Aradial Overview
Aradial Overview
RADIUS Overview
http://www.aradial.com
ARADIAL RADIUS Product Overview
©2022 Aradial
This document contains proprietary and confidential information of Aradial and shall not be
reproduced or transferred to other documents, disclosed to others, or used for any purpose other
than that for which it is furnished, without the prior written consent of Aradial. It shall be returned
to the Aradial upon request.
The trademark and service marks of Aradial, including the Aradial logo, are the exclusive
property of Aradial, and may not be used without permission. All other marks mentioned in this
material are the property of their respective owners.
http://www.aradial.com
http://www.radius-server.com
http://www.wifi-radius.com
Document Information
Software Version: 7x/8.x
Document Version: 1.0
Publication Date:
Contents
1. Product Overview ....................................................................................................... 5
2. Architecture................................................................................................................. 8
Aradial RADIUS Basic Features .................................................................................... 10
AAA standards ........................................................................................................... 10
CDMA2000 and Mobile IP support ........................ Error! Bookmark not defined.
Authorization policy support...................................................................................... 10
Authorization policy support (2)................................................................................ 11
Data stores ................................................................................................................... 11
Catalog management .................................................................................................. 11
IP address management .............................................................................................. 11
Record format ............................................................................................................. 11
Record editing ............................................................................................................. 11
Prepaid capabilities ..................................................................................................... 11
Fraud management ..................................................................................................... 12
Record standards......................................................................................................... 12
File format ................................................................................................................... 12
Usage interface ........................................................................................................... 12
Accounting flexibility................................................................................................. 12
Revenue assurance...................................................................................................... 12
Interfaces and APIs..................................................................................................... 12
Hardware and OS ....................................................................................................... 12
Architecture scalability............................................................................................... 13
Solution performance ................................................................................................. 13
Interoperability............................................................................................................ 13
Monitoring and management ..................................................................................... 13
Uptime and availability .............................................................................................. 13
Logging ....................................................................................................................... 13
Reporting..................................................................................................................... 14
Fault tolerance............................................................................................................. 14
Fault management ...................................................................................................... 14
3. Aradial Features & Benefits ................................................................................... 15
Radius ............................................................................................................................... 15
Accounting and User Database ....................................................................................... 19
Remote Access................................................................................................................. 20
Administration ................................................................................................................. 22
SNMP Support................................................................................................................. 24
Reposts & Statistics ......................................................................................................... 25
Special Features ............................................................................................................... 26
4. Performance .............................................................................................................. 29
1. Product Overview
Aradial is a high performance full-featured RADIUS server. Boasting excellent
performance and technological superiority, Aradial is the unquestioned market
leader in its class.
Extensive support for: ISP, Wifi, Fixed Wireless, WSIP, FTTH, Mobile
Companies.
The server includes some of the most innovative features available in the
market today. It is easy of use, scalable and features a plug-in architecture
providing support for almost any new functionality or network element.
Through an easy to use scripting interface fail over mechanisms can be applied,
some resources cab be dedicated for particular end users, time of day decisions
on network load can be made, and much more.
Aradial can use its own user database, an external ODBC compliant database or
use a LAN user database with Aradial LAN to WAN permissions mapping
mechanism, without any duplicate user database hassles.
Additionally, the server's full list of administrative and reporting utilities make it
a single point of control.
Aradial's advanced proxy support allows transparent operation in even the most
complex of network environments.
Aradial RADIUS turns the web browser into a remote control. The server can be
accessed from anywhere in the world over secure SSL, with no client side
installation what so ever. All needed is a web browser in order to configure
RADIUS settings from anywhere, view all currently online sessions, modify the
subscriber record, and more.
HSS option
2. Architecture
Written in C++/C
RDBMS
AAA standards
Supported standards:
RFC 2865 -- Remote Authentication Dial-In User Service
RFC 2866 -- RADIUS Accounting
RFC 2882 -- NAS Requirements: Extended RADIUS Practices
RFC 2619 and 2621 -- Radius Authorization and Accounting SNMP
RFC 2869 -- RADIUS Extensions
RFC 2284 -- Extensible Authentication Protocol (EAP)
3G – 3GPP support
Support 3gpp dictionaries for GGSN and Mobile IP specific RADIUS dictionaries.
An embedded LUA and TCL scripting language (configuration) can be used for the
above without coding.
Data stores
Support for the following user policy databases: Oracle, SQL Server, or LDAP.
Catalog management
New services can be added using Aradial implementation. The service definition
includes static authorization parameters, while personalized authorization parameters
are flexibly defined as part of the user profile.
IP address management
Aradial provides out of the box support for IP pool management.
Record format
Every RADIUS attribute can be written to the usage detail records. All attributes are
defined using dictionaries. There is a default dictionary and vendor specific dictionaries.
The dictionaries can contain native RADIUS attributes or vendor specific attributes
(VSA’s).
Record editing
The format of the usage detail records (CDR’s) is defined using a configurable text file.
Therefore, it is possible to define specifically which attributes will be written to the CDR
files.
