Configuring Other SBR Server Versions

Note: If the RADIUS server you are configuring is other than SBR server version 4.7, perform the steps in this section before configuring the server as described in Configuring an SBR Server Version 4.7.

To configure an SBR server version other than 4.7 (if that version does not already support Juniper vendor-specific attributes) to make it capable of returning Juniper vendor-specific attributes in an “access-accept” packet, follow these steps:

1. Copy the custom dictionary text into the “radius/service/Juniper.dct” file:

   ################################################################################
   #
   # This dictionary contains Juniper Vendor Specific Attributes
   #
   # (See README.DCT for more details on the format of this file)
   ################################################################################ 
   # Use the Radius specification attributes
   #
   @radius.dct
   #
   # Juniper specific parameters
   #
   MACRO Juniper-VSA(t,s) 26 [vid=2636 type1=%t% len1=+2 data=%s%]
   ATTRIBUTE Juniper-Local-User-Name Juniper-VSA(1, string) r
   ATTRIBUTE Juniper-Allow-Commands Juniper-VSA(2, string) r
   ATTRIBUTE Juniper-Deny-Commands Juniper-VSA(3, string) r
   ATTRIBUTE Juniper-Allow-Configuration Juniper-VSA(4, string) r
   ATTRIBUTE Juniper-Deny-Configuration Juniper-VSA(5, string) r
   ################################################################################ 
   # Juniper.dct - Juniper Networks dictionary
   ################################################################################
   

2. Copy the following text into the “radius/service/vendor.ini” file:

   vendor-product = Juniper M/T Series
   dictionary = Juniper
   ignore-ports = no
   port-number-usage = per-port-type
   help-id = 2000
   

3. Add the following line to the “radius/service/dictiona.dcm ‘file:

   @juniper.dct
   

4. Restart the RADIUS server to add the changes. A new Juniper RAS client model appears in the Steel-Belted Radius Administrator window. The Juniper vendor-specific attributes are available in the Return List Attributes list under a particular user.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.