aaa commands
configure
— aaa
— apply-groups reference
— apply-groups-exclude reference
— diameter
— node string
— apply-groups reference
— apply-groups-exclude reference
— connection
— ipv4
— allow-connections boolean
— local-address string
— ipv6
— allow-connections boolean
— local-address string
— timer number
— description string
— origin-realm string
— peer index number
— address (ipv4-address-no-zone | ipv6-address-no-zone)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— connection-timer number
— default-peer boolean
— destination-host string
— preference number
— route index number
— application keyword
— apply-groups reference
— apply-groups-exclude reference
— preference number
— realm string
— watchdog-timer number
— python-policy reference
— router-instance string
— peer-policy string
— applications
— gx boolean
— gy boolean
— nasreq boolean
— apply-groups reference
— apply-groups-exclude reference
— connection-timer number
— description string
— ipv4-source-address string
— ipv6-source-address string
— origin-host string
— origin-realm string
— peer string
— address (ipv4-address-no-zone | ipv6-address-no-zone)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— connection-timer number
— destination-host string
— destination-realm string
— preference number
— statistics
— transaction-timer number
— transport
— port-number number
— watchdog-timer number
— proxy
— admin-state keyword
— local-address (ipv4-address-no-zone | ipv6-address-no-zone)
— mcs-peer
— address reference
— apply-groups reference
— apply-groups-exclude reference
— sync-tag string
— router-instance string
— python-policy reference
— role keyword
— router-instance string
— transaction-timer number
— vendor-support keyword
— watchdog-timer number
— radius
— acct-on-off-group string
— apply-groups reference
— apply-groups-exclude reference
— description string
— coa-port number
— isa-policy string
— accounting
— include-attributes
— acct-delay-time boolean
— acct-triggered-reason boolean
— called-station-id boolean
— calling-station-id boolean
— circuit-id boolean
— class boolean
— credit-control-quota boolean
— dhcp-options boolean
— dhcp-vendor-class-id boolean
— frame-counters boolean
— framed-ip-address boolean
— framed-ip-netmask boolean
— framed-ipv6-prefix boolean
— hardware-timestamp boolean
— ipv6-address boolean
— mac-address boolean
— millisecond-event-timestamp boolean
— multi-session-id boolean
— nas-identifier boolean
— nas-ip-address boolean
— nas-ipv6-address boolean
— nas-port boolean
— nas-port-id boolean
— nas-port-type boolean
— nat-inside-service-id boolean
— nat-outside-ip-address boolean
— nat-outside-service-id boolean
— nat-port-range-block boolean
— nat-subscriber-string boolean
— octet-counters boolean
— proxied-subscriber-data boolean
— release-reason boolean
— remote-id boolean
— rssi boolean
— session-time boolean
— subscriber-id boolean
— toserver-dhcp6-options boolean
— ue-creation-type boolean
— user-name boolean
— wlan-ssid-vlan boolean
— xconnect-tunnel-home-address boolean
— xconnect-tunnel-local-ipv6-address boolean
— xconnect-tunnel-remote-ipv6-address boolean
— xconnect-tunnel-service boolean
— xconnect-tunnel-type boolean
— nat-periodic-update
— interval number
— rate-limit (number | keyword)
— update-triggers
— address-state boolean
— soft-quota-exhausted boolean
— apply-groups reference
— apply-groups-exclude reference
— authentication
— include-attributes
— called-station-id boolean
— calling-station-id boolean
— circuit-id boolean
— dhcp-vendor-class-id boolean
— framed-ip-address boolean
— ipv6-address boolean
— mac-address boolean
— nas-identifier boolean
— nas-ip-address boolean
— nas-ipv6-address boolean
— nas-port boolean
— nas-port-id boolean
— nas-port-type boolean
— remote-id boolean
— toserver-dhcp-options boolean
— toserver-dhcp6-options boolean
— wlan-ssid-vlan boolean
— xconnect-tunnel-home-address boolean
— description string
— nas-ip-address-origin keyword
— password string
— python-policy reference
— servers
— access-algorithm keyword
— ipv6
— mtu number
— source-prefix string
— router-instance string
— server number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
— purpose
— accounting
— udp-port number
— authentication
— udp-port number
— coa
— udp-port number
— secret string
— source-address-range string
— timeout number
— total-tries number
— user-name
— format keyword
— mac-format keyword
— l2tp-accounting-policy string
— accounting-type
— session boolean
— tunnel boolean
— acct-tunnel-connection-fmt string
— apply-groups reference
— apply-groups-exclude reference
— description string
— include-radius-attribute
— calling-station-id boolean
— nas-identifier boolean
— nas-port
— bit-spec string
— nas-port-id
— prefix-string string
— suffix keyword
— nas-port-type
— type (keyword | number)
— radius-server-policy reference
— route-downloader string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— base-user-name string
— default-metric number
— default-tag number
— description string
— download-interval number
— max-routes number
— password string
— radius-server-policy reference
— retry-interval
— max number
— min number
— server-policy string
— acct-on-off
— apply-groups reference
— apply-groups-exclude reference
— monitor reference
— oper-state-change
— group reference
— apply-groups reference
— apply-groups-exclude reference
— description string
— python-policy reference
— servers
— access-algorithm keyword
— buffering
— acct-interim
— lifetime number
— max number
— min number
— acct-start
— lifetime number
— max number
— min number
— acct-stop
— lifetime number
— max number
— min number
— health-check
— down-timeout number
— test-account
— admin-state keyword
— interval number
— password string
— user-name string
— hold-down-time number
— ipv6-source-address string
— retry-count number
— router-instance string
— server number
— apply-groups reference
— apply-groups-exclude reference
— server-name string
— source-address string
— stickiness boolean
— timeout number
— wpp
— apply-groups reference
— apply-groups-exclude reference
— portal-group string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— portal string name string
— system-name string
aaa command descriptions
aaa
diameter
node [origin-host] string
[origin-host] string
connection
Synopsis | Enter the connection context | |
Context | configure aaa diameter node string connection | |
Tree | connection | |
Introduced | 16.0.R6 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
ipv4
allow-connections boolean
Synopsis | Listen on local address for incoming peer connections | |
Context | configure aaa diameter node string connection ipv4 allow-connections boolean | |
Tree | allow-connections | |
Description | When configured to true, this command is used in multi-chassis redundancy where the local Diameter node accepts connection from the inter-chassis peer. The peer requesting the connection must have the same Diameter name as the local peer and its source address must match the IP address of the locally configured destination peer. The IPv4 address on which the node listens for incoming connection is the configured source address of the local peer. This source IPv4 address can reference any local interface, including loopbacks. When configured to false, incoming requests for connections are refused. | |
Default | false | |
Introduced | 19.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
local-address string
Synopsis | IPv4 source address for the TCP peer connection | |
Context | configure aaa diameter node string connection ipv4 local-address string | |
Tree | local-address | |
Introduced | 16.0.R6 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
ipv6
allow-connections boolean
Synopsis | Listen on local address for incoming peer connections | |
Context | configure aaa diameter node string connection ipv6 allow-connections boolean | |
Tree | allow-connections | |
Default | false | |
Introduced | 19.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
local-address string
Synopsis | IPv6 source address for the TCP peer connection | |
Context | configure aaa diameter node string connection ipv6 local-address string | |
Tree | local-address | |
Introduced | 16.0.R6 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
timer number
Synopsis | Wait time before attempting reconnection to peer | |
Context | configure aaa diameter node string connection timer number | |
Tree | timer | |
Description | This command configures the time the system waits before attempting to reconnect to a peer after the connection is lost. | |
Range | 1 to 1000 | |
Units | seconds | |
Default | 30 | |
Introduced | 16.0.R6 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa diameter node string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
origin-realm string
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Origin-realm name | |
Context | configure aaa diameter node string origin-realm string | |
Tree | origin-realm | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
peer index number
index number
address (ipv4-address-no-zone | ipv6-address-no-zone)
admin-state keyword
Synopsis | Administrative state of the Diameter peer | |
Context | configure aaa diameter node string peer index number admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
connection-timer number
Synopsis | Wait time before attempting reconnection to peer | |
Context | configure aaa diameter node string peer index number connection-timer number | |
Tree | connection-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
default-peer boolean
Synopsis | Use the peer as default route for realm-based routing | |
Context | configure aaa diameter node string peer index number default-peer boolean | |
Tree | default-peer | |
Default | false | |
Introduced | 19.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
destination-host string
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Destination-Host AVP string for Diameter messages | |
Context | configure aaa diameter node string peer index number destination-host string | |
Tree | destination-host | |
String Length | 1 to 80 | |
Notes | This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
preference number
Synopsis | Diameter routing preference for a peer | |
Context | configure aaa diameter node string peer index number preference number | |
Tree | preference | |
Range | 1 to 100 | |
Default | 50 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
route index number
index number
Synopsis | Static Diameter route ID | |
Context | configure aaa diameter node string peer index number route index number | |
Tree | route | |
Description | This command configures the ID of the static route used to reach remote realms that are not directly connected to the origin realm. The route can also be used to override the route preference (peer preference) of the directly-connected realms. | |
Range | 1 to 15 | |
Notes | This element is part of a list key. | |
Introduced | 20.7.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
application keyword
