Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Configuring AAA to Include Juniper Networks DSL VSAs in RADIUS Messages

You can include the juniper-dsl-attributes statement to configure AAA to add the set of Juniper Networks DSL VSAs to the RADIUS authentication and accounting request messages for subscribers. By default, these VSAs are not added to any RADIUS message. See ANCP DSL Attributes Mapped to Juniper Networks DSL Vendor-Specific Attributes for a table of the Juniper Networks DSL VSAs.

After you have configured the inclusion of the Juniper Networks VSAs, you can subsequently exclude one or more of the VSAs from being transmitted. To do so, include the exclude statement at the [edit access profile profile-name radius attributes] hierarchy level, and specify which VSAs to exclude.

In contrast to the Juniper Networks DSL VSAs (vendor ID 4874), the DSL Forum VSA (vendor ID 3561) is added to all RADIUS messages by default. The DSL Forum VSA conveys individual DSL Forum attributes. See DSL Forum Vendor-Specific Attributes for a table of these VSAs. You can use the exclude statement at the [edit access profile profile-name radius attributes] hierarchy level to prevent this VSA from being included in any RADIUS message.

To add the Juniper Networks DSL VSAs to RADIUS messages:

  • Configure the inclusion trigger.
    [edit access profile profile-name radius options]user@host# set juniper-dsl-attributes

To exclude specific Juniper Networks DSL VSAs from RADIUS messages:

  • Configure the exclusion trigger.
    [edit access profile profile-name radius attributes]user@host# set exclude vsa-option

    For example, to exclude the interleaving delay VSAs, configure the following statements:

    [edit access profile profile-name radius attributes]user@host# set exclude max-interlv-delay-dnuser@host# set excludemax-interlv-delay-up

To exclude the DSL Forum (RFC 4679) VSA from RADIUS messages:

  • Configure the exclusion trigger.
    [edit access profile profile-name radius attributes]user@host# set exclude dsl-forum-attributes

Published: 2013-07-31