[an error occurred while processing this directive] [an error occurred while processing this directive]

Configuring RADIUS Server Options for Subscriber Access

You can configure a variety of options used by the RADIUS authentication and accounting servers.

To configuradius-serverre RADIUS authentication and accounting server options:

  1. Specify that you want to configure RADIUS.
    [edit access profile isp-bos-metro-fiber-basic]
    user@host# edit radius
  2. Specify that you want to configure RADIUS options.
    [edit access profile isp-bos-metro-fiber-basic radius]
    user@host# edit options
  3. (Optional) Configure the format the router uses to identify the accounting session. You can specify either decimal or description. The router uses decimal format by default.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set accounting-session-id-format decimal
  4. (Optional) Configure the router to use a port type of virtual to authenticate clients. The port type is passed in RADIUS attribute 61 (NAS-Port-Type). By default, the router passes a port type of ethernet in RADIUS attribute 61.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set ethernet-port-type-virtual
  5. (Optional) Specify the information that is included in or omitted from the interface description that the router passes to RADIUS for inclusion in RADIUS attribute 87 (NAS-Port-Id). By default, the router includes both the subinterface and the adapter in the interface description.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set interface-description-format adapter
  6. (Optional) Configure the value for the client RADIUS attribute 32 (NAS-Identifier), which is used for authentication and accounting requests. You can specify a string in the range 1 to 64 characters.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set nas-identifier 56
  7. (Optional) Configure the RADIUS client to use the extended format for RADIUS attribute 5 (NAS-Port) and specify one of the following options for the width of the fields in the NAS-Port attribute:
    • adapter-width width—Number of bits in the adapter field.
    • port-width width—Number of bits in the port field.
    • slot-width width—Number of bits in the slot field.
    • stacked-vlan-width width—Number of bits in the SVLAN ID field.
    • vlan-width width—Number of bits in the VLAN ID field.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set nas-port-extended-format 16
  8. (Optional) Configure the number of seconds that the router waits after a server has become unreachable. The router rechecks the connection to the server when the revert-interval expires. If the server is then reachable, it is used in accordance with the order of the server list.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set revert-interval port-width 1200
  9. (Optional) Specify that RADIUS attribute 5 (NAS-Port) includes the S-VLAN ID, in addition to the VLAN ID, for subscribers on Ethernet interfaces.
    [edit access profile isp-bos-metro-fiber-basic radius options]
    user@host# set vlan-nas-port-stacked-format

Updated: 2009-04-06

[an error occurred while processing this directive]