Using RADIUS Authentication and Accounting for Subscriber Access Management

To configure the router to use RADIUS authentication and accounting for the subscriber access management feature, you create access profiles that specify the following levels of configuration. Subscriber access management supports access profiles attached at the [edit logical-systems logical-system-name routing-instances routing-instance-name] hierarchy level.

• Router interaction with RADIUS servers—Specify how the router interacts with RADIUS servers, such as the ports used for authentication and accounting, the number of times the router tries to contact a RADIUS server, and passwords.
• Authentication and accounting parameters—Create the access profile that defines authentication and accounting parameters, such as the authentication or accounting methods to use, and how accounting statistics are collected and used.
• RADIUS parameters—Specify the RADIUS servers and options for authentication and accounting, and define how RADIUS attributes are used.

The following sections describe RADIUS authentication and accounting configuration for the subscriber access management feature:

• Configuring How the Router Interacts with RADIUS Servers
• Configuring Authentication and Accounting Parameters
• Configuring RADIUS Parameters
• Example: Configuring RADIUS-Based Subscriber Authentication and Accounting
• RADIUS Attributes and Juniper Networks VSAs Supported by the AAA Service Framework
• Attaching Access Profiles
• Verifying and Managing Subscriber Access Information

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.