Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring Access Components for the Layer 2 Wholesale Network Solution

date_range 06-Dec-23

When configuring a wholesale network, you must configure several components globally. This configuration provides access to RADIUS servers (if used) that you want the wholesaler and any configured retailers to use globally. The access configuration includes the following general steps:

Configuring RADIUS Server Access

You can globally define any RADIUS servers in your network that either the wholesale access profile or retailer access profile can use. After you define the global RADIUS servers, you can specify specific RADIUS servers within individual access profiles.

To define RADIUS servers for profile access:

  1. Access the [edit access radius-server] hierarchy level.
    content_copy zoom_out_map
    [edit ]
    user@host# edit access radius-server
    
  2. Specify the address and secret for any RADIUS servers in the network.
    content_copy zoom_out_map
    [edit access radius-server]
    user@host# set 192.168.10.1 secret $ABC123$ABC123$ABC123
    user@host# set 10.10.10.1 secret $ABC123$ABC123
    

Configuring a Layer 2 Wholesaler Access Profile

You must define the network and interface over which you want subscribers to initially access the network with a wholesale access profile. When a subscriber attempts to access the network, the access profile provides initial access information including authentication and accounting values that the router uses for the accessing subscriber.

To define a wholesale access profile:

  1. Create the wholesale access profile.
    content_copy zoom_out_map
    [edit]
    user@host# edit access profile AccessProfile
    
  2. Specify the authentication methods for the profile and the order in which they are used.
    content_copy zoom_out_map
    [edit access profile AccessProfile]
    user@host# set authentication-order radius password
    
  3. Specify that you want to configure RADIUS support.
    content_copy zoom_out_map
    [edit access profile AccessProfile]
    user@host# edit radius
    
  4. Specify the IP address of the RADIUS server used for authentication.
    content_copy zoom_out_map
    [edit access profile AccessProfile radius] 
    user@host# set authentication-server 10.10.10.1
    
  5. Specify the IP address of the RADIUS server used for accounting.
    content_copy zoom_out_map
    [edit access profile AccessProfile radius] 
    user@host# set accounting-server 10.10.10.1
    
  6. Configure any desired options for the RADIUS server.
  7. Configure subscriber accounting (RADIUS accounting).
footer-navigation