Configuring RADIUS Server Support for Subscriber Secure Policy Mirroring

This topic describes how to configure RADIUS server support for the subscriber secure policy service. The RADIUS server can then initiate subscriber-based traffic mirroring. You create an access profile to specify the RADIUS server support.

To configure the router’s interaction with the RADIUS server in support of subscriber secure policy mirroring:

1. Create the access profile and assign a name.

   [edit access]

   user@host# edit profile ssp-server

2. Specify RADIUS as the authentication method.

   [edit access profile ssp-server]

   user@host# set authentication-order radius

3. Specify the IP address of the RADIUS server that performs authentication. This server also performs dynamic request (CoA) functions.

   [edit access profile ssp-server]

   user@host# set radius authentication-server 192.168.53.105

4. Specify the secret to use when communicating with the RADIUS server.

   [edit access profile ssp-server]

   user@host# set radius-server 192.168.53.105 secret mysecret42

5. Specify other optional RADIUS configuration settings as needed, such as accounting support.

Related Topics

• Subscriber Secure Policy Overview
• Configuring Subscriber Secure Policy Mirroring Overview
• RADIUS Attributes Used for Subscriber Secure Policy