Server Request Processing Limit; Authentication And Accounting Methods; Table 4: Local Udp Port Ranges By Radius Request Type - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual

Server Request Processing Limit

Authentication and Accounting Methods

Copyright © 2010, Juniper Networks, Inc.
router reaches the end of the list of servers, it starts again at the top of the list until it
comes full cycle through the list.
Use the radius algorithm command to specify the server access method.
When you configure the first RADIUS accounting server, a RADIUS Acct-On message is
sent. When you delete the last accounting server, a RADIUS Acct-Off message is sent.
You can configure RADIUS authentication servers and accounting servers to use different
UDP ports on the router. This enables the same IP address to be used for both an
authentication server and an accounting server. However, you cannot use the same IP
address for multiple authentication servers or for multiple accounting servers.rs.
NOTE: For information about the number of concurrent RADIUS requests
that the router supports for authentication and accounting servers, see JunosE
Release Notes, Appendix A, System Maximums.
The E Series router listens to a range of UDP source (or local) ports for RADIUS responses.
Each UDP source port supports a maximum of 255 RADIUS requests. When the 255
per-port limit is reached, the router opens the next source port. When the max-sessions
command limit is reached, the router submits the request to the next configured server.
Table 4 on page 19 lists the range of UDP ports the router uses for each type of RADIUS
request.

Table 4: Local UDP Port Ranges by RADIUS Request Type

RADIUS Request Type
RADIUS authentication
RADIUS accounting
RADIUS preauthentication
RADIUS route-download
When you configure AAA authentication and accounting services for your B-RAS
environment, one important task is to specify the authentication and accounting method
used. The JunosE Software gives you the flexibility to configure authentication or
accounting methods based on the type of subscriber. This feature allows you to enable
RADIUS authentication for some subscribers, while disabling authentication completely
for other subscribers. Similarly, you can enable RADIUS accounting for some subscribers,
but no accounting for others. For example, you might use RADIUS authentication for ATM
ERX310, ERX710, ERX1410, and
E120 Broadband Services
Routers
50000–50124
50125–50249
50250–50374
50375–50500
Chapter 1: Configuring Remote Access
ERX1440 and E320
Broadband Services Routers
50000–50124
50125–50499
50500–50624
50625–50749
19