• Supported Platforms
• M Series
• MX Series
• T Series

• Related Topics
• AAA Service Framework Overview
• Configuring Authentication and Accounting Parameters for Subscriber Access
• Example: Configuring RADIUS-Based Subscriber Authentication and Accounting

Configuring Router or Switch Interaction with RADIUS Servers

You specify the RADIUS servers that the router or switch can use and you configure how the router or switch interacts with the servers. You can configure the router or switch to use multiple RADIUS servers on the network.

To specify a RADIUS server and how the router or switch interacts with the server:

1. Configure the IP address of the RADIUS server and specify that you want to configure the router or switch interaction with the server.
   [edit access]user@host# edit radius-server 192.168.1.250
2. (Optional) Configure the RADIUS server accounting port number. The default accounting port number is 1813.
   [edit access radius-server 192.168.1.250]user@host# set accounting-port 1813
3. (Optional) Configure the port number the router or switch uses to contact the RADIUS server. The default port number is 1812.
   [edit access radius-server 192.168.1.250]user@host# set port 18914
4. (Optional) Configure the number of times that the router or switch attempts to contact a RADIUS accounting server. You can configure the router or switch to retry from 1 through 16 times. The default setting is 3 retry attempts.
   [edit access radius-server 192.168.1.250]user@host# set retry 4
5. Configure the required secret (password) that the local router or switch passes to the RADIUS client. Secrets enclosed in quotation marks can contain spaces.
   [edit access radius-server 192.168.1.250]user@host# set secret &nt1UE1*7688+
6. Configure the source address for the RADIUS server. Each RADIUS request sent to a RADIUS server uses the specified source address. The source address is a valid IPv4 address configured on one of the router or switch interfaces.
   [edit access radius-server 192.168.1.250]user@host# set source-address 192.168.1.100
7. (Optional) Configure the length of time that the local router or switch waits to receive a response from a RADIUS server. By default, the router or switch waits 3 seconds. You can configure the timeout to be from 1 through 90 seconds.
   [edit access radius-server 192.168.1.250]user@host# set timeout 45