You specify a router RADIUS client for each gateway GPRS support node (GGSN), Packet Data Network
Gateway (PGW), or broadband network gateway (BNG) that sends IP-based subscriber session
requests and identifies the router as a RADIUS server. This task is not used for snooped
accounting requests.
Before you begin to configure a RADIUS client, make sure that you have configured the interface
and IP address that you want to receive RADIUS requests on the router.
To configure the RADIUS clients:
- Configure the name of the RADIUS client.
[edit access radius]
user@host# set clients client-name
- Specify the IP address from which the RADIUS client sends
the RADIUS requests.
[edit access radius]
user@host# set clients client-name address client-address
-
Specify the router interface and IPv4 address that receive RADIUS requests from
the GGSN, PGW, or BNG.
[edit access radius]
user@host# set clients client-name source-interface interface ipv4-address address
-
Configure a shared secret to be used by the router and the RADIUS client for
accounting.
[edit access radius]
user@host# set clients client-name accounting secret password
- (Optional) Specify that the framed-ip-address is used
for subscriber creation when both the framed-route and framed-ip-address
attributes are in the RADIUS accounting request from the RADIUS client.
The framed-ip-netmask is also used for subscriber creation if it is
in the request.
[edit access radius]
user@host# set clients client-name prefer-framed-ip-address
By default, the framed-route attribute is used for subscriber
creation when both the framed-route and framed-ip-address attributes
are in the RADIUS accounting request.
- (Optional) Specify that the framed-ipv6-prefix is used
for subscriber creation when both the delegated-ipv6-prefix and framed-ipv6-prefix
attributes are in the RADIUS accounting request from the RADIUS client.
[edit access radius]
user@host# set clients client-name prefer-framed-ipv6-prefix
By default, the delegated-ipv6-prefix attribute is used for
subscriber creation when both the delegated-ipv6-prefix and framed-ipv6-prefix
attributes are in the RADIUS accounting request.
-
Configure the duration, in seconds, that the RADIUS response messages (sent for
request messages) are stored in the router response cache before they time
out.
[edit access radius]
user@host# set clients client-name accounting response-cache-timeout seconds
- Enable the RADIUS client for a specific TDF gateway.
[edit unified-edge gateways tdf gateway-name]
user@host# set aaa clients client-name
Use the client-name that you configured
in Step 1.
