Radius References; Subscriber Aaa Access Messages - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

RADIUS References

Subscriber AAA Access Messages

Copyright © 2010, Juniper Networks, Inc.
For information about the modules supported on E Series routers:
See the ERX Module Guide for modules supported on ERX7xx models, ERX14xx models,
and the ERX310 Broadband Services Router.
See the E120 and E320 Module Guide for modules supported on the Juniper Networks
E120 and E320 Broadband Services Routers.
For more information about RADIUS, consult the following resources:
RFC 2865—Remote Authentication Dial In User Service (RADIUS) (June 2000)
RFC 2866—RADIUS Accounting (June 2000)
RFC 2867—RADIUS Accounting Modifications for Tunnel Protocol Support (June 2000)
RFC 2868—RADIUS Attributes for Tunnel Protocol Support (June 2000)
RFC 2869—RADIUS Extensions (June 2000)
RFC 4679—DSL Forum Vendor-Specific RADIUS Attributes (September 2006)
GSMP extensions for layer2 control (L2C) Topology Discovery and Line
Configuration—draft-wadhwa-gsmp-l2control-configuration-00.txt (July 2006
expiration)
Authorization and authentication access messages identify subscribers before the RADIUS
server grants or denies them access to the network or network services. When an
application requests user authentication, the request must have certain authenticating
attributes, such as a user's name, password, and the particular type of service the user
is requesting. This information is sent in the authentication request via the RADIUS
protocol to the RADIUS server. In response, the RADIUS server grants or denies the request.
The router supports the following types of authentication and authorization messages:
Access-Request—Requests client authentication. RADIUS responds to a client
authentication request with either an Access-Accept, an Access-Reject, or an
Access-Challenge message. An Access-Request message can contain a number of
RADIUS attributes.
Access-Accept—Grants the client's access request and can provide specific
configuration information necessary to begin delivery of service to the user.
Access-Reject—Sent if any value of the received attributes is not acceptable.
Access-Challenge—Sent to the client, requesting additional authentication information.
Change-of-Authorization-Request (CoA-Request)—Dynamically modifies session
attributes, such as data filters.
Disconnect-Request—Immediately terminates a user session.
Chapter 3: Configuring RADIUS Attributes
165