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Diameter application to which the route applies | |
Context | configure aaa diameter node string peer index number route index number application keyword | |
Tree | application | |
Description | This command specifies the Diameter application in the destination realm reachable via the static route. | |
Options | ||
Notes | This element is mandatory. | |
Introduced | 20.7.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
preference number
Synopsis | Static route preference; lower value is preferred | |
Context | configure aaa diameter node string peer index number route index number preference number | |
Tree | preference | |
Description | This command configures the preference of the static route. The preference is compared with the preference values of all other static and dynamic routes. The dynamic route is a realm route learned directly from the peer via the Capabilities Exchange process during the peer negotiation phase. The preference value of the dynamic route is configured directly under the peer configuration. A lower preference value is preferred for route selection. | |
Range | 1 to 100 | |
Default | 50 | |
Introduced | 20.7.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
realm string
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Destination realm reachable via the static route | |
Context | configure aaa diameter node string peer index number route index number realm string | |
Tree | realm | |
String Length | 1 to 80 | |
Notes | This element is mandatory. | |
Introduced | 20.7.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
watchdog-timer number
Synopsis | Time between consecutive watchdog messages | |
Context | configure aaa diameter node string peer index number watchdog-timer number | |
Tree | watchdog-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
python-policy reference
Synopsis | Python policy for received or sent Diameter messages | |
Context | configure aaa diameter node string python-policy reference | |
Tree | python-policy | |
Reference | configure python python-policy string | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
router-instance string
Synopsis | Router in which this node connects to its peers | |
Context | configure aaa diameter node string router-instance string | |
Tree | router-instance | |
Default | Base | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
peer-policy [name] string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Enter the peer-policy list instance | |
Context | configure aaa diameter peer-policy string | |
Tree | peer-policy | |
Max. Instances | 32 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[name] string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Diameter peer policy name | |
Context | configure aaa diameter peer-policy string | |
Tree | peer-policy | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
applications
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Enter the applications context | |
Context | configure aaa diameter peer-policy string applications | |
Tree | applications | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
gx boolean
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Advertise Gx application support in CER messages | |
Context | configure aaa diameter peer-policy string applications gx boolean | |
Tree | gx | |
Default | false | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
gy boolean
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Advertise Gy application support in CER messages | |
Context | configure aaa diameter peer-policy string applications gy boolean | |
Tree | gy | |
Default | false | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
nasreq boolean
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Advertise NASREQ application support in CER messages | |
Context | configure aaa diameter peer-policy string applications nasreq boolean | |
Tree | nasreq | |
Default | false | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
connection-timer number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Wait time before attempting reconnection to peer | |
Context | configure aaa diameter peer-policy string connection-timer number | |
Tree | connection-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Default | 30 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Text description | |
Context | configure aaa diameter peer-policy string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
ipv4-source-address string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | IPv4 source address for peering connection | |
Context | configure aaa diameter peer-policy string ipv4-source-address string | |
Tree | ipv4-source-address | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
ipv6-source-address string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | IPv6 source address for IPv6 peering connection | |
Context | configure aaa diameter peer-policy string ipv6-source-address string | |
Tree | ipv6-source-address | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
origin-host string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Origin-Host AVP sent in all Diameter messages | |
Context | configure aaa diameter peer-policy string origin-host string | |
Tree | origin-host | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
origin-realm string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Origin-Realm AVP sent in all Diameter messages | |
Context | configure aaa diameter peer-policy string origin-realm string | |
