Additional RADIUS Attributes

Depending on the message, the following additional RADIUS attributes may be present:

• Acct-Terminate-Cause—Indicates whether the session ended because of a deliberate logout or a session timeout.
• Juniper-JUNOScope-Privileged-Operation—The symbolic name for the operation that was performed.
• Juniper-JUNOScope-Target—The name of the object affected by the privileged operation.
• Juniper-JUNOScope-Login-Failure-Reason—The reason for login failure: 'user locked' or 'login failure'.

The RADIUS accounting server expects all accounting records to occur in the context of a session. Since JUNOScope operations can be performed on a schedule after a user's session is no longer valid, a new session is created for each scheduled task. A session start message is sent before the scheduled task executes; a session end message is sent after the task completes.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.