Profiles; Radius Authentication - Juniper JUNOSE SOFTWARE 11.2.X - LINK LAYER CONFIGURATION GUIDE 7-7-2010 Configuration Manual

JunosE 11.2.x Link Layer Configuration Guide

Profiles

RADIUS Authentication

514
For more information about IPv4, see chapter Configuring IP in JunosE IP, IPv6, and IGP
Configuration Guide. For more information about IPv6, see chapter Configuring IPv6 in
JunosE IP, IPv6, and IGP Configuration Guide.
You can use profiles to configure dynamic interfaces over ATM, VLAN, or Ethernet
Interfaces. A profile is a set of characteristics that can be dynamically assigned to
interfaces. By using a profile, you reduce the management of a large number of interfaces
by applying a set of characteristics to multiple interfaces.
When you are configuring a large number of interfaces with the same attributes at the
higher layers, you can use a profile to factor out all the common attributes of each layer
into one place. This action affects one or more dynamic layers of the interface column.
After you define the static lower layers, you assign a profile to the highest static layer of
the interface column.
When a dynamic interface is configured, the configuration data received from the RADIUS
authentication server typically overrides configuration data obtained from a profile.
In contrast to static PPP interfaces (above which only dynamic IP interfaces can be
created), static ATM 1483 subinterfaces support recognition and creation of the following
upper dynamic interface types or encapsulations:
Bridged Ethernet
IP
IPv6
Multilink PPP
PPP
PPPoE
The auto-configure command identifies the encapsulation type. For flexibility, the router
provides the ability to configure an ATM 1483 subinterface with distinct profile
assignments for each encapsulation type supported by the auto-configure command.
For more information about using this command, see "auto-configure Command" on
page 521.
RADIUS helps protect your network against unauthorized access. To accomplish this,
RADIUS clients running on your router send authentication requests to a central RADIUS
server. You can configure dynamic interfaces over interfaces through RADIUS
authentication.
When a packet is received, the authenticating interface, either PPP or ATM 1483,
establishes a session with RADIUS and passes the username and password to the RADIUS
server. For dynamic IPoA or dynamic bridged Ethernet, the RADIUS username and
password are obtained from the information specified by the subscriber command. The
RADIUS server returns a grant or deny indication. If authentication is granted, the RADIUS
Copyright © 2010, Juniper Networks, Inc.