FireBrick FB6602, User Manual

Page: 121 / 152

FireBrick FB6602 V1.24.093
configuration objects
106
target-ip List of IPNameAddr - Target IP(s) or hostname for primary L2TP
connection
target-secret Secret - Shared secret for L2TP connection
test List of IPAddr - List of IPs that must have routing for this
target to be valid (deprecated)
tunnel-assignment-
id string - Tunnel Assignment ID to send
tunnel-client-return boolean - Return tunnel client as radius IP
Table H.21. radius-service: Elements
Element Type Instances Description
match radius-service-
match Optional, unlimited Matching rules for specific responses
server radius-server Optional, unlimited RADIUS server settings
H.2.16. radius-service-match: Matching rules for
RADIUS service
Rules for matching incoming RADIUS requests
Table H.22. radius-service-match: Attributes
Attribute Type Default Description
allow List of
IPNameRange
- Match source IP address of RADIUS
request
authenticator boolean - Require message authenticator
backup-ip List of IPNameAddr - Target IP(s) or hostname for backup L2TP
connection
called-station-id List of string - One or more patterns to match called-
station-id
calling-station-id List of string - One or more patterns to match calling-
station-id
class string - Class field to send
comment string - Comment
context-name string - Juniper Context-Name (SIN502)
dummy-ip boolean true Send dummy framed IP response
ip List of
IPNameRange
- Match target IP address of RADIUS
request
name string - Name
nsn-conditional boolean - Only send NSN settings if username is not
same as calling station id
nsn-tunnel-override-
username unsignedByte - Additional response for GGSN usage
nsn-tunnel-user-
auth-method unsignedInt - Additional response for GGSN usage
order radiuspriority - Priority tagging of endpoints sent