radius (Access Profile)
Syntax
radius { accounting-server [ ip-address ]; attributes { exclude attribute-name packet-type; standard-attribute number { packet-type [ access-request | accounting-off | accounting-on | accounting-start | accounting-stop ]; } vendor-id id-number { vendor-attribute vsa-number { packet-type [ access-request | accounting-off | accounting-on | accounting-start | accounting-stop ]; } } } ignore { dynamic-iflset-name; framed-ip-netmask; idle-timeout; input-filter; logical-system-routing-instance; output-filter; session-timeout; standard-attribute number; vendor-id id-number { vendor-attribute vsa-number; } } } authentication-server [ ip-address ]; options { accounting-session-id-format (decimal | description); calling-station-id-delimiter delimiter-character; calling-station-id-format { agent-circuit-id; agent-remote-id; interface-description; nas-identifier; } chap-challenge-in-request-authenticator; client-accounting-algorithm (direct | round-robin); client-authentication-algorithm (direct | round-robin); coa-dynamic-variable-validation; ethernet-port-type-virtual; interface-description-format { exclude-adapter; exclude-channel; exclude-sub-interface; } ip-address-change-notify message; juniper-access-line-attributes; nas-identifier identifier-value; nas-port-extended-format { adapter-width width; ae-width width; port-width width; slot-width width; stacked-vlan-width width; vlan-width width; atm { adapter-width width; port-width width: slot-width width; vci-width width: vpi-width width; } } nas-port-id-delimiter delimiter-character; nas-port-id-format { agent-circuit-id; agent-remote-id; interface-description; interface-text-description; nas-identifier; order { agent-circuit-id; agent-remote-id; interface-description; interface-text-description; nas-identifier; postpend-vlan-tags; } postpend-vlan-tags; } nas-port-type { ethernet { port-type; } } override { calling-station-id remote-circuit-id; nas-ip-address tunnel-client-gateway-address; nas-port tunnel-client-nas-port; nas-port-type tunnel-client-nas-port-type; } remote-circuit-id-delimiter; remote-circuit-id-fallback; remote-circuit-id-format { agent-circuit-id; agent-remote-id; } revert-interval interval; service-activation { dynamic-profile (optional-at-login | required-at-login); extensible-service (optional-at-login | required-at-login); } vlan-nas-port-stacked-format; } preauthentication-server ip-address; }
Hierarchy Level
[edit access profile profile-name]
Description
Configure the RADIUS parameters that the router uses for AAA authentication and accounting for subscribers.
Options
accounting-server | (MX Series only) Specify a list of the RADIUS accounting servers used for accounting for DHCP, L2TP, and PPP clients.
|
authentication-server | (SRX Series only) Specify a list of the RADIUS authentication servers used to authenticate DHCP, L2TP, and PPP clients. The servers in the list are also used as RADIUS dynamic-request servers, from which the router accepts and processes RADIUS disconnect requests, CoA requests, and dynamic service activations and deactivations.
|
preauthentication-server | (MX Series only) Starting in Junos OS Release 13.3, specify the RADIUS preauthentication server, which is used for the LLID service. Note:
You cannot configure this statement if the Calling-Station-ID
attribute is excluded from RADIUS Access-Request messages by the
|
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.1.