[j-nsp] Juniper E Series, VRF assignment from RADIUS

Callum Barr cbarr at wxc.co.nz
Mon Oct 17 15:48:14 EDT 2011


Hi Liam,

You can use aaa domain-maps on the E-Series itself to assign different domains to different VR's as follows;

aaa domain-map "domain_1.co.uk"
 auth-router-name default
 ip-router-name "VR:VRF"
 ipv6-router-name "VR:VRF"
 address-pool-name blah

Or you can use the RADIUS VSA ERX-Virtual-Router-Name afaik.

Cheers,

Callum


-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Liam Murphy
Sent: Tuesday, October 18, 2011 1:06 AM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Juniper E Series, VRF assignment from RADIUS

Hi everyone,

I am setting up a Juniper E320 as a BRAS and have successful connectivity with users and routes being assigned from a RADIUS server.

I want to continue using the default-router but want to be able to assign connecting users into different VRFs.
Does anyone know how to do this in the RADIUS setup? (i.e. what the RADIUS attribute for this is?)
Here is what I currently have:

User_1 at domain_1.co.uk   User-Password = "password_1"
         Service-Type=Framed-User,
         Framed-Protocol=PPP,
         Framed-IP-Address=15.15.15.152,
         Framed-Netmask=255.255.255.255,
         Framed-Route=29.11.29.11/32 15.15.15.152 1,
         Framed-Route=60.60.60.0/32 15.15.15.152 1,

Regards

Liam

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list