ENT2: Username Authentication
Description
Validates Enterprise user authentication using user@domain format.
The system extracts the username and maps it to a specific group and policy.
Configuration Setup
-
Account Type:
ENT2 -
Trigger: Username contains
@ -
Requested Username:
dialog@corporate.lk -
Password:
dialog123
Expected Execution Logic
| Step | Description |
|---|---|
1 |
Request received with |
2 |
System parses username → |
3 |
Assigns |
4 |
Performs DB lookup for user |
5 |
Validates using PAP authentication |
6 |
Applies QoS profile during Accounting Start |
Attributes for DB
| Attribute | Value |
|---|---|
Username |
dialog |
VRF Name |
LTE_LNS_FR |
Loopback Name |
loopback 200 |
APN |
ltel2fr2 |
User Notes |
Nvision |
Framed Route |
10.223.92.128/30 |
MSISDN |
940812404795 |
Framed IP Address |
198.23.89.10 |
Password |
dialog123 |
User Group |
ENT2 |
Input QoS Template |
4M_BRONZE_T1_POLICE |
Output QoS Template |
4M_BRONZE_T1_SHAPE |
RADIUS Simulation
Access Request
echo -e 'Packet-Type = Access-Request
Framed-Protocol = PPP
User-Name = "94812404134@dialogvpn.lk"
User-Password = "dialog123"
Connect-Info = "1000000000"
NAS-Port-Type = Async
Cisco-NAS-Port = "Uniq-Sess-ID4891"
Client-Port-Id = 4891
NAS-Port-Id = "Uniq-Sess-ID4891"
User-Service-Type = Framed-User
Calling-Station-Id = "94234112885"
Called-Station-Id = "dummy"
Client-Id = 10.174.133.96' | radclient -x 10.58.167.84 auth mysecret
Accounting Start
echo -e 'Acct-Status-Type = Start
Acct-Session-Id = "00419BB3"
Tunnel-Type = L2TP
Tunnel-Medium-Type = IPv4
User-Name = "0812404112@dialogvpn.lk"
Tunnel-Server-Endpoint = "10.210.8.192"
Tunnel-Client-Endpoint = "10.188.72.107"
QoS = 4M_BRONZE_T1_POLICE
Session = Initiated' | radclient -x 10.58.167.86 acct mysecret