[5] NAS-Port

Use the following commands to manage and display information for the NAS-Port RADIUS attribute:

• radius include nas-port
• radius nas-port-format
• radius nas-port-format extended
• radius pppoe nas-port-format unique
• radius vlan nas-port-format stacked

radius include nas-port

• Use to include the NAS-Port attribute in Access-Request, Acct-Start, and Acct-Stop messages.
• You control inclusion of the attribute by enabling or disabling this command.
• Example

  host1(config)#radius include nas-port acct-start enable

• Use the no version to restore the default, enable.
• See radius include

radius nas-port-format

• Use to set the NAS-Port format attribute for ATM and Ethernet only to either 0ssssppp or ssss0ppp.
• The format is a 4-octet integer. The remaining bits are not changed (8 bits VPI and 16 bits VCI; or 12 bits S-VLAN and 12 bits VLAN).
• The s indicates a bit used to represent the slot; the p indicates a bit used to represent the port from which the authentication request originates.
• See radius nas-port-format

• Example: If the PPP user is received on a VC from the card in slot 7, port 2, then the bit pattern is either 00111010 (for 0ssssppp) or 01110010 (for ssss0ppp).

  host1(config)#radius nas-port-format Ossssppp

• Use the no version to restore the default.

radius nas-port-format extended atm

radius nas-port-format extended ethernet

• Use to set the NAS-Port format attribute for ATM, Gigabit Ethernet, and 10-Gigabit Ethernet interfaces on the E120 and E320 routers only.
• The format attribute set using the radius nas-port-format command does not accommodate the number of bits required by the ATM interface specifier (slot/adapter/port/vpi/vci) or the Gigabit Ethernet and 10-Gigabit Ethernet interface specifier [ slot/adapter/port ] [ .vlanSubinterface ]. Issuing this command enables you to encode the interface information in the attribute by specifying the number of bits available for each field in the interface specifier.

  Note: You must use this command with the extended keyword when you configure the NAS-Port format attribute on routers that have line modules that support more than seven physical ports.

• The default number of bits for each field in the interface specifier for ATM interfaces are:
  • Slot—5 bits
  • Adapter—0 bits
  • Port—3 bits
  • VPI—8 bits
  • VCI—16 bits
• The default number of bits for each field in the interface specifier for Gigabit Ethernet and 10-Gigabit Ethernet interfaces are:
  • Slot—5 bits
  • Adapter—0 bits
  • Port—3 bits
  • VLAN—12 bits
  • S-VLAN—12 bits
• To set valid S-VLAN widths on Gigabit Ethernet and 10-Gigabit Ethernet interfaces, you must include S-VLAN IDs in the NAS-Port attribute by issuing the radius vlan nas-port-format stacked command.
• The total number of bits for all fields cannot exceed 32. When the total number of bits is less than 32, the NAS-Port attribute is right-justified and the extra bits are set to 0. If you do not specify a value for a field, the number of bits is set to 0.
• See radius nas-port-format extended

• Example 1—Sets the field widths for ATM interfaces

  host1(config)#radius nas-port-format extended atm field-widths slot 4
  adapter 1 vpi 7 vpi 17

• Example 2—Sets the field widths for Gigabit Ethernet and 10-Gigabit Ethernet interfaces

  host1(config)#radius nas-port-format extended ethernet field-widths slot 4 adapter 1 port 3 vlan 12

• Use the no version to restore the default behavior of the radius nas-port-format command.

radius pppoe nas-port-format unique

• Use to set the NAS-Port attribute to a unique value for subscribers on PPPoE interface. This unique value is derived from the subscriber’s profileHandle.
• See radius pppoe nas-port-format unique

• Example

  host1(config)#radius pppoe nas-port-format unique

• Use the no version to return to the default, in which the value is determined by the interface.

radius vlan nas-port-format stacked

• Use to include the S-VLAN ID, in addition to the VLAN ID, in the NAS-Port attribute for subscribers on Ethernet interfaces.
• The VLAN ID is always included whether the S-VLAN ID inclusion feature is enabled or disabled.
• The radius pppoe nas-port-format unique command overrides this command.
• See radius vlan nas-port-format stacked

• Example

  host1(config)#radius vlan nas-port-format stacked

• Use the no version to return to the default, in which the S-VLAN ID is not included.

Related Topics

• Monitoring the NAS-Port-Format RADIUS Attribute

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.