Prepaid capabilities
The RADIUS server cannot proactively interrupt a session. It is the network element
responsibility to monitor the user usage and call the RADIUS server for re-
authentication for each quota. The RADIUS server can allocate duration or volume
quota from a duration or volume bank. For a full prepaid, integration with a online
charging billing system is required (prepaid system).
Fraud management
Support for limiting the number of concurrent simultaneous sessions at the user or
group level. The limit may be to a single session or to a specified number of concurrent
sessions. Support for password lockout. Support for authorizing a user based on his
caller ID
Record standards
Comma delimited files and flexible text file format defined by a configuration template.
Also CDRs can be written to a relational database.
Using the internal scripting language the records can be written to any format.
File format
Support for flat files or flat XML files using a flexible text file format.
Usage interface
Aradial rely on the mediation/billing system to pull the CDR files. FTP or socket transfer
of CDRs can be developed in customization.
Accounting flexibility
The accounting can be customized using the flexible policy algorithms or the embedded
LUA & TCL scripting language (can format the output).
Revenue assurance
Ability to write the usage records to record stores simultaneously: text CDR files and a
relational database for backup.
Hardware and OS
Hardware supported: Intel, AMD
System software: Windows, Linux.
Architecture scalability
Aradial supports vertical scalability using multi-threaded architecture and providing
linear scalability. Horizontal scalability is supported using multi server deployment of
Aradial.
Solution performance
Aradial can support millions of users in one Oracle database or LDAP server.
Millions of concurrent sessions.
The performance depends on the database performance and storage.
Using Oracle native OCI API and reuse of statements.
Special treatment to partition the accounting log into separate tables (also the
native Oracle 9i partitioning can be used)
All the reference data is cached in the memory of the server.
For partial performance data sheet please see datasheet at the end.
Interoperability
Successful Integration with iPass and GRIC and many other RADIUS vendors
(RADIUS proxy).
Logging
Support for multiple log topics (like Severe, Warning, Info, Debug, SQL Info, Etc.).
Ability to configure each log topic separately. Also ability to reconfigure without
restart of the server.
Logs can be written to the following targets: local files, NT event log or Syslog.
Reporting
Online Statistics:
1. Online Graphs: Daily, Weekly, Monthly, Yearly, and all time average.
2. Different Types: Logins, Simultaneous Sessions, and Time Used
3. Different Axis: By Group, By NAS and Total
4. Full SNMP support.
Online Sessions: View all Online Sessions with detailed information of UserID, IP,
Online time, Origin and more.
Admin Reports:
1. Administrator Reports delivered to you by Email on a daily, weekly or monthly basis.
2. Different Report Types: Summary, Top Ten Users and Group.
Fault tolerance
The Radius server is stateless, where all session data is stored in a relational database
(active sessions and IP pools). The use of Oracle Real application cluster enables the
fault tolerance.
Database storage will use RAID and virtual storage for H/A (EMC or Veritas).
Using 3’rd party monitoring and keep alive tools from EMC, Veritas, Next Nine, etc.
Each Radius server can be configured to use two database connections; if one fails the
other would be used.
Fault management
Full SNMP support for the Radius server.
Implementation of RFC 2619, 2621 (RADIUS-AUTH-SERVER-MIB and RADIUS-
ACC-SERVER-MIB).
Supports sending TRAPS to the network administration tool via SNMP.
Radius
RADIUS Server
Feature:
Fully featured, high performance Radius Server.
Benefits:
1. Fully integrated system.
2. Central User Management.
3. Works seamless with all other features.
NAS/Proxy Templates
Feature:
Define NAS templates with IP wildcards and shared secret.
Benefits:
Faster configuration and easier maintenance.
AAA
Feature:
Support for RFCs 2138 and 2139 for Radius Authentication,
Authorization and Accounting (AAA).
Benefits:
Vendor independent support including Ascend, Bay Networks, Cisco,
3Com, Shiva Microsoft and more.
Feature:
Advanced Proxy support including static forwarding and DNS
forwarding (Roaming).
Benefits:
Feature:
5. Proxy algorithm
Benefits:
Policy Algorithms can help you connect the Radius server to External
Servers or External Database.
Feature:
Benefits:
Very simple message handling in scripts.
Feature:
Benefits:
Aradial will enforce the credit limitations, defined in the External
Billing system.
Multiple Dictionaries
Feature:
Use our database of over 50 vendor specific dictionaries, which may
be easily customized for your special configuration, or create your
own set of dictionaries. Aradial can also read Free Radius dictionary
files.
Benefits:
Take full advantage of vendor specific RADIUS attributes to tailor
your setup to your needs.
Feature:
The accounting Data can be sent either to text files that can be
configured in a template file or database logging.
Feature:
Groups hierarchy was added to this product for users.
Group has a profile for its users: IP Pool to use, Multilink, maximum
loggings per group, maximum simultaneous loggings.
Remote Access
Feature:
Predefined services for PPP/SLIP/Telnet. You can easily add and
modify services tailored for your setup.
Benefits:
No need to learn RADIUS RFCs and attributes in order to add new
services. Saves time and money.
IP Pools
Feature:
Allocate Pools of IPs for all Access servers.
