Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 121 / 788

ppp aaa-profile
■
Use to assign an AAA profile to static and dynamic, multilink and nonmultilink
PPP interfaces.
■
For more information about how to use this command, see “ppp aaa-profile” on
page 68.
■
Example
host1(config-if)# ppp aaa-profile preAuth
■
Use the no version to remove the AAA profile assignment.
■
See ppp aaa-profile
pre-authenticate
■
Use to configure an AAA profile to support RADIUS preauthentication.
■
During preauthentication, the router sends an Access-Request message to a
RADIUS preauthentication server to obtain an LLID for a subscriber. In response,
the preauthentication server returns the LLID in the RADIUS Calling-Station-Id
[31] attribute of an Access-Accept message.
■
Example
host1(config-aaa-profile)# pre-authenticate
■
Use the no version to remove preauthentication support from the AAA profile.
■
See pre-authenticate
radius pre-authentication server
■
Use to specify the IP address of a RADIUS preauthentication server.
■
This command accesses RADIUS Configuration mode, from which you can
configure additional parameters for the RADIUS preauthentication server.
■
Example
host1(config)# radius pre-authentication server 10.10.10.2
■
Use the no version to delete the instance of the RADIUS preauthentication server.
■
See radius pre-authentication server
Troubleshooting Subscriber Preauthentication
You can configure the router to send traps to SNMP when a RADIUS preauthentication
server fails to respond to messages. To do so, you use the same procedure and
commands as you do to configure SNMP traps for a RADIUS authentication server.
For example, to enable SNMP traps when a particular RADIUS preauthentication
server fails to respond to Access-Request messages, use the
radius trap
auth-server-not-responding enable command.
Using the AAA Logical Line Identifier to Track Subscribers
■ 81
Chapter 1: Configuring Remote Access