gw-world:/> add Address IP4Address client_net
B. Create the IP4Address object that defines the IP address pool for the DHCP server. This must be
a different object although it uses the same IP range:
gw-world:/> add Address IP4Address client_ip_range
C. Create the DHCPServer object that hands out these addresses:
gw-world:/> add DHCPServer rr_dhcp_server
D. Create the IPRule object that grants access for client data flowing to the backbone network
which is connected to the interface If2:
gw-world:/> add IPRule Action=Allow
E. Create the RadiusRelay object:
gw-world:/> add RadiusRelay r_relay1
Web Interface
A. Create the IP4Address object that defines the range of client IP addresses for the UEs and
assign it the authentication group called ue_group:
1.
Go to: Objects > Address Book > Add > IP4 Address
2.
Now enter:
•
Name: client_net
•
IP Address: 192.168.10.0/24
•
User Authentication: ue_group
3.
Click OK
B. Create the IP4Address object that defines the IP address pool for the DHCP server. This must be
a different object although it uses almost the same IP range:
Address=192.168.10.10-192.168.10.255
UserAuthGroups=ue_group
Address=192.168.10.10-192.168.10.255
Interface=vlan_data
IPAddressPool=client_ip_range
Netmask=255.255.255.0
LeasesRequireAuth=Yes
Service=all_services
SourceInterface=vlan_data
SourceNetwork=client_net
DestinationInterface=If2
DestinationNetwork=all-nets
Name=client_access_rule
SourceInterface=vlan_auth
ClientIPFilter=client_ip_range
RemoteServerIP=radius_ip
DHCPServer=rr_dhcp_server
OverrideUserDataInterface=vlan_data
656
Chapter 8: User Authentication