...
| Screenshotmacro |
|---|
| Border | false |
|---|
| Shadow | false |
|---|
| URL | /download/attachments/12158183/cisco_ucme_4.png |
|---|
|
Once connected, enter Single site configuration
Enter the following commands to enable the UCME to send RADIUS events to TIM Plus:
| Step | IOS commands | Description |
|---|
| 1 | enable | Causes the UCME to enter EXEC mode. Type your EXEC password if requested |
| 2 | conf t | Enters the global configuration mode |
| 3 | aaa new-model | Enables aaa accounting mode |
| aaa accounting connection h323 start-stop group RADIUS |
| gw-accounting aaa |
| acct-template callhistory-detail |
| 4 | RADIUS-server host 192.168.0.1 auth-port 0 acct-port 1612 | Specifies the IP address and port of TIM Plus's RADIUS, to which CDR data will be sent, e.g. |
| 5 | RADIUS-server key C1sco | Specifies a RADIUS authentication secret that will be used by TIM Plus (configured in the next section), e.g. |
| 6 | RADIUS-server vsa send accounting
| Enables VSA events |
| 7 | end | Exits configuration mode |
| 8 | wr | Saves the changes |
Multi-site configuration
To configure a multi-site system, enter the commands below:
| Info |
|---|
Replace SITE_NAME with a unique name for the destination RADIUS information.
Replace SITE_IP with the IP address of the RADIUS server.
Replace SITE_KEY with the secret you want to assign to that specific site. |
| Step | IOS Commands | Description |
|---|
| 1 | enable | Causes the UCME to enter EXEC mode. Type your EXEC password if requested |
| 2 | conf t | Enters the global configuration mode |
| 3 | aaa new-model | Enables accounting mode |
| 4 | aaa accounting update newinfo |
| 5 | radius-server vsa send accounting | Enables VSA events |
6 | gw-accounting aaa | Enables aaa accounting
|
| | acct-template callhistory-detail |
| | exit |
| 7 | radius server SITE_NAME | Configures the call accounting for each separate site |
| | address ipv4 SITE_IP acct-port 1612 | Specifies the IP address and port of TIM Plus's RADIUS, to which CDR data will be sent, e.g. 192.168.0.1:1612 |
| | key SITE_KEY | Specifies a RADIUS authentication secret that will be used by TIM Plus (configured in the next section), e.g. C1sco |
| | exit | Exits current site configuration |
| Info |
|---|
Repeat step 7 for each individual site |
|
| 8 | aaa group server radius SITE_NAME | Configures a specified server group |
| | server name SITE_NAME | Specifies a RADIUS server to use for this aaa group |
| | exit | Exits current site configuration |
| Info |
|---|
Repeat step 8 for each individual site |
|
| 9 | aaa accounting connection h323 | Configures the connection information |
| | action-type start-stop | Setting the action type will send RADIUS information when the call starts and stops |
| | broadcast | Enabling broadcast means that all the groups will be sent RADIUS data |
| 10 | group SITE_NAME | Specifies the group(s) that the accounting system will send RADIUS data to |
| Info |
|---|
Repeat step 10 for each system |
|
| 11 | end | Exits configuration mode |
| 12 | wr | Saves the changes |
| Info |
|---|
For a system with five or more RADIUS servers, it is recommended to amend the server retransmit options in the UCME, in order to reduce the stress on the phone system. |
IP radius source-interface
To force RADIUS to use the IP address of a specified interface for all outgoing RADIUS packets, use the
| Keywordmacro |
|---|
| Label | ip radius source-interface |
|---|
|
command in global configuration mode.
| Keywordmacro |
|---|
| Label | ip radius source-interface |
|---|
|
SUBINTERFACE-NAME If you don't wish to use the IP address of a specified interface, use the
form of this command.
| Keywordmacro |
|---|
| Label | no ip radius source-interface |
|---|
|
| HTML |
|---|
<a id="Configure TIM Plus to capture RADIUS packets"></a> |
...