Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

Configuring AAA Service Framework for the Broadband Subscriber Management Solution

Configuring RADIUS Server Access Information

Define the RADIUS server address and secret data that RADIUS access profiles can reference. Define an access profile that includes specific RADIUS configuration.

1. Edit router access to the RADIUS server.
   [edit]user@host# edit access radius-server
2. Set the address to the RADIUS server.
   [edit access radius-server]user@host# set 222.222.222.42
3. Edit the RADIUS server.
   [edit access radius-server]user@host# edit 222.222.222.42
4. Configure the source address for the RADIUS server.
   [edit access radius-server 222.222.222.42]user@host# set source-address 222.222.222.1
5. Configure the secret for the RADIUS server.
   [edit access radius-server 222.222.222.42]user@host# set secret "$EcReTRad1uSdAta4f0rTh3rtR"

Configuring RADIUS Server Access Profile

You can define a RADIUS access profile that references defined RADIUS servers and includes specific RADIUS configuration for authentication and accounting.

1. Create and name a RADIUS access profile.
   [edit]user@host# edit access profile AccessProfile_general
2. Edit the order in which authentication mechanisms are used.
   [edit access profile AccessProfile_general]user@host# set authentication-order radius
3. Edit the RADIUS access addresses.
   [edit access profile AccessProfile_general]user@host# edit access profile AccessProfile_general radius
4. Set the address or address list for the RADIUS authentication server.
   [edit access profile AccessProfile_general radius]user@host# set authentication-server 222.222.222.42
5. Set the address or address list for the RADIUS accounting server.
   [edit access profile AccessProfile_general radius]user@host# set accounting-server 222.222.222.42
6. Edit the RADIUS accounting values for the access profile.
   [edit access profile AccessProfile_general]user@host# edit accounting
7. Set the RADIUS accounting order.
   [edit access profile AccessProfile_general accounting]user@host# set order radius
8. Specify that RADIUS accounting stop when a user fails authentication but is granted access.
   [edit access profile AccessProfile_general accounting]user@host# set accounting-stop-on-failure
9. Specify that RADIUS accounting stop when access is denied to a subscriber.
   [edit access profile AccessProfile_general accounting]user@host# set accounting-stop-on-access-deny
10. Specify that RADIUS provide immediate updates.
    [edit access profile AccessProfile_general accounting]user@host# set immediate-update
11. Specify the amount of time (in minutes) between RADIUS updates.
    [edit access profile AccessProfile_general accounting]user@host# set update-interval 10
12. Specify that RADIUS accounting report only subscriber uptime.
    [edit access profile AccessProfile_general accounting]user@host# set statistics time