Important: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).bind { accounting-proxy address ip_address | address ip_address } [ max-subscribers max_sessions | port port_number | source-context source_context ]
bind authentication-proxy address ip_address [ acct-port port_number | auth-port port_number | max-subscribers max-sessions | source-context source_context ]
accounting-proxy address ip_address | address ip_address } [ max-subscribers max_sessions | port port_number | source-context source_context ]
|
•
|
accounting-proxy address ip_address: Specifies IP address of the interface where accounting proxy requests are received by this service.
|
ip_address must be specified using standard IPv4 or IPv6 dotted decimal notation.
|
•
|
address ip_address: Specifies IP address of the interface where accounting requests are received by this service.
|
ip_address must be specified using standard IPv4 or IPv6 dotted decimal notation.
|
•
|
max-subscribers max_sessions: Specifies the maximum number of subscriber sessions allowed for the service. If this option is not configured, the system defaults to the license limit.
|
On an ASR 5000 chassis, in Release 8.x, max_sessions must be an integer from 0 through 3000000. In Release 9.x and later, max_sessions must be an integer from 0 through 4000000.
|
•
|
port port_number: Specifies the port number of the interface where accounting requests are received by this service.
|
port_number must be an integer from 0 through 65535.
|
•
|
source-context source_context: Specifies the source context where RADIUS accounting requests are received.
|
source_context must be an alpha and/or numeric string of 1 through 79 characters in length.
authentication-proxy address ip_address [ acct-port port_number | auth-port port_number | max-subscribers max_sessions | source-context source_context ]
|
•
|
authentication-proxy address ip_address: Specifies IP address of the interface where authentication proxy requests are received by this service.
|
ip_address must be specified using standard IPv4 or IPv6 dotted decimal notation.
Important: Enabling authentication proxy also enables accounting proxy.|
•
|
acct-port port_number: Specifies the port number of the interface where accounting proxy requests are received by this service.
|
port_number must be an integer from 0 through 65535.
|
•
|
auth-port port_number: Specifies the port number of the interface where authentication proxy requests are received by this service.
|
port_number must be an integer from 0 through 65535.
|
•
|
max-subscribers max_sessions: Specifies the maximum number of subscriber sessions allowed for the service. If this option is not configured, the system defaults to the license limit.
|
On an ASR 5000 chassis, in Release 8.x, max_sessions must be an integer from 0 through 3000000. In Release and 9.0 and later, max_sessions must be an integer from 0 through 4000000.
|
•
|
source-context source_context: Specifies the source context where RADIUS accounting requests are received.
|
source_context must be an alpha and/or numeric string of 1 through 79 characters in length.
Use this command to bind the IPSG RADIUS Server service to a logical AAA interface and specify the number of allowed subscriber sessions. If the AAA interface is not located in this context, configure the source-context parameter.
The following command binds the service to a AAA interface with and IP address of 1.2.3.4 located in the source context named aaa_ingress:
[ encrypted ] password password
|
•
|
encrypted: Specifies that the RADIUS authorization password is encrypted.
|
|
•
|
password password: Specifies the password that must be matched by incoming RADIUS accounting requests.
|
password must be an alpha and/or numeric string of 1 through 63 characters in length.
Default: APN
Use this command to set the service to support APN profiles (supporting Gx through the enabling of ims-auth-service) or for basic subscriber profile lookup.
radius accounting { { client { ip_address | ip_address/mask } [ encrypted ] key secret [ dictionary dictionary ] [ disconnect-message [ dest-port destination_port ] ] } | { interim create-new-call } }
ip_address and ip_address/mask must be specified using standard IPv4 or IPv6 dotted decimal notation.
dictionary dictionary
Specifies what dictionary database to use. The possible values for dictionary are described in the following table:
|
X is the integer value of the custom dictionary.
|
|
[ encrypted ] key secret
|
•
|
encrypted: Specifies that the shared key between the RADIUS client and this service is encrypted.
|
|
•
|
key secret: Specifies the shared key between the RADIUS client and this service.
|
secret must be an alpha and/or numeric string of 1 through 127 characters in length, and is case sensitive.
dest-port destination_port: Optionally, the port number to which the disconnect message must be sent can be specified.
destination_port must be an integer from 1 through 65535.
The following command configures the service to communicate with a RADIUS client with an IP address of 1.2.3.4 and an encrypted shared secret of secret_1234:
radius dictionary dictionary
dictionary dictionary
Default: starent-vsa1
Specifies what dictionary database to use. The possible values for dictionary are described in the table that follows:
|
customXX
|
XX is the integer value of the custom dictionary.
|
The following command configures the IPSG service to use the custom10 RADIUS database dictionary:
radius dictionary custom10
setup-timeout seconds
seconds must be an integer from 1 through 100000.
