Configuring Radius Relay Server Support - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

Configuring RADIUS Relay Server Support

Copyright © 2010, Juniper Networks, Inc.
records. Also, the following attributes must be configured on the RADIUS server used by
the WAP:
Service-Bundle [26-31]
Class [25]
User-Name [1]
To configure the RADIUS relay server feature, you enable support for the feature on the
E Series router and identify the key (secret) used for the connection between the WAP
and the RADIUS relay server. The following example configures a RADIUS relay
authentication server. Use similar steps to configure a RADIUS relay accounting server.
NOTE: The E Series router supports one instance of the RADIUS relay server per virtual
router. The instance can provide authentication, authorization, and accounting support.
Enable RADIUS relay server support on the E Series router, and enter RADIUS Relay
1.
Configuration mode.
host1(config)#radius relay authentication server
host1(config-radius-relay)#
Specify the IP address and mask of the network that will use the relay authentication
2.
server, and the secret used during exchanges between the relay authentication server
and clients (the WAPs).
host1(config-radius-relay)#key 192.168.25.9 255.255.255.255 mysecret
Specify the router's User Datagram Protocol (UDP) port on which the RADIUS relay
3.
server listens.
host1(config-radius-relay)#udp-port 1812
(Optional) Verify the configuration.
4.
host1(config-radius-relay)#exit
host1(config)#exit
host1#show radius relay servers
RADIUS Relay Authentication Server Configuration
------------------------------------------------
IP Address
------------- ---------------
10.10.15.0 255.255.255.0
10.10.8.15 255.255.255.255
192.168.25.9 255.255.255.255
192.168.102.5 255.255.255.255
Udp Port: 1812
RADIUS Relay Accounting Server Configuration
--------------------------------------------
IP Address
------------- ---------------
10.10.1.0 255.255.255.0
Chapter 5: Configuring RADIUS Relay Server
IP Mask Secret
---------
secret
newsecret
mysecret
999Y2K
IP Mask Secret
-------
NO8pxq
245