Configuring RADIUS Authentication (SRC CLI)

Use the following configuration statements to configure information about one or more RADIUS servers on the network at the [edit] hierarchy level:

system radius-server address {
port port ;
secret secret ;
timeout timeout;
retry retry ;
}

To configure information about RADIUS servers for authentication:

  1. From configuration mode, access the configuration statement that adds a RADIUS server.
    [edit]
    user@host# edit system radius-server address
  2. Specify a port number on which to contact the RADIUS server.
    [edit system radius-server address ]
    user@host# set port port

    By default, port number 1812 is used.

  3. Specify a password. Passwords can contain spaces. The secret used by the C-series Controller must match that used by the server.
    [edit system radius-server address ]
    user@host# set secret secret
  4. (Optional) Specify the amount of time that the C-series Controller waits to receive a response from a RADIUS server.
    [edit system radius-server address ]
    user@host# set timeout timeout

    By default, the C-series Controller waits 3 seconds. You can change the timeout to a value from 1 through 90 seconds.

  5. Specify the number of times that the C-series Controller attempts to contact a RADIUS authentication server.
    [edit system radius-server address ]
    user@host# set retry retry

    By default, the C-series Controller retry property is set to 3 times. You can change the retry value to a number from 1 through 10 times.

To configure a set of users that share a single account for authorization purposes, you create a template user.


Copyright © 2008, Juniper Networks, Inc. All rights reservedTrademark Notice.