Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 205 / 788

Chapter 3
Configuring RADIUS Attributes
This chapter identifies the Remote Authentication Dial-In User Service (RADIUS)
attributes that JUNOSe software supports and describes the RADIUS attributes you
can configure with the command-line interface (CLI). RADIUS attributes are discussed
in the following sections:
■
RADIUS Overview on page 165
■
RADIUS Platform Considerations on page 166
■
RADIUS References on page 167
■
Subscriber AAA Access Messages on page 167
■
Subscriber AAA Accounting Messages on page 175
■
DSL Forum VSAs in AAA Access and Accounting Messages on page 182
■
CLI AAA Messages on page 184
■
CLI Commands Used to Modify RADIUS Attributes on page 184
RADIUS Overview
RADIUS is a distributed client/server that protects networks against unauthorized
access. RADIUS clients running on a Juniper Networks E Series Broadband Services
Router send authentication requests to a central RADIUS server.
You can access the RADIUS server through either a subscriber line or the CLI.
NOTE: For CLI/telnet users only —For CLI security, the router supports the RADIUS
Access-Challenge message. The RADIUS server uses this message to send the user
a challenge requiring a response. The router then displays the single reply message
and attempts to authenticate the user with the new response as the password.
The central RADIUS server stores all the required user authentication and network
access information. RADIUS informs the router of the privilege levels for which
RADIUS-authenticated users have enable access. The router permits or denies enable
access accordingly.
The RADIUS server is configured and managed by a RADIUS administrator. See your
RADIUS server documentation for information about configuring and managing a
RADIUS server.
RADIUS Overview
■ 165