Navigation
Back up to About Overview
[+] Expand All
[-] Collapse All
A
- access lines 1
- accesses
- configuring subscriptions
- accounting
- anonymous subscriber
- attributes
- authenticated subscriber
- authentication plug-ins
- authorization plug-ins
B
C
- captive portal
- classification scripts
- conditions 1
- configuring
- descriptions
- DHCP classification, C Series Controller
- interface classification, C Series Controller
- structure
- subscriber classification, C Series Controller
- target, C Series Controller
- component interactions
- conventions
- COPS (Common Open Policy Service)
- custom RADIUS accounting plug-ins 1
- configuring
- custom RADIUS authentication plug-ins 1
- configuring
- customer support 1
D
- default retailer authentication plug-ins
- configuring
- default retailer DHCP authentication plug-ins
- configuring
- denial-of-service attacks
- DHCP (Dynamic Host Configuration Protocol)
- address assignment
- classification scripts. See classification scripts
- options
- profiles
- subscribers
- documentation
E
- enterprise
- enterprise subscribers 1
- adding
- enterprise subscribers, login process
- event publishers
- configuring
- default retailer authentication, configuring
- default retailer DHCP authentication, configuring
- description
- retailer-specific
- service-specific
- virtual router-specific
- external plug-ins
- configuring
F
- file upload settings for log rotation
- configuring
- flat file accounting plug-ins 1
- flexible RADIUS accounting plug-ins 1
- attributes, defining
- configuring
- RADIUS packets, defining
- flexible RADIUS authentication plug-ins 1
- attributes, defining
- configuring
- RADIUS packets, defining
- setting responses
- FTP server for log rotation
G
- general properties
- configuring
H
- HTTP proxy 1, 2
- HTTPS traffic
I
- interface classification scripts. See classification scripts
- interim accounting, configuring on SAE
- internal plug-ins
- configuring
L
- LDAP authentication plug-in 1
- configuring
- limiting subscribers plug-in 1
- configuring
- log rotation
- overview
- logging
- login events, description
- login process
- login registration
- configuring
- logout process, residential
M
- managers
- manuals
N
- NAT (Network Address Translation)
- notice icons
P
- plug-ins
- activating service sessions
- authentication
- authorization
- basic RADIUS accounting 1
- basic RADIUS authentication 1
- creating subscriber sessions
- custom RADIUS accounting 1
- custom RADIUS authentication 1
- defining RADIUS packets
- DHCP address assignment
- event publishers. See event publishers
- external
- flat file accounting 1
- flexible RADIUS accounting 1
- flexible RADIUS authentication 1
- internal 1
- LDAP authentication 1
- limiting subscribers 1
- state synchronization
- tracking
- policy groups
- policy management
- PPP subscribers
- prevention, use of unauthorized resources
- protocols
- proxy HTTP 1, 2
- proxy request management
- public addresses, VPNs
Q
R
- RADIUS accounting
- RADIUS attributes
- defining in RADIUS plug-ins
- examples, defining in RADIUS plug-ins
- RADIUS client library, custom RADIUS plug-ins
- RADIUS packets, customizing in plug-ins
- RADIUS peers
- configuring in plug-ins
- RADIUS plug-ins 1, See also plug-ins
- redirect server
- assessing load
- configuration statements
- configuring
- configuring DNS server for
- configuring HTTP proxy support
- configuring redundant
- directory connection
- failover
- file extensions
- logging
- number of requests
- protection against denial-of-service attacks
- redundancy 1, 2, 3
- static route to router
- traffic definition
- verifying
- redundancy
- residential subscribers 1
- adding
- login process. See login process
- retailers
- subscribers 1
- router subscribers 1
- adding
- routing instances
- routing scheme
S
- SAE (service activation engine)
- classification scripts. See classification scripts
- login events
- login process. See login process
- SAE (service activation engine), configuring
- service activation engine. See SAE
- service sessions
- sites 1, 2, 3
- subscriber 1
- state synchronization plug-in interface
- configuring
- static IP subscribers, login process
- static routing
- subscriber classification scripts. See classification scripts
- subscriber folders 1
- adding
- subscriber sessions
- subscribers
- 3gpp attributes (Gx router driver)
- adding
- enterprise 1
- inheriting properties
- inheriting subscriptions
- residential 1
- retailer 1
- router 1
- sessions
- sites 1
- types
- subscriptions 1
- access, configuring
- an orderly deactivation, activation order, specifying
- configuring
- multiple per subscriber
- support, technical See technical support
T
- targets. See classification scripts
- technical support
- text conventions defined
- tracking plug-ins 1
- configuring
U
- UDP ports
- User Datagram Protocol. See UDP
V
- validating
- virtual private networks. See VPNs
- VPNs (virtual private networks)
- adding
- configuration requirements
- configuration statements
- extranet clients, modifying
- invalid subscriptions
- modifying
- routing schemes
- using NAT
- validating
Download This Guide
Configuring a RADIUS Packet Template (SRC CLI)
You can define RADIUS packets for flexible RADIUS accounting and authentication plug-ins in two ways.
