Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010, Configuration Manual

Page: 300 / 774

The JUNOSe software forwards or discards packets received from the backend
authentication router and the peer depending on the identifying code contained in
the packet.
The E Series router forwards:
■
Packets received from the peer with a Response code
■
Packets received from the backend authentication server with a Request, Success,
or Failure code
The E Series router discards:
■
Packets received from the peer with a Request, Success, or Failure code
■
Packets received from the backend authentication server with a Response code
The JUNOSe software determines the outcome of the authentication based only on
the Accept or Reject indication sent by the RADIUS server
EAP Types
The JUNOSe software has been qualified to work with the EAP authentication
methods—known as EAP types—described in Table 15 on page 268. Other EAP
authentication methods have not been qualified with the JUNOSe software
Table 15: Supported EAP Types
Behavior EAP Type
When LCP negotiation completes, PPP sends an initial EAP identity
request packet to the peer. The EAP identity response packet received
from the peer is forwarded to AAA. AAA forwards the response as an
Access-Request to the RADIUS server hosted on the backend
authentication server. 1—Identity
The JUNOSe software forwards Notification requests from the backend
authentication server to the peer and Notification responses from the
peer to the server. The JUNOSe software does not initiate any Notification
requests or responses. 2—Notification
The JUNOSe software forwards the NAKs received from the peer to the
backend authentication server. 3—NAK
The JUNOSe software acts as a pass-through for the EAP-MD5-Challenge
negotiated between the peer and backend authentication server. 4—MD5-Challenge
The JUNOSe software acts as a pass-through for the EAP-TLS negotiated
between the peer and backend authentication server. 13—TLS
EAP Packet Retransmission
PPP retransmits the EAP request packets to the peer. The RADIUS client retransmits
the EAP response packets to the RADIUS Server. The request packets to the peer are
268 ■
Overview
JUNOSe 11.1.x Link Layer Configuration Guide