[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the RADIUS Disconnect Server for L2TP

To configure the RADIUS disconnect server to listen for disconnect requests from an administrator and process them, include the following statements at the [edit access] hierarchy level:



[edit access]

radius-disconnect-port port-number;

radius-disconnect {



client-address {

secret password;
}


}

port-number is the server port to which the RADIUS client sends disconnect requests. The LNS, which accepts these disconnect requests, is the server. You can specify a port number on which to contact the RADIUS disconnect server. Most RADIUS servers use port number 1700.

Note: The JUNOS software accepts only disconnect requests from the client address configured at the [edit access radius-disconnect client-address] hierarchy level.

client-address is the host sending disconnect requests to the RADIUS server. The client address is a valid IP address configured on one of the router interfaces.

password authenticates the RADIUS client. Passwords can contain spaces. The secret used by the local router must match that used by the server.

For information about how to configure RADIUS authentication for L2TP, see Configuring RADIUS Authentication for L2TP.

Example: Configuring the RADIUS Disconnect Server

Configure the RADIUS disconnect server:



[edit access]
radius-disconnect-port 1700;
radius-disconnect {
192.168.64.153 secret "$9$rtkl87ws4ZDkgokPT3tpEcylWL7-VY4a";
# SECRET-DATA
192.168.64.162 secret "$9$rtkl87ws4ZDkgokPT3tpEcylWL7-VY4a";
# SECRET-DATA
}

[Contents] [Prev] [Next] [Index] [Report an Error]