Configuring Radius Relay Server; Radius Relay Server Overview - Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010 Configuration Manual

Chapter 5

Configuring RADIUS Relay Server

RADIUS Relay Server Overview

This chapter describes the E Series router's RADIUS relay server feature. The RADIUS
relay server provides authentication, authorization, accounting, and addressing
services to wireless subscribers in public areas, such as airports and coffee shops.
This chapter has the following sections:
RADIUS Relay Server Overview on page 251
RADIUS Relay Server Platform Considerations on page 252
RADIUS Relay Server References on page 252
How RADIUS Relay Server Works on page 252
RADIUS Relay Server and the SRC Software on page 254
Configuring RADIUS Relay Server Support on page 255
Monitoring RADIUS Relay Server on page 257
The JUNOSe RADIUS relay server provides authentication, authorization, accounting,
and addressing services in an 802.1x-based wireless environment.
The IEEE 802.1x standard is an authentication standard for wireless LANs; it enables
a wireless subscriber to be authenticated by a central authority. The standard uses
the Extensible Authentication Protocol (EAP) for message exchange during the
authentication process. The E Series router's RADIUS relay server enhances the
802.1x environment by including authorization, accounting, and addressing support
for wireless subscribers.
Figure 6 on page 252 illustrates a typical 802.1x-based wireless environment. In the
figure, wireless subscribers connect to wireless access points (WAPs) for
authentication. The WAPs in turn connect to the E Series router's RADIUS relay
server. The RADIUS relay server passes the request on to the authentication server,
which might be a RADIUS or TACACS+ server. The RADIUS server authenticates the
subscriber, who is then granted access. After authentication, the RADIUS relay server
obtains an IP address for the subscriber from the Dynamic Host Configuration Protocol
(DHCP) local or external server. The RADIUS relay server can also use the RADIUS
server or the optional Session and Resource Control (SRC) software (formerly the
SDX software), to provide the accounting support.
RADIUS Relay Server Overview
251