System Log Messages; Configuring Snmp Traps - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual

JunosE 11.3.x Broadband Access Configuration Guide

Configuring SNMP Traps

36
If the first RADIUS server fails to respond to the RADIUS request, the E Series RADIUS
client issues a system log message and, if configured, an SNMP trap indicating that
the RADIUS server timed out. The E Series RADIUS client will not issue another system
log message or SNMP trap regarding this RADIUS server until the deadtime expires, if
configured, or for 3 minutes if deadtime is not configured.
The E Series RADIUS client then sends the RADIUS request to the second configured
RADIUS server. If the second RADIUS server fails to respond to the RADIUS request,
the E Series RADIUS client again issues a system log message and, if configured, an
SNMP trap indicating that the RADIUS server timed out.
This process continues until either the E Series RADIUS client receives a valid response
from a RADIUS server or the list of configured RADIUS servers is exhausted. If the list
of RADIUS servers is exhausted, the E Series RADIUS client issues a system log message
and, if configured, an SNMP trap indicating that all RADIUS servers have timed out.
If the E Series RADIUS client receives a RADIUS response from a "dead" RADIUS server
during the deadtime period, the RADIUS server is restored to active status.
If the router receives a valid RADIUS response to an outstanding RADIUS request, the
E Series client issues a system log message and, if configured, an SNMP trap indicating
that the RADIUS server is now available.

System Log Messages

You do not need to configure system log messages. The router automatically sends them
when individual servers do not respond to RADIUS requests and when all servers on a
VR fail to respond to requests. The following are the formats of the warning level system
log messages:
RADIUS [ authentication | accounting ] server serverAddress unavailable in VR
virtualRouterName [; trying nextServerAddress]
RADIUS no [ authentication | accounting ] servers responding in VR virtualRouterName
RADIUS [ authentication | accounting ] server serverAddress available in VR
virtualRouterName
This section describes how to configure the router to send traps to SNMP when RADIUS
servers fail to respond to messages, and how to configure SNMP to receive the traps.
To set up the router to send traps:
(Optional) Enable SNMP traps when a particular RADIUS authentication server fails
1.
to respond to Access-Request messages.
host1(config)#radius trap auth-server-not-responding enable
(Optional) Enable SNMP traps when all of the configured RADIUS authentication
2.
servers on a VR fail to respond to Access-Request messages.
host1(config)#radius trap no-auth-server-responding enable
(Optional) Enable SNMP traps when a RADIUS authentication server returns to active
3.
service.
Copyright © 2010, Juniper Networks, Inc.