- Define attributes in a template, and then apply the template to flexible RADIUS accounting and authentication plug-ins.
- Define attributes in the packet definition configuration of a flexible plug-in instance. These definitions override definitions in packet templates.
Use the following configuration statements to configure a RADIUS packet template:
shared sae configuration radius-packet-template name ...shared sae configuration radius-packet-template name radius-attributes name ...
shared sae configuration radius-packet-template name radius-attributes name attributes name { value ; }
shared sae configuration radius-packet-template name radius-attributes name attributes-with-type name shared sae configuration radius-packet-template name radius-attributes name attributes-with-type name (address | hex | integer | string | text) {value; }
shared sae configuration plug-ins name name flex-radius-accounting radius-packet-definition name ...shared sae configuration plug-ins name name flex-radius-accounting radius-packet-definition name attributes name { value ; }
shared sae configuration plug-ins name name flex-radius-accounting radius-packet-definition name attributes-with-type...shared sae configuration plug-ins name name flex-radius-accounting radius-packet-definition name attributes name attributes-with-type name { value ; }
shared sae configuration plug-ins name name flex-radius-authentication radius-packet-definition name ...shared sae configuration plug-ins name name flex-radius-authentication radius-packet-definition name attributes name { value ; }
shared sae configuration plug-ins name name flex-radius-authentication radius-packet-definition name attributes-with-type...shared sae configuration plug-ins name name flex-radius-authentication radius-packet-definition name attributes name attributes-with-type name { value ; }
To configure a template:
- From configuration mode, access the RADIUS packet template
configuration. In this sample procedure, the stdAcct template is configured
in the west-region service activation engine (SAE) group.user@host# edit shared sae group west-region configuration radius-packet-template stdAcct
- Create an attribute instance using the names in Flexible RADIUS Plug-Ins Overview, and enter the configuration for the RADIUS attribute instance. [edit shared sae group west-region configuration radius-packet-template stdAcct] user@host# edit radius-attributes name
- Add RADIUS attribute definitions to the attribute instance.
Repeat this step for each attribute. [edit shared sae group west-region configuration radius-packet-template stdAcct radius-attributes svcstop]user@host# set attributes name value
For example:
[edit shared sae group west-region configuration radius-packet-template stdAcct radius-attributes svcstop]user@host# set attributes Acct-Session-ID sessionId - (Optional) Verify the configuration of your attribute
instance.
[edit shared sae group west-region configuration radius-packet-template stdAcct radius-attributes svcstop] user@host# show attributes { Acct-Input-Octets lowWord(inOctets); Acct-Output-Octets lowWord(outOctets); Acct-Input-Packets lowWord(inPackets); Acct-Output-Packets lowWord(outPackets); Acct-Input-Gigawords highWord(inOctets); Acct-Output-Gigawords highWord(outOctets); } - (Optional) Verify the configuration of the RADIUS packet
template.
[edit shared sae group west-region configuration radius-packet-template stdAcct radius-attributes svcstop] user@host# up [edit shared sae group west-region configuration radius-packet-template stdAcct] user@host# show radius-attributes svcstop { attributes { Acct-Input-Octets lowWord(inOctets); Acct-Output-Octets lowWord(outOctets); Acct-Input-Packets lowWord(inPackets); Acct-Output-Packets lowWord(outPackets); Acct-Input-Gigawords highWord(inOctets); Acct-Output-Gigawords highWord(outOctets); } } radius-attributes stop { attributes { Acct-Session-Time sessionTime; Acct-Terminate-Cause terminateCause; } } radius-attributes svcacct { attributes { Chargeable-User-Identity userSessionProperties.CUI; Class radiusClass; } } radius-attributes acct { attributes { Acct-Session-Id sessionId; NAS-Identifier localNasId; NAS-IP-Address localNasIp; Event-Time eventTime; } } radius-attributes startstop { attributes { Acct-Multi-Session-Id ifSessionId; NAS-Port-Id "\"%s %s\" %(routerName, portId or interfaceName)"; NAS-Port "nasPort or None"; } }
Note: You must configure any one of the following values to set the Chargeable-User-Identity attribute value in the accounting-request packet.
- userSessionProperties.CUI
- getUserSessionProperties().CUI
- getUserSessionProperties().get(“CUI”)
- getUserSessionProperties()[CUI]
- userSessionProperties().CUI
Related Documentation
- Using Flexible RADIUS Packet Definitions
- Flexible RADIUS Plug-Ins Overview
- Defining the Values of RADIUS Attributes
