Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010, Руководство по настройке

Страница: 213 / 794

■
See the ERX Module Guide for modules supported on ERX7xx models, ERX14xx
models, and the ERX310 Broadband Services Router.
■
See the E120 and E320 Module Guide for modules supported on the Juniper
Networks E120 and E320 Broadband Services Routers.
RADIUS References
For more information about RADIUS, consult the following resources:
■
RFC 2865—Remote Authentication Dial In User Service (RADIUS) (June 2000)
■
RFC 2866—RADIUS Accounting (June 2000)
■
RFC 2867—RADIUS Accounting Modifications for Tunnel Protocol Support (June
2000)
■
RFC 2868—RADIUS Attributes for Tunnel Protocol Support (June 2000)
■
RFC 2869—RADIUS Extensions (June 2000)
■
RFC 4679—DSL Forum Vendor-Specific RADIUS Attributes (September 2006)
■
GSMP extensions for layer2 control (L2C) Topology Discovery and Line
Configuration—draft-wadhwa-gsmp-l2control-configuration-00.txt (July 2006
expiration)
Subscriber AAA Access Messages
Authorization and authentication access messages identify subscribers before the
RADIUS server grants or denies them access to the network or network services.
When an application requests user authentication, the request must have certain
authenticating attributes, such as a user’s name, password, and the particular type
of service the user is requesting. This information is sent in the authentication request
via the RADIUS protocol to the RADIUS server. In response, the RADIUS server grants
or denies the request.
The router supports the following types of authentication and authorization messages:
■
Access-Request—Requests client authentication. RADIUS responds to a client
authentication request with either an Access-Accept, an Access-Reject, or an
Access-Challenge message. An Access-Request message can contain a number
of RADIUS attributes.
■
Access-Accept—Grants the client’s access request and can provide specific
configuration information necessary to begin delivery of service to the user.
■
Access-Reject—Sent if any value of the received attributes is not acceptable.
■
Access-Challenge—Sent to the client, requesting additional authentication
information.
■
Change-of-Authorization-Request (CoA-Request)—Dynamically modifies session
attributes, such as data filters.
■
Disconnect-Request—Immediately terminates a user session.
RADIUS References
■ 173
Chapter 3: Configuring RADIUS Attributes