• Downloads
• Configuring Router Interaction with RADIUS Servers    

• Related Topics
• AAA Service Framework Overview
• Configuring Authentication and Accounting Parameters for Subscriber Access
• Example: Configuring RADIUS-Based Subscriber Authentication and Accounting

Configuring Router Interaction with RADIUS Servers

You specify the RADIUS servers that the router can use and you configure how the router interacts with the servers. You can configure the router to use multiple RADIUS servers on the network.

To specify a RADIUS server and how the router interacts with the server:

1. Configure the IP address of the RADIUS server and specify that you want to configure the router interaction with the server.

   [edit access]

   user@host# edit radius-server 192.168.1.250

2. (Optional) Configure the RADIUS server accounting port number. The default accounting port number is 1813.

   [edit access radius-server 192.168.1.250]

   user@host# set accounting-port 1813

3. (Optional) Configure the port number the router uses to contact the RADIUS server. The default port number is 1812.

   [edit access radius-server 192.168.1.250]

   user@host# set port 1813

4. (Optional) Configure the number of times that the router attempts to contact a RADIUS accounting server. You can configure the router to retry from 1 through 16 times. The default setting is 3 retry attempts.

   [edit access radius-server 192.168.1.250]

   user@host# set retry 4

5. Configure the required secret (password) that the local router passes to the RADIUS client. Secrets enclosed in quotation marks can contain spaces.

   [edit access radius-server 192.168.1.250]

   user@host# set secret &nt1UE1*7688+

6. Configure the source address for the RADIUS server. Each RADIUS request sent to a RADIUS server uses the specified source address. The source address is a valid IPv4 address configured on one of the router interfaces.

   [edit access radius-server 192.168.1.250]

   user@host# set source-address 192.168.1.100

7. Configure the length of time that the local router waits to receive a response from a RADIUS server. By default, the router waits 3 seconds. You can configure the timeout to be from 1 through 90 seconds.

   [edit access radius-server 192.168.1.250]

   user@host# set timeout 45