Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 280 / 788

■
CoA-ACK (44)
■
CoA-NAK (45)
Message Exchange
The RADIUS server and the router’s RADIUS dynamic-request server exchange
messages using UDP. The CoA-Request message sent by the RADIUS server has the
same format as the Disconnect-Request packet that is sent for a disconnect operation.
The response is either a CoA-ACK or a CoA-NAK message:
■
If AAA successfully changes the authorization, the response is a RADIUS-formatted
packet with a CoA-ACK message, and the data filter is applied to the session.
■
If AAA is unsuccessful, the request is malformed, or attributes are missing, the
response is a RADIUS-formatted packet with a CoA-NAK message.
Supported Error-Cause Codes (RADIUS Attribute 101)
When AAA is unsuccessful, the RADIUS dynamic-request server includes an
error-cause attribute (RADIUS attribute 101) in the CoA-NAK message that it sends
back to the RADIUS server. If the detected error does not map to one of the supported
error-cause attributes, the router sends the CoA-NAK without an error-cause attribute.
Table 46 on page 240 lists the supported error-cause codes.
Table 46: Error-Cause Codes (RADIUS Attribute 101)
Description Value Code
The request contains an attribute that is not supported (for
example, a third-party attribute). Unsupported
attribute 401
A critical attribute (for example, the session identification attribute)
is missing from a request. Missing attribute 402
Some other aspect of the request is invalid, such as if one or more
attributes (for example, the packet mirroring Mirror Identifier
value) are not formatted properly. Invalid request 404
The session context identified in the request does not exist on the
NAS. Session context not
found 503
The subscriber identified by attributes in the disconnect request
is owned by a component that does not support RADIUS-initiated
disconnect (for example, IP LAC subscribers cannot be
disconnected). Session context not
removable 504
A request could not be honored due to lack of available NAS
resources (such as memory). Resources
unavailable 506
240 ■
RADIUS-Initiated Change of Authorization
JUNOSe 11.0.x Broadband Access Configuration Guide