Using Radius Route-Download Server To Distribute Routes; Format Of Downloaded Routes; Framed-Route (Radius Attribute 22); Cisco-Avpair (Cisco Vsa 26-1) - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual

Using RADIUS Route-Download Server to Distribute Routes

Format of Downloaded Routes

Downloaded Route Format Examples
Copyright © 2010, Juniper Networks, Inc.
Use to specify a description that is associated with the AAA profile. The description
can be transmitted to RADIUS in the Service-Description attribute (26-53)
The service description can be a maximum of 64 characters.
Example
host1(config-aaa-profile)#service-description service11
Use the no version to remove the service description for the profile.
See service-description
The JunosE RADIUS route-download server provides periodic automatic distribution of
IPv4 static access routes, which enables preconfiguration and preadvertising of access
routes before they are assigned to clients. Using the route-download server helps eliminate
routing protocol storms and other delays in client service activation that can be caused
by protocol convergence or a large number of simultaneous customer activations.
The RADIUS route-download server periodically sends a RADIUS Access-Request
message to the RADIUS server to request that routes be downloaded. The RADIUS server
then responds with an Access-Accept message and downloads the configured routes.
When the download operation is complete, the route-download server installs the access
routes in the routing table.
JunosE Software supports the creation of one RADIUS route-download server per chassis.
The RADIUS server sends the downloaded routes to the RADIUS route-download server
in the following format:
[ { vir | virtual-router } virtualRouterName ] [ vrf vrfName ] prefix-mask [ { null0 | null 0 } [
cost ] ] [ tag tagValue ]
The route-download server accepts downloaded routes in either the Framed-Route
attribute (RADIUS attribute 22) or the Cisco-AVpair attribute (Cisco VSA 26-1).

Framed-Route (RADIUS attribute 22)

NAS-1 Password = "14raddlsvr" User-Service-Type = Outbound-User
Framed-Route = "192.168.3.0 255.255.255.0 null0"
Framed-Route = "vrf vrfboston 192.168.1.0/24 null 0 0 tag 6"
Framed-Route = "vir host1 vrf vrfsunny 192.168.0.0/16 null0 0 tag 8"

Cisco-AVPair (Cisco VSA 26-1)

NAS-1 Password = "14raddlsvr" User-Service-Type = Outbound-User
cisco-avpair = "ip:route = 192.168.3.0 255.255.255.0 null0"
cisco-avpair = "ip:route = vrf vrfboston 192.168.1.0/24 null 0 0 tag 6"
cisco-avpair = "ip:route = vir host1 vrf vrfsunny 192.168.0.0/16 null0 0 tag 8"
Chapter 1: Configuring Remote Access
69