Radius References; Subscriber Aaa Access Messages - Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010 Configuration Manual

RADIUS References

For more information about RADIUS, consult the following resources:

Subscriber AAA Access Messages

Authorization and authentication access messages identify subscribers before the
RADIUS server grants or denies them access to the network or network services.
When an application requests user authentication, the request must have certain
authenticating attributes, such as a user's name, password, and the particular type
of service the user is requesting. This information is sent in the authentication request
via the RADIUS protocol to the RADIUS server. In response, the RADIUS server grants
or denies the request.
The router supports the following types of authentication and authorization messages:
See the ERX Module Guide for modules supported on ERX7xx models, ERX14xx
models, and the ERX310 Broadband Services Router.
See the E120 and E320 Module Guide for modules supported on the Juniper
Networks E120 and E320 Broadband Services Routers.
RFC 2865 Remote Authentication Dial In User Service (RADIUS) (June 2000)
RFC 2866 RADIUS Accounting (June 2000)
RFC 2867 RADIUS Accounting Modifications for Tunnel Protocol Support (June
2000)
RFC 2868 RADIUS Attributes for Tunnel Protocol Support (June 2000)
RFC 2869 RADIUS Extensions (June 2000)
RFC 4679 DSL Forum Vendor-Specific RADIUS Attributes (September 2006)
GSMP extensions for layer2 control (L2C) Topology Discovery and Line
Configuration draft-wadhwa-gsmp-l2control-configuration-00.txt (July 2006
expiration)
Access-Request Requests client authentication. RADIUS responds to a client
authentication request with either an Access-Accept, an Access-Reject, or an
Access-Challenge message. An Access-Request message can contain a number
of RADIUS attributes.
Access-Accept Grants the client's access request and can provide specific
configuration information necessary to begin delivery of service to the user.
Access-Reject Sent if any value of the received attributes is not acceptable.
Access-Challenge Sent to the client, requesting additional authentication
information.
Change-of-Authorization-Request (CoA-Request) Dynamically modifies session
attributes, such as data filters.
Disconnect-Request Immediately terminates a user session.
Chapter 3: Configuring RADIUS Attributes
RADIUS References
173