Supported Platforms
Related Documentation
Configuring AAA to Include Juniper Networks DSL VSAs in RADIUS Messages
You can include the juniper-dsl-attributes statement to configure AAA to add the set of Juniper Networks DSL VSAs to the RADIUS authentication and accounting request messages for subscribers. By default, these VSAs are not added to any RADIUS message. See ANCP DSL Attributes Mapped to Juniper Networks DSL Vendor-Specific Attributes for a table of the Juniper Networks DSL VSAs.
After you have configured the inclusion of the Juniper Networks VSAs, you can subsequently exclude one or more of the VSAs from being transmitted. To do so, include the exclude statement at the [edit access profile profile-name radius attributes] hierarchy level, and specify which VSAs to exclude.
In contrast to the Juniper Networks DSL VSAs (vendor ID 4874), the DSL Forum VSA (vendor ID 3561) is added to all RADIUS messages by default. The DSL Forum VSA conveys individual DSL Forum attributes. See DSL Forum Vendor-Specific Attributes for a table of these VSAs. You can use the exclude statement at the [edit access profile profile-name radius attributes] hierarchy level to prevent this VSA from being included in any RADIUS message.
To add the Juniper Networks DSL VSAs to RADIUS messages:
- Configure the inclusion trigger.[edit access profile profile-name radius options]user@host# set juniper-dsl-attributes
To exclude specific Juniper Networks DSL VSAs from RADIUS messages:
- Configure the exclusion trigger.[edit access profile profile-name radius attributes]user@host# set exclude vsa-option
For example, to exclude the interleaving delay VSAs, configure the following statements:
To exclude the DSL Forum (RFC 4679) VSA from RADIUS messages:
- Configure the exclusion trigger.[edit access profile profile-name radius attributes]user@host# set exclude dsl-forum-attributes