The E-series router’s RADIUS dynamic-request server feature provides an efficient way for you to use RADIUS servers to centrally manage user sessions. The RADIUS dynamic-request server enables the router to receive the following types of messages from RADIUS servers:
 |
Note: The RADIUS dynamic-request server’s support for CoA messages is used by the Service Manager and by the E-series router’s packet mirroring feature. For information about using the Service Manager, see Configuring Service Manager in this guide. For specific information about using the dynamic-request server with packet mirroring, see the Configuring RADIUS-Based Mirroring chapter in JUNOSe Policy Management Configuration Guide |
For example, you might use the RADIUS dynamic-request server to terminate specific user sessions. Without the RADIUS dynamic-request server, the only way to disconnect a RADIUS user is from the E-series router. This disconnect method is cumbersome when a network has many systems. The RADIUS dynamic-request server allows RADIUS servers to initiate user-related operations, such as a termination operation, by sending unsolicited request messages to an E-series router.
Figure 5 shows a network that would benefit from the RADIUS dynamic-request server functionality. In Figure 5, instead of disconnecting users on each E-series router, the RADIUS servers can initiate the disconnection. Although the network has multiple RADIUS servers, the servers share a common database that contains authorization and accounting information. Having a common database allows any server to view who is currently valid and connected, and allows service providers to manage the disconnection of users.
Figure 5: Sample Remote Access Network Using RADIUS
 | Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |