You specify an MX Series router RADIUS client for each
gateway GPRS support node (GGSN), Packet Data Network Gateway (PGW),
or broadband network gateway (BNG) that sends IP-based subscriber
session requests and identifies the MX Series router as a RADIUS server.
This task is not used for snooped accounting requests.
Before you begin to configure a RADIUS client,
make sure that you have configured the interface and IP address that
you want to receive RADIUS requests on the MX Series router.
To configure the RADIUS clients:
- Configure the name of the RADIUS client.
[edit access radius]
user@host# set clients client-name
- Specify the IP address from which the RADIUS client sends
the RADIUS requests.
[edit access radius]
user@host# set clients client-name address client-address
- Specify the MX Series router interface and IPv4 address
that receive RADIUS requests from the GGSN, PGW, or BNG.
[edit access radius]
user@host# set clients client-name source-interface interface ipv4-address address
- Configure a shared secret to be used by the MX Series
router and the RADIUS client for accounting.
[edit access radius]
user@host# set clients client-name accounting secret password
- (Optional) Specify that the framed-ip-address is used
for subscriber creation when both the framed-route and framed-ip-address
attributes are in the RADIUS accounting request from the RADIUS client.
The framed-ip-netmask is also used for subscriber creation if it is
in the request.
[edit access radius]
user@host# set clients client-name prefer-framed-ip-address
By default, the framed-route attribute is used for subscriber
creation when both the framed-route and framed-ip-address attributes
are in the RADIUS accounting request.
- (Optional) Specify that the framed-ipv6-prefix is used
for subscriber creation when both the delegated-ipv6-prefix and framed-ipv6-prefix
attributes are in the RADIUS accounting request from the RADIUS client.
[edit access radius]
user@host# set clients client-name prefer-framed-ipv6-prefix
By default, the delegated-ipv6-prefix attribute is used for
subscriber creation when both the delegated-ipv6-prefix and framed-ipv6-prefix
attributes are in the RADIUS accounting request.
- Configure the duration, in seconds, that the RADIUS response
messages (sent for request messages) are stored in the MX Series router
response cache before they time out.
[edit access radius]
user@host# set clients client-name accounting response-cache-timeout seconds
- Enable the RADIUS client for a specific TDF gateway.
[edit unified-edge gateways tdf gateway-name]
user@host# set aaa clients client-name
Use the client-name that you configured
in Step 1.
