Authentication And Accounting Methods; Table 4: Local Udp Port Ranges By Radius Request Type - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

Authentication and Accounting Methods

Copyright © 2010, Juniper Networks, Inc.

Table 4: Local UDP Port Ranges by RADIUS Request Type

RADIUS Request Type
RADIUS authentication
RADIUS accounting
RADIUS preauthentication
RADIUS route-download
When you configure AAA authentication and accounting services for your B-RAS
environment, one important task is to specify the authentication and accounting method
used. The JunosE Software gives you the flexibility to configure authentication or
accounting methods based on the type of subscriber. This feature allows you to enable
RADIUS authentication for some subscribers, while disabling authentication completely
for other subscribers. Similarly, you can enable RADIUS accounting for some subscribers,
but no accounting for others. For example, you might use RADIUS authentication for ATM
1483 subscribers, while granting IP subscriber management interfaces access without
authentication (using the none keyword).
You can specify the authentication or accounting method you want to use, or you can
specify multiple methods in the order in which you want them used. For example, if you
specify the radius keyword followed by the none keyword when configuring authentication,
AAA initially attempts to use RADIUS authentication. If no RADIUS servers are available,
AAA uses no authentication. The JunosE Software currently supports radius and none
as accounting methods and radius, none, and local as authentication methods. See
"Configuring Local Authentication Servers" on page 38 for information about local
authentication.
You can configure authentication and accounting methods based on the following types
of subscribers:
ATM 1483
Tunnels (for example, L2TP tunnels)
PPP
RADIUS relay server
IP subscriber management interfaces
NOTE: IP subscriber management interfaces are static or dynamic interfaces that are
created or managed by the JunosE Software's subscriber management feature.
ERX310, ERX710, ERX1410, and
E120 Broadband Services
Routers
50000–50124
50125–50249
50250–50374
50375–50500
Chapter 1: Configuring Remote Access
ERX1440 and E320
Broadband Services Routers
50000–50124
50125–50499
50500–50624
50625–50749
19