Table of Contents
Advertisement
JUNOSe 11.1.x Service Availability Configuration Guide
Related Topics
Interaction with RADIUS for ICR
Authorization and authentication access messages identify subscribers before the
RADIUS server grants or denies those subscribers access to the network or network
services. When an application requests user authentication, the request must have
certain authenticating attributes, such as a user's name, password, and the particular
type of service the user is requesting. This information is sent in the authentication
request via the RADIUS protocol to the RADIUS server. In response, the RADIUS
server grants or denies the request.
JUNOSe Software supports certain RADIUS vendor-specific attributes (VSAs) that
define specific authentication, authorization, and accounting elements in a user's
profile. The profile is stored on the RADIUS server. RADIUS messages contain RADIUS
attributes to communicate information between an E Series Broadband Services
Router and the RADIUS server. For complete information on VSAs, see Configuring
RADIUS Attributes in the JUNOSe Broadband Access Configuration Guide. JUNOSe
Software Release 10.3.x and later supports the ICR-Partition-Id VSA [26-150]. You
can use this VSA to collect information on the ICR partition configured on the VLAN
or S-VLAN subinterface on which subscribers are logged in.
You can include an ICR-Partition-Id vendor-specific attribute (VSA) in the following
RADIUS messages:
NOTE: For more information about the ICR partition accounting messages, see the
Configuring RADIUS Attributes chapter in the JUNOSe Broadband Access Configuration
Guide.
Determining the ICR partition is useful for accounting and authentication of
subscribers in RADIUS messages.
Use the ICR-Partition-Id VSA to determine the ICR partition on which subscribers are
logged in. You can configure the same ICR-Partition-Id string for an active ICR partition
and its corresponding backup partition.
To configure inclusion of ICR-Partition-Id in RADIUS Access-Request, Acct-Start, and
Acct-Stop messages, you can use the ICR-Partition-Id attribute in the radius include
132
Interaction with RADIUS for ICR
Configuring an ICR Partition on page 134
Access-Request
Acct-Start
Acct-Stop
Interim-Acct (if Acct-Stop messages are specified)
Partition-Accounting-On
Partition-Accounting-Off
Advertisement
Table of Contents
