36.61.3e.f1.69.3c.2e.8e.55.cf.c2.86.9c.3b.94| 7|===============================================================================[ 1] =(bronzeuser) 10Byte-------------------------------------------------------------------------------[ 2] =(de.2f.10.b5.05.4d.06.5d.8c.49.f8.a0.37.9d.32.8a) 16Byte-------------------------------------------------------------------------------[ 5] =(1) 4Byte~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Access Accept| 192.168.167.1| 54099| 192.168.167.1| 1812|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:20:38 27-Oct-2006| OUT| 51| 1| 0| 5|===============================================================================| Authenticator | Tracking ID || f7.f7.59.73.7f.c.85.e1.3b.9c.c4.92.68.b3.86.19| 7|===============================================================================[ 6] =(Framed) 4Byte-------------------------------------------------------------------------------[ 7] =(PPP) 4Byte-------------------------------------------------------------------------------[ 8] =(255.255.255.254) 4BytePage 20 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration Tutorial-------------------------------------------------------------------------------[ 25] =(42.57.53.00.01.00.0e.2f.00.16.00.02.03.07.01.00.00.00.5a.07.03.00) 22Byte-------------------------------------------------------------------------------[ 27] =(14400) 4Byte

5 Press Enter to send Accounting Start Request. The following output is displayed:

Sending Accounting start Request (3:1)... Sentready to receive RADIUS acct start response (3:1)Received Accounting start Response - time = 0 secondsSTART REQ: total time is >4< msThe following log message is generated in the /var/adm/messages file:

Aug 13 14:46:20 radiusd[478]: [ID 664437 local7.info] INFO RADOP(13) acct start for bronzeuser (IP=10.168.152.2) from 192.168.167.1[5=1;] recorded OK.The following is the Trace Tool output:

===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Accounting Request| 192.168.167.1| 54099| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:21:46 27-Oct-2006| IN| 35| 3| 0| 6|===============================================================================| Authenticator | Tracking ID || 9a.db.c6.a6.77.9d.a2.85.2e.4f.98.71.9b.e4.67.d7| 8|===============================================================================[ 1] =(bronzeuser) 10Byte-------------------------------------------------------------------------------[ 5] =(1) 4Byte-------------------------------------------------------------------------------[ 8] =(10.168.167.1) 4ByteRelease 8.2.1 October 27, 2006 Page 21

CDMA Configuration Tutorial CDMA Configuration Tutorial-------------------------------------------------------------------------------[ 25] =(42.57.53.00.01.00.0e.2f.00.16.00.02.03.07.01.00.00.00.5a.07.03.00) 22Byte-------------------------------------------------------------------------------[ 40] =(Start) 4Byte-------------------------------------------------------------------------------[ 44] =(45423FE6-6E7E8-0-1) 18Byte~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port ||Accounting Response| 192.168.167.1| 54099| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:21:46 27-Oct-2006| OUT| 35| 3| 0| 0|===============================================================================| Authenticator | Tracking ID || b0.c4.ea.f5.d.ec.b4.10.7.c4.94.cd.b.75.49.57| 8|===============================================================================

6 Press Enter to send Accounting Stop Request. The following output is displayed:

Sending Accounting stop Request (4:1)... Sentready to receive RADIUS acct stop response (4:1)Received Accounting stop Response - time = 0 secondsSTOP REQ: total time is >18< ms

==================== Final Result ======================Request Rate: 0.0227273 Cycles/Sec

Call-Check(auth) : Success = 0, Failures = 0Authentication : Success = 1, Failures = 0, Min = 149, Max = 149, Avg = 149Accounting Start: Success = 1, Min = 4, Max = 4, Avg = 4Accounting Stop: Success = 1, Min = 18, Max = 18, Avg = 18Page 22 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialOverall Cycle : Success = 1/1, Min = 171, Max = 171, Avg = 171Cycles per Sec. : 5.8479532The following log message is generated in the /var/adm/messages file:

Aug 13 14:58:20 radiusd[478]: [ID 664437 local7.info] INFO RADOP(13) acct stop for bronzeuser (IP=10.168.152.2) from 192.168.167.1[5=1;] recorded OK. The following is the Trace Tool output:

===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port || Accounting Request| 192.168.167.1| 54099| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:22:15 27-Oct-2006| IN| 51| 4| 0| 12|===============================================================================| Authenticator | Tracking ID || f8.4.a5.d9.64.ab.2e.8b.c9.8c.5d.dc.ae.eb.80.b4| 9|===============================================================================[ 1] =(bronzeuser) 10Byte-------------------------------------------------------------------------------[ 5] =(1) 4Byte-------------------------------------------------------------------------------[ 8] =(10.168.167.1) 4Byte-------------------------------------------------------------------------------[ 25] =(42.57.53.00.01.00.0e.2f.00.16.00.02.03.07.01.00.00.00.5a.07.03.00) 22Byte-------------------------------------------------------------------------------[ 40] =(Stop) 4Byte-------------------------------------------------------------------------------[ 44] =(45423FE6-6E7E8-0-1) 18Byte-------------------------------------------------------------------------------Release 8.2.1 October 27, 2006 Page 23

