[j-nsp] Juniper E Series, VRF assignment from RADIUS

[Liam Murphy]

Hi Callum,

Thanks for the mail....
The aaa domain-map would work if I had a realm for each VRF.
Using ' Unisphere-Virtual-Router' with a : and the vrf allows me to create a VRF inside a virtual router.

Many thanks!

Regards

Liam
 

-----Original Message-----
From: Callum Barr [mailto:cbarr at wxc.co.nz] 
Sent: 17 October 2011 20:48
To: Liam Murphy; juniper-nsp at puck.nether.net
Subject: RE: [j-nsp] Juniper E Series, VRF assignment from RADIUS

Hi Liam,

You can use aaa domain-maps on the E-Series itself to assign different domains to different VR's as follows;

aaa domain-map "domain_1.co.uk"
 auth-router-name default
 ip-router-name "VR:VRF"
 ipv6-router-name "VR:VRF"
 address-pool-name blah

Or you can use the RADIUS VSA ERX-Virtual-Router-Name afaik.

Cheers,

Callum


-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Liam Murphy
Sent: Tuesday, October 18, 2011 1:06 AM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Juniper E Series, VRF assignment from RADIUS

Hi everyone,

I am setting up a Juniper E320 as a BRAS and have successful connectivity with users and routes being assigned from a RADIUS server.

I want to continue using the default-router but want to be able to assign connecting users into different VRFs.
Does anyone know how to do this in the RADIUS setup? (i.e. what the RADIUS attribute for this is?) Here is what I currently have:

User_1 at domain_1.co.uk   User-Password = "password_1"
         Service-Type=Framed-User,
         Framed-Protocol=PPP,
         Framed-IP-Address=15.15.15.152,
         Framed-Netmask=255.255.255.255,
         Framed-Route=29.11.29.11/32 15.15.15.152 1,
         Framed-Route=60.60.60.0/32 15.15.15.152 1,

Regards

Liam

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp