Chapter 5 Configuring Radius Relay Server; Figure 6: Radius Relay Server - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

Chapter 5
Configuring RADIUS Relay Server
RADIUS Relay Server Overview
This chapter describes the E Series router's RADIUS relay server feature. The RADIUS
relay server provides authentication, authorization, accounting, and addressing
services to wireless subscribers in public areas, such as airports and coffee shops.
This chapter has the following sections:
RADIUS Relay Server Overview on page 245
RADIUS Relay Server Platform Considerations on page 246
RADIUS Relay Server References on page 246
How RADIUS Relay Server Works on page 246
RADIUS Relay Server and the SRC Software on page 248
Configuring RADIUS Relay Server Support on page 249
Monitoring RADIUS Relay Server on page 251
The JUNOSe RADIUS relay server provides authentication, authorization, accounting,
and addressing services in an 802.1x-based wireless environment.
The IEEE 802.1x standard is an authentication standard for wireless LANs; it enables
a wireless subscriber to be authenticated by a central authority. The standard uses
the Extensible Authentication Protocol (EAP) for message exchange during the
authentication process. The E Series router's RADIUS relay server enhances the
802.1x environment by including authorization, accounting, and addressing support
for wireless subscribers.
Figure 6 on page 246 illustrates a typical 802.1x-based wireless environment. In the
figure, wireless subscribers connect to wireless access points (WAPs) for
authentication. The WAPs in turn connect to the E Series router's RADIUS relay
server. The RADIUS relay server passes the request on to the authentication server,
which might be a RADIUS or TACACS+ server. The RADIUS server authenticates the
subscriber, who is then granted access. After authentication, the RADIUS relay server
obtains an IP address for the subscriber from the Dynamic Host Configuration Protocol
(DHCP) local or external server. The RADIUS relay server can also use the RADIUS
server or the optional Session and Resource Control (SRC) software (formerly the
SDX software), to provide the accounting support.
RADIUS Relay Server Overview
245