Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 100

NSM Infranet Controller Configuration Guide
82
Table 23: RADIUS Return Attributes Policies Configuration
Details (continued)
Option
return-attribute
Enable addition of
Session-Timeout attribute
with value equal to the Session
Lifetime
Interface
Function
Specifies the return attributes
to be sent to the network
access device.
Sends the Infranet Controller
a session timeout value equal
to the timeout value of the
configured session length on
all RADIUS accepts.
Specifies the Infranet
Controller network interface
for use by endpoints using
RADIUS attributes policies to
connect to the Infranet
Controller.
Copyright © 2010, Juniper Networks, Inc.
Your Action
Click return-attribute and add
the return attribute.
1. From the Attribute
drop-down list, select the
return attribute you want
to send.
2. For Value, enter the value
for the selected attribute,
and then click OK.
Clear this check box to prevent
the Infranet Controller from
sending a session timeout
value equal to the timeout
value of the configured session
length on all RADIUS accepts.
This allows you to set the
reauthentication timer
statically on the switch port, if
required
Select Automatic to use
VLAN tagging . You must
also connect the Infranet
Controller internal interface
to the trunk port on a
VLAN-enabled switch that
sees all of the VLAN traffic.
Select Internal if the
endpoints using RADIUS
attributes policies should
use the IP address of the
Infranet Controller's internal
interface.
Select External if the
endpoints on the configured
VLAN should use the IP
address of the Infranet
Controller's external
interface.