SonicWall Compatibility with Third-Party Network Appliances

For SonicWall network security appliances to be compatible with third-party network appliances for SSO through RADIUS Accounting, the third-party appliance must be able to:

• Support RADIUS Accounting.
• Send both Start and Stop messages. Sending Interim-Update messages is not required.
• Send the user’s IP address in either the Framed-IP-Address or Calling-Station-Id attribute in both Start and Stop messages.

In the case of a remote access server using NAT to translate a user’s external public IP address, the attribute must provide the internal IP address that is used on the internal network, and it must be a unique IP address for the user. If both attributes are being used, the Framed-IP-Address attribute must use the internal IP address, and the Calling-Station-Id attribute should use the external IP address.

The user’s login name should be sent in the User-Name attribute of Start messages and Interim-Update messages. The user’s login name can also be sent in the User-Name attribute of Stop messages, but is not required. The User-Name attribute must contain the user’s account name and might include the domain also, or it must contain the user’s distinguished name (DN).