■
See the
ERX Module Guide
for modules supported on ERX7xx models, ERX14xx
models, and the ERX310 Broadband Services Router.
■
See the
E120 and E320 Module Guide
for modules supported on the Juniper
Networks E120 and E320 Broadband Services Routers.
RADIUS References
For more information about RADIUS, consult the following resources:
■
RFC 2865—Remote Authentication Dial In User Service (RADIUS) (June 2000)
■
RFC 2866—RADIUS Accounting (June 2000)
■
RFC 2867—RADIUS Accounting Modifications for Tunnel Protocol Support (June
2000)
■
RFC 2868—RADIUS Attributes for Tunnel Protocol Support (June 2000)
■
RFC 2869—RADIUS Extensions (June 2000)
■
RFC 4679—DSL Forum Vendor-Specific RADIUS Attributes (September 2006)
■
GSMP extensions for layer2 control (L2C) Topology Discovery and Line
Configuration—draft-wadhwa-gsmp-l2control-configuration-00.txt (July 2006
expiration)
Subscriber AAA Access Messages
Authorization and authentication access messages identify subscribers before the
RADIUS server grants or denies them access to the network or network services.
When an application requests user authentication, the request must have certain
authenticating attributes, such as a user’s name, password, and the particular type
of service the user is requesting. This information is sent in the authentication request
via the RADIUS protocol to the RADIUS server. In response, the RADIUS server grants
or denies the request.
The router supports the following types of authentication and authorization messages:
■
Access-Request—Requests client authentication. RADIUS responds to a client
authentication request with either an Access-Accept, an Access-Reject, or an
Access-Challenge message. An Access-Request message can contain a number
of RADIUS attributes.
■
Access-Accept—Grants the client’s access request and can provide specific
configuration information necessary to begin delivery of service to the user.
■
Access-Reject—Sent if any value of the received attributes is not acceptable.
■
Access-Challenge—Sent to the client, requesting additional authentication
information.
■
Change-of-Authorization-Request (CoA-Request)—Dynamically modifies session
attributes, such as data filters.
■
Disconnect-Request—Immediately terminates a user session.
RADIUS References
■
167
Chapter 3: Configuring RADIUS Attributes
Summary of Contents for JUNOSE 11.0.X MULTICAST ROUTING
Page 6: ...vi...
Page 28: ...xxviii Table of Contents JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 36: ...xxxvi List of Tables JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 42: ...2 Managing Remote Access JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 204: ...164 Managing RADIUS and TACACS JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 292: ...252 Monitoring RADIUS Relay Server JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 336: ...296 RADIUS Client Terminate Reasons JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 368: ...328 Managing L2TP JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 444: ...404 PPP Accounting Statistics JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 494: ...454 Managing DHCP JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 510: ...470 DHCP Local Server Configuration Tasks JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 556: ...516 Configuring DHCP Relay Proxy JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 616: ...576 Managing the Subscriber Environment JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 674: ...634 Managing Subscriber Services JUNOSe 11 0 x Broadband Access Configuration Guide...
Page 767: ...Part 7 Index Index on page 729 Index 727...
Page 768: ...728 Index JUNOSe 11 0 x Broadband Access Configuration Guide...