CDMA Configuration Tutorial CDMA Configuration Tutorial[ 46] =(97) 4Byte-------------------------------------------------------------------------------[ 49] =(554068) 4Byte-------------------------------------------------------------------------------[ 42] =(3456) 4Byte-------------------------------------------------------------------------------[ 43] =(7345) 4Byte-------------------------------------------------------------------------------[ 47] =(101) 4Byte-------------------------------------------------------------------------------[ 48] =(202) 4Byte~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============================================================================| Request Type | Req Initiator IP | R.I.Port | Req Handler IP | R.H.Port ||Accounting Response| 192.168.167.1| 54099| 192.168.167.1| 1813|===============================================================================| Timestamp | Direction | Thread ID | Req ID | Vendor ID | # of Attr ||17:22:15 27-Oct-2006| OUT| 51| 4| 0| 0|===============================================================================| Authenticator | Tracking ID || ac.a1.2c.38.16.27.bc.83.36.fc.8f.a4.f7.f0.2f.31| 9|===============================================================================

View accounting recordsAfter you have successfully run the radtest examples in "Run radtest as the gold user" on page 12 and "Run radtest as the bronze user" on page 18, you have accounting records generated into flat files. The configuration in the acctfwk.xml file indicates the location of the flat files. By default, the location is /WideSpan/acctfwk/accountingfiles. Page 24 October 27, 2006 Release 8.2.1

CDMA Configuration Tutorial CDMA Configuration TutorialTo view the contents of the accounting flat files:

1 Log on as the root user to the Solaris Server where the Accounting Server is installed. For example:

telnet hostname2022 Move to the destination directory for the flat files:

cd /WideSpan/acctfwk/accountingfiles3 The Accounting Framework creates a filename using the current date and time.

This is a text file that you can view with a text editor. You can view the contents of the file as follows (the filename on your server will be different from the example below):

more 2004-08-18.13:35:33.000000Release 8.2.1 October 27, 2006 Page 25

CDMA Configuration Tutorial CDMA Configuration TutorialPage 26 October 27, 2006 Release 8.2.1

CDMA Configuration TutorialIntroductionPrerequisitesConfigure the Provisioning ServerStart the Provisioning Server process

Configure the Accounting FrameworkStart the RADIUS and Accounting Framework processes

Create a licenseTo create a license

Configure RADIUSConfigure the PDSNCreate the DEFAULT Service ProfileConfigure Profiles and Users

Configure and run Trace ToolAdd a Trace Tool clientStart Trace Tool

Run radtest as the gold userRun radtest as the bronze userView accounting records

/ColorImageDict > /JPEG2000ColorACSImageDict > /JPEG2000ColorImageDict > /AntiAliasGrayImages false /CropGrayImages true /GrayImageMinResolution 300 /GrayImageMinResolutionPolicy /OK /DownsampleGrayImages true /GrayImageDownsampleType /Bicubic /GrayImageResolution 300 /GrayImageDepth -1 /GrayImageMinDownsampleDepth 2 /GrayImageDownsampleThreshold 1.50000 /EncodeGrayImages true /GrayImageFilter /DCTEncode /AutoFilterGrayImages true /GrayImageAutoFilterStrategy /JPEG /GrayACSImageDict > /GrayImageDict > /JPEG2000GrayACSImageDict > /JPEG2000GrayImageDict > /AntiAliasMonoImages false /CropMonoImages true /MonoImageMinResolution 1200 /MonoImageMinResolutionPolicy /OK /DownsampleMonoImages true /MonoImageDownsampleType /Bicubic /MonoImageResolution 1200 /MonoImageDepth -1 /MonoImageDownsampleThreshold 1.50000 /EncodeMonoImages true /MonoImageFilter /CCITTFaxEncode /MonoImageDict > /AllowPSXObjects false /CheckCompliance [ /None ] /PDFX1aCheck false /PDFX3Check false /PDFXCompliantPDFOnly false /PDFXNoTrimBoxError true /PDFXTrimBoxToMediaBoxOffset [ 0.00000 0.00000 0.00000 0.00000 ] /PDFXSetBleedBoxToMediaBox true /PDFXBleedBoxToTrimBoxOffset [ 0.00000 0.00000 0.00000 0.00000 ] /PDFXOutputIntentProfile () /PDFXOutputConditionIdentifier () /PDFXOutputCondition () /PDFXRegistryName () /PDFXTrapped /False

/Description > /Namespace [ (Adobe) (Common) (1.0) ] /OtherNamespaces [ > /FormElements false /GenerateStructure true /IncludeBookmarks false /IncludeHyperlinks false /IncludeInteractive false /IncludeLayers false /IncludeProfiles true /MultimediaHandling /UseObjectSettings /Namespace [ (Adobe) (CreativeSuite) (2.0) ] /PDFXOutputIntentProfileSelector /NA /PreserveEditing true /UntaggedCMYKHandling /LeaveUntagged /UntaggedRGBHandling /LeaveUntagged /UseDocumentBleed false >> ]>> setdistillerparams> setpagedevice