Log in
|
How to Buy
|
Contact Us
|
United States (Change)

## Choose Country

### North America

- United States

### Europe

- Deutschland - Germany
- España - Spain
- France
- Italia - Italy
- Россия - Russia
- United Kingdom

### Asia Pacific

- Asean Region (Vietnam, Indonesia, Singapore, Malaysia)
- Australia
- 中国 - China
- India
- 日本 - Japan
- 대한민국 - Korea
- 台灣 - Taiwan

Remember my choice

# Technical Documentation

Download Software
Research a Problem
Case Management
Contract & Product Management
Technical Documentation
Documentation Archive
Enterprise MIBs
File Format Help
Glossary
Portable Libraries
End-of-Life Products
Contact Support
Guidelines and Policies
Security Resources
Rate and give feedback: Feedback Received. Thank You!
Rate and give feedback:
This document helped resolve my issue. Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:
E-mail:

## Related Documentation

- RADIUS IETF Attributes Supported for Subscriber AAA Access Messages
- Juniper Networks VSAs Supported for Subscriber AAA Access Messages
- DSL Forum VSAs in AAA Access and Accounting Messages Overview
- DSL Forum VSAs Supported for AAA Access and Accounting Messages
- RADIUS Attributes Supported for CLI AAA Messages
- CLI Commands Used to Configure RADIUS IETF Attributes
- CLI Commands Used to Configure Juniper Networks VSAs
- CLI Commands Used to Include ANCP-Related Juniper Networks VSAs in Access and Accounting Messages
- CLI Commands Used to Include DSL Forum VSAs in Access and Accounting Messages
- CLI Commands Used to Include or Exclude Attributes in RADIUS Messages

# Subscriber AAA Access Messages Overview

Authorization and authentication access messages identify subscribers before the RADIUS server grants or denies them access to the network or network services. When an application requests user authentication, the request must have certain authenticating attributes, such as a user’s name, password, and the particular type of service the user is requesting. This information is sent in the authentication request via the RADIUS protocol to the RADIUS server. In response, the RADIUS server grants or denies the request.

The router supports the following types of authentication and authorization messages:

- Access-Request—Requests client authentication. RADIUS responds to a client authentication request with either an Access-Accept, an Access-Reject, or an Access-Challenge message. An Access-Request message can contain a number of RADIUS attributes.
- Access-Accept—Grants the client’s access request and can provide specific configuration information necessary to begin delivery of service to the user.
- Access-Reject—Sent if any value of the received attributes is not acceptable.
- Access-Challenge—Sent to the client, requesting additional authentication information.
- Change-of-Authorization-Request (CoA-Request)—Dynamically modifies session attributes, such as data filters.
- Disconnect-Request—Immediately terminates a user session.

## Related Documentation

- RADIUS IETF Attributes Supported for Subscriber AAA Access Messages
- Juniper Networks VSAs Supported for Subscriber AAA Access Messages
- DSL Forum VSAs in AAA Access and Accounting Messages Overview
- DSL Forum VSAs Supported for AAA Access and Accounting Messages
- RADIUS Attributes Supported for CLI AAA Messages
- CLI Commands Used to Configure RADIUS IETF Attributes
- CLI Commands Used to Configure Juniper Networks VSAs
- CLI Commands Used to Include ANCP-Related Juniper Networks VSAs in Access and Accounting Messages
- CLI Commands Used to Include DSL Forum VSAs in Access and Accounting Messages
- CLI Commands Used to Include or Exclude Attributes in RADIUS Messages

#### Published: 2011-10-21

Site Map / RSS Feeds / Careers / Accessibility / Feedback / Privacy & Policy / Legal Notices
Copyright© 1999-2011 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out