Configuring Timeout - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

JUNOSe 11.0.x Broadband Access Configuration Guide

Configuring Timeout

You can configure an idle timeout or a session timeout. The values you set are the
default values for PPP B-RAS users. Attributes returned by RADIUS override these
default settings on a per-user basis.
When you set the idle timeout, the PPP application on the router monitors both
ingress (inbound) traffic and egress (outbound) traffic by default for the configured
idle timeout period to determine whether to disconnect an inactive PPP session. If
there is no activity in either direction on the interfaces for more than the configured
idle timeout period, the router terminates the PPP session.
You can optionally configure the router to monitor only ingress traffic for the
configured idle timeout period to determine session inactivity and subsequent
disconnection of an inactive PPP session. Monitoring only ingress traffic for the idle
timeout is useful for networks in which the PPP keepalive timer is disabled for wireless
subscribers. Without the keepalive timer, the router cannot detect whether a wireless
subscriber has been disconnected. Monitoring egress traffic does not indicate inactivity
for wireless subscribers because egress traffic is always flowing. Enabling the router
to monitor only ingress traffic enables you to selectively disconnect subscribers,
including wireless subscribers, if no traffic is received for the configured idle timeout
period.
aaa timeout
88
Configuring Timeout
application's terminate reason. See Table 8 on page 84 for a list of supported
RADIUS codes.
Example
host1(config)#terminate-code ppp authenticate-challenge-timeout radius 4
Use the no version to restore a default mapping, which are listed in "AAA
Terminate Reasons" on page 273. For example:
host1(config)#no terminate-code aaa deny-address-allocation-failure radius
See terminate-code
Use to set either an idle or a session timeout.
The range in seconds for an idle timeout is 300–86400.
To enable the PPP application to monitor only ingress traffic for the configured
idle timeout period to determine whether to disconnect an inactive PPP session,
use the ingress-only keyword with the aaa timeout idle command. If there is
no ingress traffic on the interface for more than the configured idle timeout
period, the router terminates the PPP session.
To enable ingress-only traffic monitoring for the idle timeout, you must also
configure the idle timeout value by issuing the aaa timeout idle command.
If you do not specify the ingress-only keyword, PPP monitors both ingress traffic
and egress traffic for the idle timeout period to determine inactivity and
subsequent disconnection of an inactive PPP session.