Tree | origin-realm | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
peer [peer-name] string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Enter the peer list instance | |
Context | configure aaa diameter peer-policy string peer string | |
Tree | peer | |
Max. Instances | 5 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[peer-name] string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Diameter peer name | |
Context | configure aaa diameter peer-policy string peer string | |
Tree | peer | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Diameter peer address | |
Context | configure aaa diameter peer-policy string peer string address (ipv4-address-no-zone | ipv6-address-no-zone) | |
Tree | address | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
admin-state keyword
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Administrative state of the peer | |
Context | configure aaa diameter peer-policy string peer string admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
connection-timer number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Wait time before attempting reconnection to a peer | |
Context | configure aaa diameter peer-policy string peer string connection-timer number | |
Tree | connection-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
destination-host string
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Destination-Host AVP string for Diameter messages | |
Context | configure aaa diameter peer-policy string peer string destination-host string | |
Tree | destination-host | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
destination-realm string
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Destination-Realm AVP string for Diameter messages | |
Context | configure aaa diameter peer-policy string peer string destination-realm string | |
Tree | destination-realm | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
preference number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Peer preference of the Diameter peer policy | |
Context | configure aaa diameter peer-policy string peer string preference number | |
Tree | preference | |
Range | 1 to 100 | |
Default | 50 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
statistics
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Enter the statistics context | |
Context | configure aaa diameter peer-policy string peer string statistics | |
Tree | statistics | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
transaction-timer number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Timeout for base Diameter messages (DWR, CER, DPR) | |
Context | configure aaa diameter peer-policy string peer string transaction-timer number | |
Tree | transaction-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
transport
port-number number
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Destination TCP port number for the policy peer | |
Context | configure aaa diameter peer-policy string peer string transport port-number number | |
Tree | port-number | |
Range | 1 to 65535 | |
Default | 3868 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
watchdog-timer number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Time between consecutive watchdog messages | |
Context | configure aaa diameter peer-policy string peer string watchdog-timer number | |
Tree | watchdog-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
proxy
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Enter the proxy context | |
Context | configure aaa diameter peer-policy string proxy | |
Tree | proxy | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
admin-state keyword
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Administrative state of Diameter proxy | |
Context | configure aaa diameter peer-policy string proxy admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
local-address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Source IP address on which the Diameter proxy listens | |
Context | configure aaa diameter peer-policy string proxy local-address (ipv4-address-no-zone | ipv6-address-no-zone) | |
Tree | local-address | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
mcs-peer
address reference
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | MCS peer address | |
Context | configure aaa diameter peer-policy string proxy mcs-peer address reference | |
Tree | address | |
Reference | configure redundancy multi-chassis peer (ipv4-address-no-zone | ipv6-address-no-zone) | |
Notes | This element is mandatory. | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
sync-tag string
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Synchronization tag shared by MCS peers | |
Context | configure aaa diameter peer-policy string proxy mcs-peer sync-tag string | |
Tree | sync-tag | |
String Length | 1 to 32 | |
Notes | This element is mandatory. | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
router-instance string
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Routing context associated with Diameter proxy | |
Context | configure aaa diameter peer-policy string proxy router-instance string | |
Tree | router-instance | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
python-policy reference
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Name of the python policy for Diameter processing | |
Context | configure aaa diameter peer-policy string python-policy reference | |
Tree | python-policy | |
Reference | configure python python-policy string | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
role keyword
WARNING: This element is deprecated and will be removed in a future release. | ||
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Client or proxy role of a Diameter peer policy | |
Context | configure aaa diameter peer-policy string role keyword | |
Tree | role | |
Options | ||
Default | client | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
router-instance string
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Diameter peer policy router | |
Context | configure aaa diameter peer-policy string router-instance string | |
Tree | router-instance | |
Default | Base | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
transaction-timer number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Timeout for base Diameter messages (DWR, CER, DPR) | |
Context | configure aaa diameter peer-policy string transaction-timer number | |
Tree | transaction-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Default | 30 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
vendor-support keyword
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Vendor support announced in the capability exchange | |
Context | configure aaa diameter peer-policy string vendor-support keyword | |
Tree | vendor-support | |
Options | ||
Default | three-gpp | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
watchdog-timer number
WARNING: This element is deprecated and will be removed in a future release. | ||
Synopsis | Time between consecutive watchdog messages | |
Context | configure aaa diameter peer-policy string watchdog-timer number | |
Tree | watchdog-timer | |
Range | 1 to 1000 | |
Units | seconds | |
Default | 30 | |
Introduced | 16.0.R4 | |
Deprecated | 20.2.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
radius
acct-on-off-group [name] string
Synopsis | Enter the acct-on-off-group list instance | |
Context | configure aaa radius acct-on-off-group string | |
Tree | acct-on-off-group | |
Max. Instances | 32 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[name] string
Synopsis | Group name for accounting on/off | |
Context | configure aaa radius acct-on-off-group string | |
Tree | acct-on-off-group | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa radius acct-on-off-group string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
coa-port number
isa-policy [name] string
Synopsis | Enter the isa-policy list instance | |
Context | configure aaa radius isa-policy string | |
Tree | isa-policy | |
Max. Instances | 8 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
[name] string
Synopsis | ISA RADIUS policy name referenced by a NAT application | |
Context | configure aaa radius isa-policy string | |
Tree | isa-policy | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
accounting
Synopsis | Enter the accounting context | |
Context | configure aaa radius isa-policy string accounting | |
Tree | accounting | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
include-attributes
Synopsis | Enter the include-attributes context | |
Context | configure aaa radius isa-policy string accounting include-attributes | |
Tree | include-attributes | |
Description | Commands in this context specify the attributes to include in the RADIUS accounting messages. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
acct-delay-time boolean
Synopsis | Include the accounting delay time attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes acct-delay-time boolean | |
Tree | acct-delay-time | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
acct-triggered-reason boolean
Synopsis | Include the accounting triggered reason attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes acct-triggered-reason boolean | |
Tree | acct-triggered-reason | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
called-station-id boolean
Synopsis | Include the Called-Station-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes called-station-id boolean | |
Tree | called-station-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
calling-station-id boolean
Synopsis | Include the Calling-Station-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes calling-station-id boolean | |
Tree | calling-station-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
circuit-id boolean
Synopsis | Include the Agent-Circuit-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes circuit-id boolean | |
Tree | circuit-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
class boolean
Synopsis | Include the Class attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes class boolean | |
Tree | class | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
credit-control-quota boolean
Synopsis | Add unconsumed volume quota to Credit-Control-Quota | |
Context | configure aaa radius isa-policy string accounting include-attributes credit-control-quota boolean | |
Tree | credit-control-quota | |
Default | false | |
Introduced | 21.7.R1 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
dhcp-options boolean
Synopsis | Include the Alc-ToServer-Dhcp-Options attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes dhcp-options boolean | |
Tree | dhcp-options | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
dhcp-vendor-class-id boolean
Synopsis | Include the Alc-Dhcp-Vendor-Class-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes dhcp-vendor-class-id boolean | |
Tree | dhcp-vendor-class-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
frame-counters boolean
Synopsis | Include Acct-Input-Packets and Acct-Output-Packets | |
Context | configure aaa radius isa-policy string accounting include-attributes frame-counters boolean | |
Tree | frame-counters | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
framed-ip-address boolean
Synopsis | Include the Framed-IP-Address attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes framed-ip-address boolean | |
Tree | framed-ip-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
framed-ip-netmask boolean
Synopsis | Include the Framed-IP-Netmask attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes framed-ip-netmask boolean | |
Tree | framed-ip-netmask | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
framed-ipv6-prefix boolean
Synopsis | Include the Framed-IPv6-Prefix attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes framed-ipv6-prefix boolean | |
Tree | framed-ipv6-prefix | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
hardware-timestamp boolean
Synopsis | Include the Event-Timestamp attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes hardware-timestamp boolean | |
Tree | hardware-timestamp | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
ipv6-address boolean
Synopsis | Include the Alc-Ipv6-Address attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes ipv6-address boolean | |
Tree | ipv6-address | |
Description | When configured to true, the IA_NA address of the UE is included in the accounting message if an active IA_NA lease exists. When configured to false, the address is not included. | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
mac-address boolean
Synopsis | Include the Alc-Client-Hardware-Addr attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes mac-address boolean | |
Tree | mac-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
millisecond-event-timestamp boolean
Synopsis | Include the Alc-Millisecond-Event-Timestamp attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes millisecond-event-timestamp boolean | |
Tree | millisecond-event-timestamp | |
Description | When configured to true, the router includes the Alc-Millisecond-Event-Timestamp attribute in the accounting message. This attribute includes the time the accounting event was logged in milliseconds since Jan 1, 1970 00:00:00 UTC. When configured to false, the router does not include this attribute. | |
Default | false | |
Introduced | 20.10.R1 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
multi-session-id boolean
Synopsis | Include the Acct-Multi-Session-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes multi-session-id boolean | |
Tree | multi-session-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-identifier boolean
Synopsis | Include the NAS-Identifier attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nas-identifier boolean | |
Tree | nas-identifier | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-ip-address boolean
Synopsis | Include the NAS-IP-Address attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nas-ip-address boolean | |
Tree | nas-ip-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-ipv6-address boolean
Synopsis | Include the NAS-IPv6-Address attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nas-ipv6-address boolean | |
Tree | nas-ipv6-address | |
Description | When configured to true, the router includes the NAS-IPv6-Address attribute in RADIUS accounting messages using the address specified in the configure aaa radius isa-policy nas-ip-address-origin command. The NAS-IPv6-Address attribute is included in both IPv4 and IPv6 RADIUS connections. When configured to false, the router does not include the NAS-IPv6-Address attribute in RADIUS accounting messages. | |
Default | false | |
Introduced | 22.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-port boolean
Synopsis | Include the NAS-Port attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nas-port boolean | |
Tree | nas-port | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-port-id boolean
Synopsis | Include the NAS-Port-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nas-port-id boolean | |
Tree | nas-port-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-port-type boolean
Synopsis | Include the NAS-Port-Type attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nas-port-type boolean | |
Tree | nas-port-type | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nat-inside-service-id boolean
Synopsis | Include NAT inside service ID in Alc-Serv-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nat-inside-service-id boolean | |
Tree | nat-inside-service-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nat-outside-ip-address boolean
Synopsis | Include the Alc-Nat-Outside-Ip-Addr attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nat-outside-ip-address boolean | |
Tree | nat-outside-ip-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nat-outside-service-id boolean
Synopsis | Include NAT outside service ID in Alc-Serv-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nat-outside-service-id boolean | |
Tree | nat-outside-service-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nat-port-range-block boolean
Synopsis | Include the Alc-Nat-Port-Range attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nat-port-range-block boolean | |
Tree | nat-port-range-block | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nat-subscriber-string boolean
Synopsis | Include the Alc-Subsc-ID-Str attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes nat-subscriber-string boolean | |
