radius-options (System)
Syntax
radius-options {
attributes {
nas-id nas-id
nas-ip-address ip-address;
}
enhanced-accounting;
password-protocol mschap-v2;
}
Hierarchy Level
[edit system]
Description
Configure RADIUS options for the NAS-IP address for outgoing RADIUS packets and password protocol used in RADIUS packets.
If a NAS‑IP address is configured under the radius-options command,
that address is included as the NAS‑IP in the RADIUS Access‑Request. If no NAS‑IP
address is explicitly configured but a loopback interface exists, the loopback
interface address is used as the NAS‑IP. If neither a NAS‑IP address nor a loopback
interface is configured, the NAS‑IP attribute is omitted from the Access‑Request in
Junos OS, but in Junos EVO OS, the management interface address is sent as the
NAS‑IP in the Access‑Request.
As per the RADIUS RFC, either the NAS-Identifier or the NAS-IP-Address must be
included in the Access-Request. If the RADIUS server expects the NAS-IP-Address to
be present in the Access-Request, it must be explicitly configured using the
radius-options command.
Options
| enhanced-accounting | Configure audit of TACACS+ or RADIUS authentication events such as access method, remote port, and access privileges. |
| nas-id nas-id | Value of NAS-ID in outgoing RADIUS packets. |
| nas-ip-address ip-address | IP address of the network access server (NAS) that requests user authentication. |
| password-protocol mschap-v2 | Protocol MS-CHAPv2, used for password authentication and password changing. |
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 8.3.
MS-CHAPv2 password protocol configuration option introduced in Junos OS Release 9.2.
MS-CHAPv2 password protocol configuration option introduced in Junos OS Release 9.2 for EX Series switches.
Statement introduced in Junos OS Release 11.1 for the QFX Series.
Support for network access server (NAS) IPv6 address added in Junos OS Release 12.1X47-D15 for SRX1500, SRX5400, SRX5600, and SRX5800 devices.
Statement introduced in Junos OS Release 14.1X53-D20 for OCX Series switches.
The radius-options statement is not available
on QFabric systems.
enhanced-accounting statement introduced in Junos
OS Release 14.1.