Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 130 / 788

■
Use to limit the number of active subscribers permitted on a virtual router.
■
Because profiles are applied to subscribers after the PPP authentication phase,
subscribers that have their VR context specified by profiles are not denied access.
Instead, when IP notifies AAA of the subscribers VR context, AAA checks limits.
If the subscriber exceeds the VR limit, AAA revokes the subscriber’s access and
logs out the subscriber.
■
Example
host1:vr17(config)# aaa subscriber limit per-vr 20
■
Use the no version to return to the default value, 0 (zero).
■
See aaa subscriber limit per-vr
Notifying RADIUS of AAA Failure
If a user passes RADIUS authentication, but fails AAA authentication, the RADIUS
server may still allocate an address for the user from its internal address pool. To
indicate to the RADIUS server to free the address, you can set up the router to send
an Acct-Stop message if a user fails AAA.
aaa accounting acct-stop on-aaa-failure
■
Use to cause the router to send an Acct-Stop message if a user fails AAA, but
RADIUS grants access.
■
Example
host1:vr17(config)# aaa accounting acct-stop on-aaa-failure disable
■
Use the no version to return to the default value, enabled.
■
See aaa accounting acct-stop on-aaa-failure
aaa accounting acct-stop on-access-deny
■
Use to cause the router to issue an Acct-Stop message if RADIUS denies access.
■
Example
host1:vr17(config)# aaa accounting acct-stop on-access-deny enable
■
Use the no version to return to the default value, disabled.
■
See aaa accounting acct-stop on-access-deny
Configuring Standard RADIUS IPv6 Attributes for IPv6 Neighbor Discovery Router
Advertisements and DHCPv6 Prefix Delegation
When an E Series router is configured for IP version 6, it uses router advertisements
to announce its presence to other nodes connected to it. Hosts discover the addresses
of their neighboring routers by listening for these advertisements. When the routing
90 ■
Notifying RADIUS of AAA Failure
JUNOSe 11.0.x Broadband Access Configuration Guide