Radius Services; Radius Attributes; Radius Platform Considerations - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

JunosE 11.2.x Broadband Access Configuration Guide

RADIUS Services

RADIUS Attributes

RADIUS Platform Considerations

164
The RADIUS server is configured and managed by a RADIUS administrator. See your
RADIUS server documentation for information about configuring and managing a RADIUS
server.
The E Series RADIUS client uses the IP address in the router ID unless you explicitly set
an IP address by using the radius update-source-addr command. See "Configuring RADIUS
Authentication and Accounting Servers" on page 17.
To explicitly set the source address, perform the following tasks:
Configure the RADIUS update-source address.
Set this address on the RADIUS server if required.
NOTE: For additional RADIUS information about topics such as restricting user access,
vty line authentication, or SSH, see the Passwords and Security chapter in JunosE System
Basics Configuration Guide.
RADIUS provides three distinct services:
Authentication—Determines whether or not a user is allowed to access a specific
service or resource.
Authorization—Associates connection attributes or characteristics with a specific user.
Accounting—Tracks service use by subscribers.
JunosE Software supports the RADIUS attributes and vendor-specific attributes (VSAs)
listed in this chapter. These attributes define specific authentication, authorization, and
accounting elements in a user's profile. The profile is stored on the RADIUS server. RADIUS
messages contain RADIUS attributes to communicate information between an E Series
Broadband Services Router and the RADIUS server.
Note these guidelines about RADIUS attribute numbers:
The number, such as [1], that appears in brackets before each attribute is the attribute's
standard number.
Any attribute number beginning with 26, such as [26-1], identifies a vendor-specific
attribute.
For a complete list of RADIUS attributes supported by JunosE Software, see "RADIUS
IETF Attributes" on page 249.
RADIUS is supported on all E Series routers.
Copyright © 2010, Juniper Networks, Inc.