Configuring Radius Dynamic-Request Server; Radius Dynamic-Request Server Overview - Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010 Configuration Manual

Chapter 4
Configuring RADIUS Dynamic-Request
Server

RADIUS Dynamic-Request Server Overview

This chapter describes the RADIUS dynamic-request server feature on E Series routers.
The following topics describe this feature:
RADIUS Dynamic-Request Server Overview on page 241
RADIUS Dynamic-Request Server Platform Considerations on page 242
RADIUS Dynamic-Request Server References on page 242
How RADIUS Dynamic-Request Server Works on page 243
RADIUS-Initiated Disconnect on page 243
Message Exchange on page 243
Configuring RADIUS-Initiated Disconnect on page 245
RADIUS-Initiated Change of Authorization on page 245
Configuring RADIUS-Initiated Change of Authorization on page 247
RADIUS Dynamic-Request Server Commands on page 248
Monitoring RADIUS Dynamic-Request Servers on page 250
The E Series router's RADIUS dynamic-request server feature provides an efficient
way for you to use RADIUS servers to centrally manage user sessions. The RADIUS
dynamic-request server enables the router to receive the following types of messages
from RADIUS servers:
Disconnect messages Immediately terminate specific user sessions.
Change-of-Authorization (CoA) messages Dynamically modify session
authorization attributes, such as data filters.
NOTE: The RADIUS dynamic-request server's support for CoA messages is used by
the Service Manager and by the E Series router's packet mirroring feature. For
information about using the Service Manager, see "Configuring Service Manager" on
page 641 in this guide. For specific information about using the dynamic-request
server with packet mirroring, see the Configuring RADIUS-Based Mirroring chapter
in JUNOSe Policy Management Configuration Guide
RADIUS Dynamic-Request Server Overview
241