[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring AAA Service Framework for the Broadband Subscriber Management Solution

Configuring RADIUS Server Access Information

Define the RADIUS server address and secret data that RADIUS access profiles can reference. Define an access profile that includes specific RADIUS configuration.

To configure RADIUS server access:

  1. Edit router access to the RADIUS server.
    [edit]
    user@host#edit access radius-server
  2. Set the address to the RADIUS server.
    [edit access radius-server]
    user@host#set 222.222.222.42
  3. Edit the RADIUS server.
    [edit access radius-server]
    user@host#edit 222.222.222.42
  4. Configure the source address for the RADIUS server.
    [edit access radius-server 222.222.222.42]
    user@host#set source-address 222.222.222.1
  5. Configure the secret for the RADIUS server.
    [edit access radius-server 222.222.222.42]
    user@host#set secret "$EcReTRad1uSdAta4f0rTh3rtR"

Configuring RADIUS Server Access Profile

You can define a RADIUS access profile that references defined RADIUS servers and includes specific RADIUS configuration for authentication and accounting.

To configure a RADIUS access profile:

  1. Create and name a RADIUS access profile.
    [edit]
    user@host#edit access profile AccessProfile_general
  2. Edit the order in which authentication mechanisms are used.
    [edit access profile AccessProfile_general]
    user@host#set authentication-order radius
  3. Edit the RADIUS access addresses.
    [edit access profile AccessProfile_general]
    user@host#edit access profile AccessProfile_general radius
  4. Set the address or address list for the RADIUS authentication server.
    [edit access profile AccessProfile_general radius]
    user@host#set authentication-server 222.222.222.42
  5. Set the address or address list for the RADIUS accounting server.
    [edit access profile AccessProfile_general radius]
    user@host#set accounting-server 222.222.222.42
  6. Edit the RADIUS accounting values for the access profile.
    [edit access profile AccessProfile_general]
    user@host#edit accounting
  7. Set the RADIUS accounting order.
    [edit access profile AccessProfile_general accounting]
    user@host#set order radius
  8. Specify that RADIUS accounting stop when a user fails authentication but is granted access.
    [edit access profile AccessProfile_general accounting]
    user@host#set accounting-stop-on-failure
  9. Specify that RADIUS accounting stop when access is denied to a subscriber.
    [edit access profile AccessProfile_general accounting]
    user@host#set accounting-stop-on-access-deny
  10. Specify that RADIUS provide immediate updates.
    [edit access profile AccessProfile_general accounting]
    user@host#set immediate-update
  11. Specify the amount of time (in minutes) between RADIUS updates.
    [edit access profile AccessProfile_general accounting]
    user@host#set update-interval 10
  12. Specify that RADIUS accounting report only subscriber uptime.
    [edit access profile AccessProfile_general accounting]
    user@host#set statistics time

Related Topics

[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.