Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Configuring the RADIUS Disconnect Server for L2TP

To configure the RADIUS disconnect server to listen for disconnect requests from an administrator and process them, include the following statements at the [edit access] hierarchy level:

[edit access]radius-disconnect-port port-number;
radius-disconnect {client-address {secret password;}}

port-number is the server port to which the RADIUS client sends disconnect requests. The L2TP network server, which accepts these disconnect requests, is the server. You can specify a port number on which to contact the RADIUS disconnect server. Most RADIUS servers use port number 1700.

Note: The Junos OS accepts only disconnect requests from the client address configured at the [edit access radius-disconnect client-address] hierarchy level.

client-address is the host sending disconnect requests to the RADIUS server. The client address is a valid IP address configured on one of the router or switch interfaces.

password authenticates the RADIUS client. Passwords can contain spaces. The secret used by the local router must match that used by the server.

For information about how to configure RADIUS authentication for L2TP, see Configuring RADIUS Authentication for L2TP.

The following example shows the statements to be included at the [edit access] hierarchy level to configure the RADIUS disconnect server:

[edit access]radius-disconnect-port 1700;
radius-disconnect {192.168.64.153 secret "$9$rtkl87ws4ZDkgokPT3tpEcylWL7-VY4a";# SECRET-DATA192.168.64.162 secret "$9$rtkl87ws4ZDkgokPT3tpEcylWL7-VY4a";# SECRET-DATA}

Published: 2013-07-17

Supported Platforms

Published: 2013-07-17