Integration - Radius
 

The radius integrations module let you authenticate users with an external Radius server. The external Radius servers must accessible to the Kiwire platform for radius integration to work. Kiwire support authentication with multiple radius server or single server with multi profile by using realm suffix.
 

* Note: Remember to add Kiwire IP address into the Radius server as NAS device for Kiwire to integrate successfully.
 

Mode of Operation
 

Kiwire supports 2 mode of radius integration which are radius pass thru mode and override profile mode. Kiwire also have built-in features that check if the attribute replied by external radius server match with the realm configuration configured. This is useful in event you have multiple profile for each users group, using profile checks we will be able check if the realm suffix requested by user match the correct realm.

MODE : Radius Pass Thru
 

The radius pass thru mode, let you authenticate your users with the external radius and carry forward the restriction & profiles over to the Kiwire, if the user have 30 minutes credit left from the external radius , the user will also have the same 30 minutes restrictions when authenticating.
 

1. User send username and password.

2. External radius reply authentication status and associated profiles from the external radius.

3. Kiwire will check if user granted authentication, temporary profile will be created on Kiwire profiles database, Kiwire will optional perform a secondary check if attribute response matched with keyword set during add radius connection setup. If attribute does not match, it will be rejected to authenticate.

4. Kiwire will send the attributes it received from the external radius to the NAS and let user connect to network with attributes.

5. Kiwire will send accounting information to the external radius server. In event of user disconnected from network.
    

MODE : Override Profile
 

In the override profile mode, Kiwire will only use external radius as authentication host only. If the user authenticated successfully will be assign a locally created Kiwire profiles when login. This is useful for multi group, single external radius server setup or if you wish to provide an different profile for users when they connect to networks.
 

1. User send username and password.

2. External radius reply authentication status.

3. Kiwire will check if user authenticated successfully. A locally assigned profile to the realm will be attached to the user’s authentication.

4. Kiwire will optionally perform secondary check if attribute response matched with keyword set during add radius connection.

5. Kiwire will send the local assign profiles to NAS and let user connect to network.

6. Kiwire will send accounting information to the external radius server.

Radius Connection
 

To access the radius module click on Integration > Radius from the navigation. On the radius listing module, you may search for specific radius connection by using the search field.