Supported Platforms
Configuring Access Components for the Layer 2 Wholesale Network Solution
When configuring a wholesale network, you must configure several components globally. This configuration provides access to RADIUS servers (if used) that you want the wholesaler and any configured retailers to use globally. The access configuration includes the following general steps:
Configuring RADIUS Server Access
You can globally define any RADIUS servers in your network that either the wholesale access profile or retailer access profile can use. After you define the global RADIUS servers, you can specify specific RADIUS servers within individual access profiles.
To define RADIUS servers for profile access:
- Access the [edit access radius-server] hierarchy
level.[edit ]user@host# edit access radius-server
- Specify the address and secret for any RADIUS servers in the network.
Configuring a Layer 2 Wholesaler Access Profile
You must define the network and interface over which you want subscribers to initially access the network with a wholesale access profile. When a subscriber attempts to access the network, the access profile provides initial access information including authentication and accounting values that the router uses for the accessing subscriber.
To define a wholesale access profile:
- Create the wholesale access profile.[edit]user@host# edit access profile AccessProfile
- Specify the authentication methods for the profile and
the order in which they are used.[edit access profile AccessProfile]user@host# set authentication-order radius password
- Specify that you want to configure RADIUS support. [edit access profile AccessProfile]user@host# edit radius
- Specify the IP address of the RADIUS server used for authentication.[edit access profile AccessProfile radius] user@host# set authentication-server 10.10.10.1
- Specify the IP address of the RADIUS server used for accounting.[edit access profile AccessProfile radius] user@host# set accounting-server 10.10.10.1
