Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 59 / 788

Server Request Processing Limit
You can configure RADIUS authentication servers and accounting servers to use
different UDP ports on the router. This enables the same IP address to be used for
both an authentication server and an accounting server. However, you cannot use
the same IP address for multiple authentication servers or for multiple accounting
servers.rs.
NOTE: For information about the number of concurrent RADIUS requests that the
router supports for authentication and accounting servers, see JUNOSe Release Notes ,
Appendix A , System Maximums .
The E Series router listens to a range of UDP source (or local) ports for RADIUS
responses. Each UDP source port supports a maximum of 255 RADIUS requests.
When the 255 per-port limit is reached, the router opens the next source port. When
the
max-sessions command limit is reached, the router submits the request to the
next configured server.
Table 4 on page 19 lists the range of UDP ports the router uses for each type of
RADIUS request.
Table 4: Local UDP Port Ranges by RADIUS Request Type
ERX1440 and E320
Broadband Services Routers
ERX310, ERX710, ERX1410, and
E120 Broadband Services
Routers
RADIUS Request Type
50000–50124 50000–50124 RADIUS authentication
50125–50499 50125–50249 RADIUS accounting
50500–50624 50250–50374 RADIUS preauthentication
50625–50749 50375–50500 RADIUS route-download
Authentication and Accounting Methods
When you configure AAA authentication and accounting services for your B-RAS
environment, one important task is to specify the authentication and accounting
method used. The JUNOSe software gives you the flexibility to configure authentication
or accounting methods based on the type of subscriber. This feature allows you to
enable RADIUS authentication for some subscribers, while disabling authentication
completely for other subscribers. Similarly, you can enable RADIUS accounting for
some subscribers, but no accounting for others. For example, you might use RADIUS
authentication for ATM 1483 subscribers, while granting IP subscriber management
interfaces access without authentication (using the
none keyword).
You can specify the authentication or accounting method you want to use, or you
can specify multiple methods in the order in which you want them used. For example,
Configuring RADIUS Authentication and Accounting Servers
■ 19
Chapter 1: Configuring Remote Access