Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010 Configuration Manual page 64

JUNOSe 11.1.x Broadband Access Configuration Guide
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
24
Configuring RADIUS Authentication and Accounting Servers
Specify an authentication or accounting server secret.
host1(config-radius)#key gismo
(Optional) Specify the number of retries the router makes to an authentication
or accounting server before it attempts to contact another server.
host1(config-radius)#retransmit 2
(Optional) Specify the number of seconds between retries.
host1(config-radius)#timeout 5
(Optional) Specify the maximum number of outstanding requests.
host1(config-radius)#max-sessions 100
(Optional) Specify the amount of time to remove a server from the available list
when a timeout occurs.
host1(config-radius)#deadtime 10
(Optional) In Global Configuration mode, specify whether the E Series router
should move on to the next RADIUS server when the router receives an
Access-Reject message for the user it is authenticating.
host1(config)#radius rollover-on-reject enable
(Optional) Enable duplicate address checking.
host1(config)aaa duplicate-address-check enable
(Optional) Specify that duplicate accounting records be sent to the accounting
server for a virtual router.
host1(config)#aaa accounting duplication routerBoston
(Optional) Enter the correct virtual router context, and specify the virtual router
group to which broadcast accounting records are sent.
host1(config)#virtual-router vrSouth25
host1:vrSouth25(config)#aaa accounting broadcast westVrGroup38
host1:vrSouth25(config)#exit
(Optional) Specify that immediate accounting updates be sent to the accounting
server when a response is received to an Acct-Start message.
host1(config)#aaa accounting immediate-update
(Optional) Specify whether the router collects all statistics or only the uptime
status.
host1(config)#aaa accounting time
(Optional) Specify that tunnel accounting be enabled or disabled.
host1(config)#radius tunnel-accounting enable