Supported Platforms
Related Documentation
- EX Series, QFabric System, QFX Series standalone switches
- VSA Match Conditions and Actions
- QFabric System, QFX Series standalone switches
- Configuring Firewall Filters
- Configuring RADIUS Authentication
Understanding VSAs
Devices support the configuration of RADIUS server attributes specific to Juniper Networks. These attributes are known as vendor-specific attributes (VSAs) and are described in RFC 2138, Remote Authentication Dial In User Service (RADIUS).
Through VSAs, you can configure port-filtering attributes on the RADIUS server. VSAs are cleartext fields sent from the RADIUS server to the device as a result of authentication success or failure. Authentication prevents unauthorized user access by blocking a supplicant at the port until the device is authenticated by the RADIUS server. The VSA attributes are interpreted by the device during authentication, and the device takes appropriate actions. Implementing port-filtering attributes with authentication on the RADIUS server provides a central location for controlling LAN access for supplicants.
These port-filtering attributes specific to Juniper Networks are encapsulated in a RADIUS server VSA with the vendor ID set to the Juniper Networks ID number, 2636.
As well as configuring port-filtering attributes through VSAs, you can apply a port firewall filter that has already been configured on the device directly to the RADIUS server. Like port-filtering attributes, the filter is applied during the authentication process, and its actions are applied at the device port. Adding a port firewall filter to a RADIUS server eliminates the need to add the filter to multiple ports and devices.
Related Documentation
- EX Series, QFabric System, QFX Series standalone switches
- VSA Match Conditions and Actions
- QFabric System, QFX Series standalone switches
- Configuring Firewall Filters
- Configuring RADIUS Authentication
Published: 2014-07-23
Supported Platforms
Related Documentation
- EX Series, QFabric System, QFX Series standalone switches
- VSA Match Conditions and Actions
- QFabric System, QFX Series standalone switches
- Configuring Firewall Filters
- Configuring RADIUS Authentication
