Example: Configuring RADIUS Authentication for L2TP - JUNOS 9.5 System Basics Configuration Guide

The following example shows how to configure RADIUS authentication for L2TP:

            
               [edit access]
               profile sunnyvale_bldg_2 {
               
                  
                     client green {
                     chap-secret "$9$24gGiPfz6CuQFu1EyW8VwYgZUik.5z3"; 
                     
                        
                           ppp {
                           interface-id west;
                           }
                        
                     
                     group-profile sunnyvale_users;
                     }
                  
               
               
                  
                     client red {
                     chap-secret "$9$24gGiPfz6CuQFu1EyW8VwYgZUik.5z3"; 
                     group-profile sunnyvale_users;
                     }
                  
               
               authentication-order radius;
               }
               radius-server {
               
                  
                     192.168.65.213 {
                     port 1812;
                     accounting-port 1813;
                     secret "$9$24gGiPfz6CuQFu1EyW8VwYgZUik.5z3"; # SECRET-DATA
                     }
                  
               
               
                  
                     192.168.65.223 {
                     port 1812;
                     accounting-port 1813;
                     secret "$9$24gGiPfz6CuQFu1EyW8VwYgZUik.5z3"; # SECRET-DATA
                     }
                  
               
               }
               radius-disconnect-port 2500;
               radius-disconnect {
               192.168.65.152 secret "$9$rtkl87ws4ZDkgokPT3tpEcylWL7-VY4a"; 
               # SECRET-DATA
               192.168.64.153 secret "$9$gB4UHf5F/A0z30Ihr8Lbs24GDHqmTFn"; 
               # SECRET-DATA
               192.168.64.157 secret "$9$Hk5FCA0IhruOrv87sYGDikfTFn/t0B"; 
               # SECRET-DATA
               192.168.64.173 secret "$9$Hk5FCA0IhruOrv87sYGDikfTFn/t0B"; 
               # SECRET-DATA
               }