Configuring Downstream Network Elements and Accounting and Authentication Targets (SRC CLI)

Accounting and authentication targets (RADIUS AAA server) receive requests forwarded by the SIC. These targets reside in downstream network elements. You must configure at least one accounting target and one authentication target. Each target must have a unique name and address.

  1. Configuring SIC Accounting Targets (SRC CLI)
  2. Configuring SIC Authentication Targets (SRC CLI)

Configuring SIC Accounting Targets (SRC CLI)

Use the following statements to configure accounting targets:

shared sic group identifier radius network-element id downstream (authentication | accounting) accounting-target name { address address; priority priority;}
shared sic group identifier radius network-element id downstream (authentication | accounting) accounting-target name { secret secret; outbound-transport outbound-transport; port port; }

To configure an accounting target:

  1. From configuration mode, access the statement that configures the accounting target. This sample procedure uses group1 for the group identifier, ne1 for the network element identifier, and target1 as the accounting target name.
    edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1
  2. Specify the IP address of the RADIUS accounting target contained in the network element.
    [edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set address address
  3. Specify the priority of the target. Targets with lower priority values are selected before other targets in a failover policy.
    [edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set priority priority
  4. Specify the shared secret used by the RADIUS accounting target.
    [edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set secret secret
  5. (Optional) Specify the name of the local transport used to send requests to the accounting target.
    [edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set outbound-transport outbound-transport
  6. (Optional) Specify the UDP port number on which the RADIUS accounting target listens for requests.
    [edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set port port

Configuring SIC Authentication Targets (SRC CLI)

Use the following statements to configure authentication targets:

shared sic group identifier radius network-element id downstream (authentication | accounting) authentication-target name {address address;priority priority;}
shared sic group identifier radius network-element id downstream (authentication | accounting) authentication-target name {secret secret;outbound-transport outbound-transport;port port;}

To configure an authentication target:

  1. From configuration mode, access the statement that configures the authentication target. This sample procedure uses group1 for the group identifier, ne1 for the network element identifier, and target1 as the authentication target name.
    edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1
  2. Specify the IP address of the RADIUS authentication target contained in the network element.
    [edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set address address
  3. Specify the priority of the target. Targets with lower priority values are selected before other targets in a failover policy.
    [edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set priority priority
  4. Specify the shared secret used by the RADIUS authentication target.
    [edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set secret secret
  5. (Optional) Specify the name of the local transport used to send outbound requests to the authentication target.
    [edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set outbound-transport outbound-transport
  6. (Optional) Specify the UDP port number on which the RADIUS authentication target listens for requests.
    [edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set port port

Related Documentation