Udp Checksums; Collecting Accounting Statistics; Configuring Radius Aaa Servers - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

UDP Checksums

Each virtual router on which you configure B-RAS is enabled to perform UDP
checksums by default. You can disable and reenable UDP checksums.

Collecting Accounting Statistics

You can use the aaa accounting statistics command to specify how the AAA server
collects statistics on the sessions it manages. Use the volume-time keyword to specify
that AAA notifies applications to collect a full set of statistics from each of their
connections. Use the time keyword to specify that only the uptime status is collected
for each connection. Collecting only uptime information reduces the amount of data
sent to AAA and is a more efficient use of system resources for customers that do
not need a full set of statistics. The router collects a full set of statistics by default.

Configuring RADIUS AAA Servers

The number of RADIUS servers you cansure configure depends on available memory.
The router has an embedded RADIUS client for authentication and accounting.
NOTE: You can configure B-RAS with RADIUS accounting, but without RADIUS
authentication. In this configuration, the username and password on the remote end
are not authenticated and can be set to any value.
You must assign an IP address to a RADIUS authentication or accounting server to
configure it.
If you do not configure a primary authentication or accounting server, all
authentication and accounting requests will fail. You can configure other servers as
backup in the event that the primary server cannot be reached. Configure each server
individually.
To configure an authentication or accounting RADIUS server:
1.
2.
host1:vrXyz1(config)#virtual-router vrXyz2
host1:vrXyz2(config)#radius override nas-info
host1:vrXyz3(config)#exit
host1(config)#
Specify the authentication or accounting server address.
host1(config)#radius authentication server 10.10.10.1
host1(config-radius)#
or
host1(config)#radius accounting server 10.10.10.6
host1(config-radius)#
(Optional) Specify a UDP port for RADIUS authentication or accounting server
requests.
host1(config-radius)#udp-port 1645
Configuring RADIUS Authentication and Accounting Servers
Chapter 1: Configuring Remote Access
23