Before You Install and Configure the Sample Residential Portal

Before you install and configure the sample residential portal:

Configuring Equipment Registration and ISP Service Behaviors

The equipment registration and ISP portal behaviors use a RADIUS server for authentication and authorization. The Juniper Networks database and the add-on packages for other supported directories include sample data to authenticate portal logins. RADIUS servers can be configured to use these directories.

The version of Steel-Belted RADIUS in the SRC software distribution is preconfigured to use the SRC sample data to authenticate the domains for the sample residential portal. In the Steel-Belted RADIUS configuration, identify the host on which the directory is running if the host (if it is not localhost).

Configuring Cable Behavior

For a PCMM environment, you can create an application to create a subscriber session by either:

If the application provides the subscriber IP address and associated information, you can configure the portal application to locate the SAE that manages the subscriber session by configuring one of the following:

Authenticating Subscribers Through RADIUS

If you use RADIUS to manage subscriber data, you can use RADIUS to authentication subscribers when they log in to a residential portal. You configure RADIUS authentication plug-ins to provide RADIUS authentication or authorization. In the configuration for the plug-in, you specify how the SAE handles RADIUS attributes received from the RADIUS server.

Because the SAE rather than a JunosE router receives the authentication response, you can specify that the response include attributes other than serviceBundle and class, and you can specify more than value for the RADIUS class attribute.

To authenticate subscribers through RADIUS at portal login:

  1. Create a RADIUS authorization plug-in to authenticate subscriber sessions.
  2. Configure the RADIUS authorization plug-in to specify:
    • The RADIUS attributes to be set in an authorization response
    • The action to be taken in response to the attribute values received

For example, you could create a RADIUS authorization plug-in to:

For more information about RADIUS authentication plug-ins, see SRC PE Subscribers and Subscriptions Guide.

Customizing How the Sample Residential Portal Handles Unrecognized IP Subscribers

By default, the sample residential portal sends unrecognized IP subscribers to a login page rather than to an error page.

To customize how unrecognized IP subscribers are handled: