Radius Dynamic-Request Server Platform Considerations; Figure 5: Sample Remote Access Network Using Radius - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual

JunosE 11.3.x Broadband Access Configuration Guide

Figure 5: Sample Remote Access Network Using RADIUS

RADIUS Dynamic-Request Server Platform Considerations

238
NOTE: The RADIUS dynamic-request server's support for CoA messages
is used by the Service Manager and by the E Series router's packet mirroring
feature. For information about using the Service Manager, see "Configuring
Service Manager" on page 633 in this guide. For specific information about
using the dynamic-request server with packet mirroring, see the Configuring
RADIUS-Based Mirroring chapter in JunosE Policy Management
Configuration Guide
For example, you might use the RADIUS dynamic-request server to terminate specific
user sessions. Without the RADIUS dynamic-request server, the only way to disconnect
a RADIUS user is from the E Series router. This disconnect method is cumbersome when
a network has many systems. The RADIUS dynamic-request server allows RADIUS servers
to initiate user-related operations, such as a termination operation, by sending unsolicited
request messages to an E Series router.
Figure 5 on page 238 shows a network that would benefit from the RADIUS
dynamic-request server functionality. In Figure 5 on page 238, instead of disconnecting
users on each E Series router, the RADIUS servers can initiate the disconnection. Although
the network has multiple RADIUS servers, the servers share a common database that
contains authorization and accounting information. Having a common database allows
any server to view who is currently valid and connected, and allows service providers to
manage the disconnection of users.
RADIUS dynamic-request server is supported on all E Series routers. For information
about the modules supported on E Series routers:
See the ERX Module Guide for modules supported on ERX7xx models, ERX14xx models,
and the ERX310 Broadband Services Router.
Copyright © 2010, Juniper Networks, Inc.