Troubleshooting Subscriber Preauthentication - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

ppp aaa-profile
pre-authenticate
radius pre-authentication server

Troubleshooting Subscriber Preauthentication

You can configure the router to send traps to SNMP when a RADIUS preauthentication
server fails to respond to messages. To do so, you use the same procedure and
commands as you do to configure SNMP traps for a RADIUS authentication server.
For example, to enable SNMP traps when a particular RADIUS preauthentication
server fails to respond to Access-Request messages, use the radius trap
auth-server-not-responding enable command.
Use to assign an AAA profile to static and dynamic, multilink and nonmultilink
PPP interfaces.
For more information about how to use this command, see "ppp aaa-profile" on
page 68.
Example
host1(config-if)#ppp aaa-profile preAuth
Use the no version to remove the AAA profile assignment.
See ppp aaa-profile
Use to configure an AAA profile to support RADIUS preauthentication.
During preauthentication, the router sends an Access-Request message to a
RADIUS preauthentication server to obtain an LLID for a subscriber. In response,
the preauthentication server returns the LLID in the RADIUS Calling-Station-Id
[31] attribute of an Access-Accept message.
Example
host1(config-aaa-profile)#pre-authenticate
Use the no version to remove preauthentication support from the AAA profile.
See pre-authenticate
Use to specify the IP address of a RADIUS preauthentication server.
This command accesses RADIUS Configuration mode, from which you can
configure additional parameters for the RADIUS preauthentication server.
Example
host1(config)#radius pre-authentication server 10.10.10.2
Use the no version to delete the instance of the RADIUS preauthentication server.
See radius pre-authentication server
Using the AAA Logical Line Identifier to Track Subscribers
Chapter 1: Configuring Remote Access
81