Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 286 / 788

Figure 6: RADIUS Relay Server
E Series router
RADIUS Relay Server Platform Considerations
RADIUS relay is supported on all E Series routers.
For information about the modules supported on E Series routers:
■
See the ERX Module Guide for modules supported on ERX7xx models, ERX14xx
models, and the ERX310 Broadband Services Router.
■
See the E120 and E320 Module Guide for modules supported on the E120 and
E320 Broadband Services Routers.
RADIUS Relay Server References
For more information about RADIUS relay server, see the following resources:
■
IEEE 802.1x-2001—Port-Based Network Access Control
■
RFC 2869—RADIUS Extensions (June 2000
■
RFC 2284—PPP Extensible Authentication Protocol (EAP) (March 1998)
■
RFC 3539—Authentication, Authorization and Accounting (AAA) Transport Profile
(June 2003)
How RADIUS Relay Server Works
When a wireless subscriber starts a session, the WAP encapsulates EAP attributes
into a RADIUS Access-Request message and sends the request to the E Series router,
which the WAP views as the RADIUS server. The encapsulated message uses the
RADIUS EAP-Message (79) attribute. The RADIUS relay server does not process any
of the EAP attributes in the RADIUS Access-Request message; the encrypted message
is simply passed through the router to the actual RADIUS server. The RADIUS server
must be EAP aware.
246 ■
RADIUS Relay Server Platform Considerations
JUNOSe 11.0.x Broadband Access Configuration Guide