Table of Contents
Advertisement
Chapter 3
Configuring RADIUS Attributes
RADIUS Overview
This chapter identifies the Remote Authentication Dial-In User Service (RADIUS)
attributes that JUNOSe software supports and describes the RADIUS attributes you
can configure with the command-line interface (CLI). RADIUS attributes are discussed
in the following sections:
RADIUS Overview on page 171
RADIUS Platform Considerations on page 172
RADIUS References on page 173
Subscriber AAA Access Messages on page 173
Subscriber AAA Accounting Messages on page 181
DSL Forum VSAs in AAA Access and Accounting Messages on page 188
CLI AAA Messages on page 190
CLI Commands Used to Modify RADIUS Attributes on page 191
RADIUS is a distributed client/server that protects networks against unauthorized
access. RADIUS clients running on a Juniper Networks E Series Broadband Services
Router send authentication requests to a central RADIUS server.
You can access the RADIUS server through either a subscriber line or the CLI.
NOTE: For CLI/telnet users only For CLI security, the router supports the RADIUS
Access-Challenge message. The RADIUS server uses this message to send the user
a challenge requiring a response. The router then displays the single reply message
and attempts to authenticate the user with the new response as the password.
The central RADIUS server stores all the required user authentication and network
access information. RADIUS informs the router of the privilege levels for which
RADIUS-authenticated users have enable access. The router permits or denies enable
access accordingly.
The RADIUS server is configured and managed by a RADIUS administrator. See your
RADIUS server documentation for information about configuring and managing a
RADIUS server.
171
RADIUS Overview
Advertisement
Table of Contents
Troubleshooting