Benefits:
Centralized IP management. Saves time for setup maintenance and
saves valuable resources.
Feature:
1. Enhance Security and bare the call cost.
2. Define a 1 or more CallerIDs numbers per user.
3. Define ID templates with wildcards.
4. Allow capturing automatically the Caller ID (e.g. MAC address) and
add it to the user profile.
Benefits:
1. Enhance Security and bare the call cost.
2. Control number allowed to be callbacked (avoid long distance
charges).
3. Saves time and money for setup and maintenance of all users
numbers (trade off with callback extra security).
Feature:
1. Limit the number of sessions a user may have at the same time,
on per user or per group basis.
2. Limit the numbers of sessions off all users from a specific group
may have at the same time.
3. If stop is not received by the RADIUS, Aradial has unique cleanup
mechanism based on Interim Accounting to clean the sessions and
avoid the user for being disallowed to login again.
4. Includes Online session user interface with ability to STOP/send
POD for a session or all user sessions.
Benefits:
1. Avoid misuse of your system by users who distribute their
passwords.
2. Have more control over group accounts.
Administration
Web Interface
Feature:
Full Web Interface, supports all 3rd and 4th generation Web browsers
(Netscape Navigator and Internet Explorer)
Benefits:
1. Administer from anywhere.
2. Low learning Curve for interface - Saves Time and money.
Feature:
Benefits:
1. Integrate with existing Web servers.
2. Fast and safe.
3. Better security - By using your web server you may impose
limitations on who is able to access the web interfaces (IP allow,
deny).
Tiered Access
Feature:
Password protected Administration. Define Permissions for each
operation.
Benefits:
1. Secure Access to administrative operations.
2. Delegate Administrative tasks to co-Admins
Feature:
2. Change password.
Feature:
SNMP Support
SNMP Support
Feature:
RADIUS-AUTH-SERVER-MIB
RADIUS-ACC-SERVER-MIB
Benefits:
Online Statistics
Feature:
1. Online Graphs: Daily, Weekly, Monthly, Yearly, and all time
average.
2. Different Types: Logins, Simultaneous Sessions, and Time Used
3. Different Axis: By Group, By NAS and Total
Benefits:
Monitor & Diagnose performance in real-time. Optimize system by
spotting network bottlenecks. Support for Decisions.
Online Sessions
Feature:
View all Online Sessions with detailed information of UserID, IP,
Online time, Origin and more.
Benefits:
Monitor your system in real-time.
Admin Reports
Feature:
1. Administrator Reports delivered to you by Email on a daily, weekly
or monthly basis.
Benefits:
Have all the information you need delivered to you even when you
are out of the office.
Special Features
Event Scripting
Feature:
Run batch scripts with user parameters when user is added,
removed, de-active, re-active or when user change password.
Benefits:
1. Open web sites, email accounts and provide additional services.
2. When user changes his password through the web, all other
password are changed as well.
Customize Interface
Feature:
You may customize the interface for the administrator, user and new
user using a simple HTML editor.
Benefits:
1. Use custom made pages and scripts to best fit your special needs.
2. Write you own user interface to be accessed through the web.
Fault Tolerant
Feature:
1. Run in a primary/backup environment of servers.
2. Mirror the backend database.
3. Use alternate database SQL Server and Oracle
Benefits:
No single point of failure.
Achieve maximal availability of your system.
Extra Security
Feature:
1. Enable timed account lockout when maximal password attempts is
reached.
2. Four password encryption methods to choose from.
Benefits:
Enhanced Security of your system.
Extensive Logging
Feature:
1. Fast configuration to log anything form severe errors to a debug
level into text files.
2. Highly integrated with Windows NT Event Viewer, for logging all
Information, Warning, and Severe reports.
Benefits:
1. No Unknown Errors. By turning on a higher level of logging, you
may immediately see what is wrong.
2. Centralized logging environment. See logged events as you see
them under any other Windows NT application.
Batch Administration
Feature:
Batch user administration handles thousands of users automatically.
Benefits:
Save time when needed to do batch changes or routine
administration for a large amount of users.
4. Performance
Aradial can support millions of users in one MS SQL or Oracle database
or LDAP server.
Millions of user’s sessions.
The performance depends on the database performance and storage.
Using Oracle native OCI API and reuse of statements.
Special treatment to partition the accounting log into separate tables
(also the native Oracle partitioning can be used and MS SQL
partitioning)
All the reference data is cached in the memory of the server.
Performance Tested with 10M users in the database in Cisco labs in USA.
Authorization has one request from the NAS:
Access-Request, Access-Accept
Medium: 1950 per/sec on 1 CPU Quad core Windows or Linux
High: 27,000 per/sec on 2 CPU iCore 7 Windows 2008/2019
with MS SQL server 2008/2019.
AAA- Authorization and Accounting Requests: (3 messages)
Sending Accounting records to Database
High: 10,000 per/sec on 2 CPU iCore 7 Windows 2008/2019
with MS SQL server 2008/2019.
Including 3000 Dynamic IP allocations
Http Server Thin client (3rd/4th generation web browser) served by either proprietary or
ISAPI compatible web server.