Hi there.. We have an existing FreeRadius setup that works perfectly for our Cisco BRAS devices etc. I am trying to get some Juniper MX working properly. If I add a user to our system it works fine (dynamic IP assignment etc). The minute we add a static IP address, things go weird with the MX platform. The user authenticates and obtains the correct IP address but no traffic will pass. JTAC says this is an attributes related issue and we are back and forth. I was hoping someone on the list here could correct by users entry below based on their experiences? I'm running a fairly bare set of attributes hoping to figure out why this keeps breaking on the Juniper side: pstewart Auth-Type = System Service-Type = Framed, Framed-Protocol = PPP, Framed-IP-Address = xxx.xxx.111.73 Our typical users entry that works fine in the Cisco world looks like this: pso Auth-Type = System Service-Type = Framed-User, Framed-IP-Address = xx.xxx.58.115, Framed-MTU = 1500, Idle-Timeout = 11116000 So far I have messed around with many variables and not getting it to work properly.. At the same time JTAC has been quite helpful but we're still not operational yet. Thanks, Paul
Paul Stewart wrote:
The minute we add a static IP address, things go weird with the MX platform. The user authenticates and obtains the correct IP address but no traffic will pass. JTAC says this is an attributes related issue and we are back and forth.
RADIUS isn't magic. Take the attributes Juniper needs, and send them in an Access-Accept. If it works, you're OK. If not, ask Juniper what attributes their NAS needs.
I was hoping someone on the list here could correct by users entry below based on their experiences?
Ask Juniper what their product needs. They're really the best source of information about their product. This isn't a FreeRADIUS question, unfortunately. You can clearly edit the config files correctly. So the only question is what kind of attributes are needed by the Juniper box. Alan DeKok.
Thank you - appreciate the response. Have it working now and it ends up being a JunOS code issue - geesh.. Sorry for the noise... Paul -----Original Message----- From: freeradius-users-bounces+paul=paulstewart.org@lists.freeradius.org [mailto:freeradius-users-bounces+paul=paulstewart.org@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, January 24, 2012 1:24 PM To: FreeRadius users mailing list Subject: Re: Juniper MX auth issue Paul Stewart wrote:
The minute we add a static IP address, things go weird with the MX platform. The user authenticates and obtains the correct IP address but no traffic will pass. JTAC says this is an attributes related issue and we are back and forth.
RADIUS isn't magic. Take the attributes Juniper needs, and send them in an Access-Accept. If it works, you're OK. If not, ask Juniper what attributes their NAS needs.
I was hoping someone on the list here could correct by users entry below based on their experiences?
Ask Juniper what their product needs. They're really the best source of information about their product. This isn't a FreeRADIUS question, unfortunately. You can clearly edit the config files correctly. So the only question is what kind of attributes are needed by the Juniper box. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Paul Stewart