Cached Remote Authenticate

Replacement for Cisco remote_ip_authenticate & pasport_silent scripts. Allows changing password via CLI, authentication by IP, MAC address of remote VoIP peer or by the passport user ID (PUID) and password from the SIP INVITE request.

Requires IOS 12.2(11)T or later.

The Cache function decreases the load billing system dramatically, reducing the number of authentication requests. Includes attribute PortaBilling_Original_CLD in authorization & accounting information - the ideal solution for using with PortaBilling100 for accounting of the inbound costs.

The price of the Cached Remote Authenticate module is $499. For more information about Cached Remote Authenticate please contact our sales team.

Usage:

!
aaa new-model
!
aaa authentication login h323 group radius
aaa authentication login loopback local
aaa authorization exec h323 group radius 
aaa authorization exec loopback local 
aaa accounting connection h323 stop-only group radius
!
call application voice remote_ip_auth flash:app_caching_remote_authenticate.tcl
call application voice remote_ip_auth password my_password
call application voice remote_ip_auth authenticate-by ip
call application voice remote_ip_auth cache-positive 380 
call application voice remote_ip_auth cache-negative 180
call application voice remote_ip_auth cache-size 300
call application voice remote_ip_auth method-list-name h323
call application voice remote_ip_auth loopback-method-list-name loopback
!
call application voice remote_mac_auth flash:app_caching_remote_authenticate.tcl
call application voice remote_mac_auth authenticate-by mac
!
call application voice remote_sip_auth flash:app_caching_remote_authenticate.tcl
call application voice remote_sip_auth authenticate-by sip
!
dial-peer voice 1 voip
 application remote_ip_auth
 incoming called-number 1.
!
dial-peer voice 2 voip
 application remote_mac_auth
 incoming called-number 2.
!
dial-peer voice 3 voip
 application remote_sip_auth
 incoming called-number 3.
!

NOTE:

cache-size is optional, default value is 100
warning-time is optional, default value is 60 sec.
authenticate-by is optional, default value is " ip ". Possible valies " ip ", " sip ", " mac " & " ip-sip " (try IP first and then SIP)
cache-positive is optional, default value is 300 sec.
cache-negative is optional, default value is 60 sec.
method-list-name is optional, default value is "h323".
loopback-method-list-name is optional, default value is " loopback ".
in case of absense of calls cache wil be cleared in 5 minutes even if cache-positive and/or cache-negative are set to higher values
you can reset cache at any time by issuing command call application voice load remote_ip_auth

DOCUMENTATION

TMC Billing Channel