Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SERVICE AVAILABILITY CONFIGURATION GUIDE 2010-10-08 Configuration Manual page 196

JunosE 11.3.x Service Availability Configuration Guide
174
JunosE Software supports certain RADIUS vendor-specific attributes (VSAs) that define
specific authentication, authorization, and accounting elements in a user's profile. The
profile is stored on the RADIUS server. RADIUS messages contain RADIUS attributes to
communicate information between an E Series Broadband Services Router and the
RADIUS server. For complete information on VSAs, see Configuring RADIUS Attributes in
the JunosE Broadband Access Configuration Guide. JunosE Software Release 10.3.x and
later supports the ICR-Partition-Id VSA [26-150]. You can use this VSA to collect
information on the ICR partition configured on the VLAN or S-VLAN subinterface on which
subscribers are logged in.
You can include an ICR-Partition-Id vendor-specific attribute (VSA) in the following
RADIUS messages:
Access-Request
Acct-Start
Acct-Stop
Interim-Acct (if Acct-Stop messages are specified)
Partition-Accounting-On
Partition-Accounting-Off
NOTE: For more information about the ICR partition accounting messages,
see the Configuring RADIUS Attributes chapter in the JunosE Broadband Access
Configuration Guide.
Determining the ICR partition is useful for accounting and authentication of subscribers
in RADIUS messages.
Use the ICR-Partition-Id VSA to determine the ICR partition on which subscribers are
logged in. You can configure the same ICR-Partition-Id string for an active ICR partition
and its corresponding backup partition.
To configure inclusion of ICR-Partition-Id in RADIUS Access-Request, Acct-Start, and
Acct-Stop messages, you can use the ICR-Partition-Id attribute in the radius include
command. When included in Acct-Stop messages, the attributes are also included in
Interim-Acct messages.
In addition to including the ICR-Partition-Id VSA in RADIUS Access-Request, Acct-Start,
Acct-Stop, and Interim-Acct messages, the router also sends the Partition-Accounting-On
and Partition-Accounting-Off messages:
Both Partition-Accounting messages include the ICR-Partition-Id VSA. Also, both these
messages are sent to the RADIUS accounting server configured on the virtual router
where the ICR partition is configured or the virtual router on which the corresponding ICR
interface is configured.
You can optionally configure duplicate or broadcast AAA accounting on a virtual router,
which sends the accounting information to additional virtual router simultaneously, so
Copyright © 2010, Juniper Networks, Inc.