Configuring AAA Service Framework for the Broadband Subscriber Management Solution

Configuring RADIUS Server Access Information

Define the RADIUS server address and secret data that RADIUS access profiles can reference. Define an access profile that includes specific RADIUS configuration.

To configure RADIUS server access:

Edit router access to the RADIUS server.


                  
                     [edit]
                     user@host#edit access radius-server

Set the address to the RADIUS server.


                  
                     [edit access radius-server]
                     user@host#set 222.222.222.42

Edit the RADIUS server.


                  
                     [edit access radius-server]
                     user@host#edit 222.222.222.42

Configure the source address for the RADIUS server.


                  
                     [edit access radius-server 222.222.222.42]
                     user@host#set source-address 222.222.222.1

Configure the secret for the RADIUS server.


                  
                     [edit access radius-server 222.222.222.42]
                     user@host#set secret "$EcReTRad1uSdAta4f0rTh3rtR"

Configuring RADIUS Server Access Profile

You can define a RADIUS access profile that references defined RADIUS servers and includes specific RADIUS configuration for authentication and accounting.

To configure a RADIUS access profile:

Create and name a RADIUS access profile.


                  
                     [edit]
                     user@host#edit access profile AccessProfile_general

Edit the order in which authentication mechanisms are used.


                  
                     [edit access profile AccessProfile_general]
                     user@host#set authentication-order radius

Edit the RADIUS access addresses.


                  
                     [edit access profile AccessProfile_general]
                     user@host#edit access profile AccessProfile_general
                           radius

Set the address or address list for the RADIUS authentication server.


                  
                     [edit access profile AccessProfile_general radius]
                     user@host#set authentication-server 222.222.222.42

Set the address or address list for the RADIUS accounting server.


                  
                     [edit access profile AccessProfile_general radius]
                     user@host#set accounting-server 222.222.222.42

Edit the RADIUS accounting values for the access profile.


                  
                     [edit access profile AccessProfile_general]
                     user@host#edit accounting

Set the RADIUS accounting order.


                  
                     [edit access profile AccessProfile_general accounting]
                     user@host#set order radius

Specify that RADIUS accounting stop when a user fails authentication but is granted access.


                  
                     [edit access profile AccessProfile_general accounting]
                     user@host#set accounting-stop-on-failure

Specify that RADIUS accounting stop when access is denied to a subscriber.


                  
                     [edit access profile AccessProfile_general accounting]
                     user@host#set accounting-stop-on-access-deny

Specify that RADIUS provide immediate updates.


                  
                     [edit access profile AccessProfile_general accounting]
                     user@host#set immediate-update

Specify the amount of time (in minutes) between RADIUS updates.


                  
                     [edit access profile AccessProfile_general accounting]
                     user@host#set update-interval 10

Specify that RADIUS accounting report only subscriber uptime.


                  
                     [edit access profile AccessProfile_general accounting]
                     user@host#set statistics time

Configuring RADIUS Server Access Information

Configuring RADIUS Server Access Profile

Related Topics