
■
The router ignores any RADIUS attributes other than the Calling-Station-Id that
are returned in the preauthentication Access-Accept message.
■
If a preauthentication request fails due to misconfiguration of the
preauthentication server, timeout of the preauthentication server, or rejection
of the preauthentication request by the preauthentication server, the
authentication process continues normally and the preauthentication request is
ignored.
■
The router preserves the LLID value for established subscribers after a stateful
SRP switchover.
■
The
radius rollover-on-reject enable
command has no effect for a RADIUS
preauthentication server. That is, you cannot use the
radius rollover-on-reject
enable
command to configure the router to roll over to the next RADIUS
preauthentication server when the router receives an Access-Reject message for
the user it is authenticating. For information, see “radius rollover-on-reject” on
page 33.
Configuring the Router to Obtain the LLID for a Subscriber
To configure the router to obtain the LLID for a subscriber:
1.
Create an AAA profile that supports subscriber preauthentication.
host1(config)#
aaa profile preAuthLlid
host1(config-aaa-profile)#
pre-authenticate
host1(config-aaa-profile)#
exit
2.
Define a RADIUS preauthentication server.
host1(config)#
radius pre-authentication server 10.10.10.1
host1(config-radius)#
key abc123
host1(config-radius)#
exit
3.
Associate the AAA profile with the designated PPP interface.
host1(config)#
interface atm 4/3.101
host1(config-subif)#
ppp aaa-profile preAuthLlid
4.
(Optional) Verify that preauthentication support is configured for the AAA profile.
host1(config-subif)#
run show aaa profile name PreAuthLlid
preAuthLlid:
atm nas-port-type: ADLSL-CAP
ethernet nas-port-type: Cable
profile-service-description: xyzService
pre-authenticate
allow xyz.com
deny default
translate xyz1.com abc.com
For information, see “Setting Baselines for Remote Access” on page 110.
5.
(Optional) Verify configuration of the RADIUS preauthentication server.
Using the AAA Logical Line Identifier to Track Subscribers
■
79
Chapter 1: Configuring Remote Access
Содержание JUNOSE 11.0.X MULTICAST ROUTING
Страница 6: ...vi...
Страница 28: ...xxviii Table of Contents JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 36: ...xxxvi List of Tables JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 42: ...2 Managing Remote Access JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 204: ...164 Managing RADIUS and TACACS JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 274: ...234 CLI Commands Used to Modify RADIUS Attributes JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 292: ...252 Monitoring RADIUS Relay Server JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 336: ...296 RADIUS Client Terminate Reasons JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 368: ...328 Managing L2TP JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 408: ...368 Configuring the Weighted Load Balancing Method JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 444: ...404 PPP Accounting Statistics JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 492: ...452 Monitoring Operational Status within the Current VR Context JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 494: ...454 Managing DHCP JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 510: ...470 DHCP Local Server Configuration Tasks JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 528: ...488 Configuring the Router to Work with the SRC Software JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 556: ...516 Configuring DHCP Relay Proxy JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 616: ...576 Managing the Subscriber Environment JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 632: ...592 Subscriber Management Configuration Examples JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 636: ...596 Monitoring Active IP Subscribers Created by Subscriber Management JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 672: ...632 Monitoring Active IP Subscribers Created by Subscriber Management JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 674: ...634 Managing Subscriber Services JUNOSe 11 0 x Broadband Access Configuration Guide...
Страница 767: ...Part 7 Index Index on page 729 Index 727...
Страница 768: ...728 Index JUNOSe 11 0 x Broadband Access Configuration Guide...