Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring RADIUS Clients That Send Accounting Requests for IP-Based Subscribers

date_range 13-Jan-21

You specify an MX Series router RADIUS client for each gateway GPRS support node (GGSN), Packet Data Network Gateway (PGW), or broadband network gateway (BNG) that sends IP-based subscriber session requests and identifies the MX Series router as a RADIUS server. This task is not used for snooped accounting requests.

Before you begin to configure a RADIUS client, make sure that you have configured the interface and IP address that you want to receive RADIUS requests on the MX Series router.

To configure the RADIUS clients:

  1. Configure the name of the RADIUS client.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name 
    
  2. Specify the IP address from which the RADIUS client sends the RADIUS requests.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name address client-address  
    
  3. Specify the MX Series router interface and IPv4 address that receive RADIUS requests from the GGSN, PGW, or BNG.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name source-interface interface ipv4-address address 
    
  4. Configure a shared secret to be used by the MX Series router and the RADIUS client for accounting.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name accounting secret password  
    
  5. (Optional) Specify that the framed-ip-address is used for subscriber creation when both the framed-route and framed-ip-address attributes are in the RADIUS accounting request from the RADIUS client. The framed-ip-netmask is also used for subscriber creation if it is in the request.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name prefer-framed-ip-address 
    

    By default, the framed-route attribute is used for subscriber creation when both the framed-route and framed-ip-address attributes are in the RADIUS accounting request.

  6. (Optional) Specify that the framed-ipv6-prefix is used for subscriber creation when both the delegated-ipv6-prefix and framed-ipv6-prefix attributes are in the RADIUS accounting request from the RADIUS client.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name prefer-framed-ipv6-prefix 
    

    By default, the delegated-ipv6-prefix attribute is used for subscriber creation when both the delegated-ipv6-prefix and framed-ipv6-prefix attributes are in the RADIUS accounting request.

  7. Configure the duration, in seconds, that the RADIUS response messages (sent for request messages) are stored in the MX Series router response cache before they time out.
    content_copy zoom_out_map
    [edit access radius]
    user@host# set clients client-name accounting response-cache-timeout seconds 
    
  8. Enable the RADIUS client for a specific TDF gateway.
    content_copy zoom_out_map
    [edit unified-edge gateways tdf gateway-name] 
    user@host# set aaa clients client-name 
    

    Use the client-name that you configured in Step 1.

footer-navigation