Qtech SmartEdge 600 Configuration Bedienungsanleitung

Configuring Authentication, Authorization,and AccountingSYSTEM ADMINISTRATOR GUIDE61/1543-CRA 119 1170/1 Uen L

Configuring Authentication, Authorization, and AccountingNote: Configuring the global keyword with the aaa accountingsubscriber command allows you to

Overview1.4 AAA Route Download OverviewThe router allows you to configure and advertise IPv4 access routes before theroutes have been assigned to subs

Configuring Authentication, Authorization, and Accounting8 61/1543-CRA 119 1170/1 Uen L | 2012-12-04

Configuration and Operations2 Configuration and OperationsThis section provides information on how to configure, administer, andtroubleshoot AAA.Note:

Configuring Authentication, Authorization, and Accounting2.1.3 Preventing Subscriber Session Authentication When Session LimitReachedTo prevent a new

Configuration and Operations2.1.6 Authenticating UsernameTo specify a username for authentication, perform the task described in Table 7.Table 7 Usern

Configuring Authentication, Authorization, and AccountingTable 9 Administrator AuthenticationTask Root Command NotesConfigure administratorauthenticat

Configuration and Operations2.2.2.2 Enable the Assignment of Preferred IP AddressesTo enable the router to provide a RADIUS server with preferred IP a

Configuring Authentication, Authorization, and Accounting2.2.2.5 Configure Context-Specific RADIUS AuthenticationTo authenticate subscribers using one

Configuration and OperationsTable 16 Router DHCPv6 Interface AuthenticationTask Root Command NotesConfigure an interface to be aDHCPv6 server interfac

Copyright© Ericsson AB 2010-2012. All rights reserved. No part of this document may bereproduced in any form without the written permission of the cop

Configuring Authentication, Authorization, and AccountingTable 18 Context-Specific RADIUS and Router AuthenticationTask Root Command NotesConfigure co

Configuration and OperationsCaution!Risk of security breach. If you disable subscriber authentication, individualsubscriber names and passwords will n

Configuring Authentication, Authorization, and Accounting2.3.3 Configuring Dynamic Subscriber ReauthorizationTo configure dynamic subscriber reauthori

Configuration and OperationsDescription: (SE)* Format for Reauth String"type;sub_id;attr#;attr_val;attr#;;attr#;attr_val;..."(vsa_attr: vid-

Configuring Authentication, Authorization, and Accounting2.4.2 Configuring Administrator AccountingTo enable accounting messages for administrator ses

Configuration and OperationsTable 26 Global Subscriber AccountingTask Root Command NotesEnable globalsubscriber sessionaccounting updatemessages.aaa g

Configuring Authentication, Authorization, and AccountingNote: At least one RADIUS accounting server must be configured in thecurrent context before a

Configuration and OperationsTable 27 Context-Specific Subscriber AccountingTask Root Command NotesEnable context-specificaccounting messages forDHCP l

Configuring Authentication, Authorization, and AccountingTable 28 Global L2TP AccountingTask Root Command NotesConfigure global L2TPaccounting.aaa glo

Configuration and OperationsTable 30 AAA Operations TasksTask Root CommandGenerate AAA debug messages. debug aaaModify a subscriber attribute in real

ContentsContents1 Overview 11.1 Authentication 11.2 Authorization and Reauthorization 51.3 Accounting 51.4 AAA Route Download Overview 72 Configuratio

Configuring Authentication, Authorization, and Accounting4. Use the radius route-download server-timeout command to specify theinterval in seconds whi

Configuration Examples3 Configuration ExamplesThe following sections provide AAA configuration examples.3.1 Configuring Administrator AuthenticationTh

Configuring Authentication, Authorization, and Accounting[local]Redback(config)#aaa global authentication subscriber radius context local[local]Redbac

Configuring Authentication, Authorization, and Accounting61/1543-CRA 119 1170/1 Uen L | 2012-12-04

Overview1 OverviewThis document applies to both the Ericsson SmartEdge®and SM family routers.However, the software that applies to the SM family of sy

Configuring Authentication, Authorization, and Accounting1.1.2 SubscribersAuthentication of Point-to-Point Protocol (PPP) subscribers now includessupp

Overview• Tunnel-Server-Auth-ID (91)• Tunnel-Function (VSA 18)• Tx-Connect-Speed (L2TP AVP 24)• Rx-Connect-Speed (L2TP AVP 38)If you have IPv6 PPP sub

Configuring Authentication, Authorization, and Accountingaccounting message or tears down the subscriber session, depending on theconfigured action to

Overview1.2 Authorization and ReauthorizationThe following sections describe the authorization and reauthorization features.1.2.1 CLI Commands Authori