Tree | nat-subscriber-string | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
octet-counters boolean
Synopsis | Include Acct-Input-Octets and Acct-Output-Octets | |
Context | configure aaa radius isa-policy string accounting include-attributes octet-counters boolean | |
Tree | octet-counters | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
proxied-subscriber-data boolean
Synopsis | Include subscriber data as RADIUS attributes | |
Context | configure aaa radius isa-policy string accounting include-attributes proxied-subscriber-data boolean | |
Tree | proxied-subscriber-data | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
release-reason boolean
Synopsis | Include reason in the Acct-Terminate-Cause attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes release-reason boolean | |
Tree | release-reason | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
remote-id boolean
Synopsis | Include the Agent-Remote-Id attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes remote-id boolean | |
Tree | remote-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
rssi boolean
Synopsis | Include the Alc-RSSI attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes rssi boolean | |
Tree | rssi | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
session-time boolean
Synopsis | Include the Acct-Session-Time attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes session-time boolean | |
Tree | session-time | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
subscriber-id boolean
Synopsis | Include the Alc-Subsc-ID-Str attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes subscriber-id boolean | |
Tree | subscriber-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
toserver-dhcp6-options boolean
Synopsis | Include the Alc-ToServer-Dhcp6-Options attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes toserver-dhcp6-options boolean | |
Tree | toserver-dhcp6-options | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
ue-creation-type boolean
Synopsis | Include the Alc-Wlan-Ue-Creation-Type attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes ue-creation-type boolean | |
Tree | ue-creation-type | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
user-name boolean
Synopsis | Include the User-Name attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes user-name boolean | |
Tree | user-name | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
wlan-ssid-vlan boolean
Synopsis | Include per-SSID VLAN in Alc-Wlan-SSID-VLAN attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes wlan-ssid-vlan boolean | |
Tree | wlan-ssid-vlan | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
xconnect-tunnel-home-address boolean
Synopsis | Include the Alc-Xconnect-Tunnel-Home-Ipv6 attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-home-address boolean | |
Tree | xconnect-tunnel-home-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
xconnect-tunnel-local-ipv6-address boolean
Synopsis | Include the Alc-Xconnect-Tunnel-Local-Ipv6 attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-local-ipv6-address boolean | |
Tree | xconnect-tunnel-local-ipv6-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
xconnect-tunnel-remote-ipv6-address boolean
Synopsis | Include the Alc-Xconnect-Tunnel-Remote-Ipv6 attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-remote-ipv6-address boolean | |
Tree | xconnect-tunnel-remote-ipv6-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
xconnect-tunnel-service boolean
Synopsis | Include the Alc-Xconnect-Tunnel-Service attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-service boolean | |
Tree | xconnect-tunnel-service | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
xconnect-tunnel-type boolean
Synopsis | Include the Alc-Xconnect-Tunnel-Type attribute | |
Context | configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-type boolean | |
Tree | xconnect-tunnel-type | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nat-periodic-update
Synopsis | Enter the nat-periodic-update context | |
Context | configure aaa radius isa-policy string accounting nat-periodic-update | |
Tree | nat-periodic-update | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
interval number
Synopsis | Interval for periodic RADIUS Interim-Update messages | |
Context | configure aaa radius isa-policy string accounting nat-periodic-update interval number | |
Tree | interval | |
Range | 1 to 72 | |
Units | hours | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
rate-limit (number | keyword)
Synopsis | Rate limit for periodic RADIUS Interim-Update messages | |
Context | configure aaa radius isa-policy string accounting nat-periodic-update rate-limit (number | keyword) | |
Tree | rate-limit | |
Range | 1 to 100000 | |
Units | packets per second | |
Options | ||
Default | unlimited | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
update-triggers
Synopsis | Enter the update-triggers context | |
Context | configure aaa radius isa-policy string accounting update-triggers | |
Tree | update-triggers | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
address-state boolean
Synopsis | Send an Interim-Update when address allocated or freed | |
Context | configure aaa radius isa-policy string accounting update-triggers address-state boolean | |
Tree | address-state | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
soft-quota-exhausted boolean
Synopsis | Send interim update when soft volume quota is reached | |
Context | configure aaa radius isa-policy string accounting update-triggers soft-quota-exhausted boolean | |
