3.86. <AuthBy WIMAX>

This clause handles requests from a WiMAX system. It handles, authentication, accounting and DHCP server key distribution. It acts as a Home AAA (HAAA) as per WiMAX End-to-End Network Systems Architecture Stage 2-3 Release 1.1.0 and NWG_R1.1.0-Stage-3.pdf. Answers requests from NAS, HA and DHCP servers.
AuthBy WIMAX requires an SQL database to hold user details (including password), and to cache various keys. WiMAX users must be added to the SQL database before they can be authenticated.
Several types of reply attribute are handled specially by AuthBy WIMAX. If the attribute is present in a reply (perhaps from a user's reply attributes or profile), they will be converted from text format to the binary format required by WiMAX devices.
Sample configuration file, including explanation of supported parameters is available in goodies/wimax.cfg. Sample database schema appears in goodies/wimax.sql in your Radiator distribution.

3.86.1. KeyLifetime

This optional parameter specifies the lifetime for all mobility keys in seconds. Defaults to 3600 (1 hour).

3.86.2. HAPassword

This optional parameter specifies the PAP password required for access by a WiMAX HA (Home Agent). If not defined, HA does not have to present a password before its requests are satisfied. If HAPassword is defined, the HA must present a PAP password with an exact match, and the HA must be configured to send this password, otherwise its requests will be REJECTed. Not all HAs are able to send a password with requests to the HAAA, so use of this parameter depends on your HA. Defaults to undefined.

3.86.3. ProfileHotlining

This optional parameter indicates whether to provide profile-based hotlining. If set, and the user has a Hotline Profile ID, the SQL database will be consulted for the Hotline profile, and the contents of the hotline profile id will be returned. Defaults to not set.

3.86.4. RulebasedHotlining

This optional parameter indicates whether to provide rule-based hotlining. If set, and the user has a Hotline Profile ID, the SQL database will be consulted for the Hotline profile, and the contents of the hotline NAS-Filter-Rule will be returned. Defaults to not set.

3.86.5. HTTPRedirectionHotlining

This optional parameter indicates whether to provide HTTP Redirection-based hotlining. If set, and the user has a Hotline Profile ID, the SQL database will be consulted for the Hotline profile, and the contents of the hotline HTTP-Redirection-Rule will be returned. Defaults to not set.

3.86.6. IPRedirectionHotlining

This optional parameter indicates whether to provide IP Redirection-based hotlining. If set, and the user has a Hotline Profile ID, the SQL database will be consulted for the Hotline profile, and the contents of the hotline IP-Redirection-Rule will be returned. Defaults to not set.

3.86.7. MSKInMPPEKeys

Forces the MSK to be encoded in MS-MPPE-Send-Key and MS-MPPE-Recv-Key, as well as the usual WiMAX-MSK reply attributes. This is required by some non-compliant clients, such as some Alcatel-Lucent devices.

3.86.8. GetCachedKeyQuery

SQL query to get the cached keys for a given AAA-Session-ID. Defaults to:
select sessionid, mip_rk, mip_spi, fa_rk from device_session
where sessionid=?

3.86.9. InsertSessionQuery

SQL query to get create a new session for a given AAA-Session-ID. Defaults to:
insert into device_session (outer_nai, sessionid, napid, bsid,
nspid, msid, capabilities, timezoneoffset, nai, cui, mip_rk,
mip_spi, fa_rk, key_expires) values (?, ?, ?, ?, ?, ?, ?, ?, ?,
?, ?, ?, ?, ?)

3.86.10. UpdateSessionQuery

SQL query to get update a session for a given AAA-Session-ID. Defaults to:
update device_session set outer_nai=?, nai=?, cui=?, mip_rk=?,
mip_spi=?, fa_rk=?, key_expires=? where sessionid=?

3.86.11. GetHotlineProfileQuery

SQL query to get hotlining parameters. Defaults to:
select profileid, httpredirectionrule, ipredirectionrule

3.86.12. GetQosProfileQuery

SQL query to get QOS parameters. Defaults to:
select globalscname, scname, scheduletype, priority, maxsusrate,
minresrate, maxburst, jitter, maxlatency, reducedresources,
flowtype, grantinterval, sdusize, unsolpollinginterval
from qosprofile where id=?