Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010, Configuration Manual

Page: 701 / 794

the subscriber’s RADIUS record. RADIUS then uses vendor-specific attributes
(VSAs) in the Access-Accept packet to activate the service session for the
subscriber. This method is useful when your subscribers are not currently logged
in.
■
RADIUS CoA method—Supports dynamic service selection for subscribers. For
example, the subscriber might have logged in without a service, or might have
used the RADIUS login method to activate a service at login. If no service was
activated at login (because of no Activate-Service attribute in the user’s RADIUS
record), you can later use the CoA method and a separate RADIUS record to
create a subscriber session and activate a service session for the subscriber. Or,
if the RADIUS login method was used and the subscriber already has an active
service session, you can use the CoA method and a new RADIUS record to activate
a new service session for the subscriber (and optionally deactivate the existing
service session). The RADIUS CoA method is useful when you have a large number
of users already logged in through RADIUS and you want to activate new services
for them. This method is also used for the guided entrance service described in
“Guided Entrance Service Definition Example” on page 694.
The RADIUS CoA method also supports the use of mutex groups to create mutex
services. See “Using Mutex Groups to Activate and Deactivate Subscriber Services”
on page 667.
Figure 31 on page 661 compares the two RADIUS-based methods.
Figure 31: Comparing RADIUS Login and RADIUS CoA Methods
Using RADIUS to Activate Subscriber Service Sessions
To use RADIUS to activate subscriber service sessions, you create a RADIUS record
that includes the Activate-Service VSA. For the RADIUS login method, this RADIUS
record is used by the Access-Accept message to start Service Manager and activate
the service when the subscriber logs in.
For the RADIUS CoA method, the service provider uses a CoA-Request message to
activate and deactivate the service for the subscriber who is already logged in.
To configure a service session that will be activated by RADIUS:
Using RADIUS to Manage Subscriber Service Sessions
■ 661
Chapter 27: Configuring Service Manager