Tree | soft-quota-exhausted | |
Default | false | |
Introduced | 21.7.R1 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
authentication
Synopsis | Enter the authentication context | |
Context | configure aaa radius isa-policy string authentication | |
Tree | authentication | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
include-attributes
Synopsis | Enter the include-attributes context | |
Context | configure aaa radius isa-policy string authentication include-attributes | |
Tree | include-attributes | |
Description | Commands in this context specify the attributes to include in the RADIUS authentication messages. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
called-station-id boolean
Synopsis | Include the Called-Station-Id attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes called-station-id boolean | |
Tree | called-station-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
calling-station-id boolean
Synopsis | Include the Calling-Station-Id attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes calling-station-id boolean | |
Tree | calling-station-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
circuit-id boolean
Synopsis | Include the Agent-Circuit-Id attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes circuit-id boolean | |
Tree | circuit-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
dhcp-vendor-class-id boolean
Synopsis | Include the Alc-DHCP-Vendor-Class-Id attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes dhcp-vendor-class-id boolean | |
Tree | dhcp-vendor-class-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
framed-ip-address boolean
Synopsis | Include the Framed-IP-Address attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes framed-ip-address boolean | |
Tree | framed-ip-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
ipv6-address boolean
Synopsis | Include the Alc-IPv6-address attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes ipv6-address boolean | |
Tree | ipv6-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
mac-address boolean
Synopsis | Include the Alc-Client-Hardware-Addr attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes mac-address boolean | |
Tree | mac-address | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-identifier boolean
Synopsis | Include the NAS-Identifier attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes nas-identifier boolean | |
Tree | nas-identifier | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-ip-address boolean
Synopsis | Include the NAS-IP-Address attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes nas-ip-address boolean | |
Tree | nas-ip-address | |
Default | true | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-ipv6-address boolean
Synopsis | Include the NAS-IPv6-Address attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes nas-ipv6-address boolean | |
Tree | nas-ipv6-address | |
Description | When configured to true, the router includes the NAS-IPv6-Address attribute in RADIUS authentication messages using the address specified in the configure aaa radius isa-policy nas-ip-address-origin command. The NAS-IPv6-Address attribute is included in both IPv4 and IPv6 RADIUS connections. When configured to false, the router does not include the NAS-IPv6-Address attribute in RADIUS authentication messages. | |
Introduced | 22.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-port boolean
Synopsis | Include the NAS-Port attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes nas-port boolean | |
Tree | nas-port | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-port-id boolean
Synopsis | Include the NAS-Port-Id attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes nas-port-id boolean | |
Tree | nas-port-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-port-type boolean
Synopsis | Include the NAS-Port-Type attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes nas-port-type boolean | |
Tree | nas-port-type | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
remote-id boolean
Synopsis | Include the Agent-Remote-Id attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes remote-id boolean | |
Tree | remote-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
toserver-dhcp-options boolean
Synopsis | Include the Alc-ToServer-Dhcp-Options attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes toserver-dhcp-options boolean | |
Tree | toserver-dhcp-options | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
toserver-dhcp6-options boolean
Synopsis | Include the Alc-ToServer-Dhcp6-Options attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes toserver-dhcp6-options boolean | |
Tree | toserver-dhcp6-options | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
wlan-ssid-vlan boolean
Synopsis | Include per-SSID VLAN in Alc-Wlan-SSID-VLAN attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes wlan-ssid-vlan boolean | |
Tree | wlan-ssid-vlan | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
xconnect-tunnel-home-address boolean
Synopsis | Include the Alc-Xconnect-Tunnel-Home-Ipv6 attribute | |
Context | configure aaa radius isa-policy string authentication include-attributes xconnect-tunnel-home-address boolean | |
Tree | xconnect-tunnel-home-address | |
Default | false | |
Introduced | 16.0.R5 | |
Platforms | 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa radius isa-policy string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
nas-ip-address-origin keyword
Synopsis | NAS-IP-Address attribute | |
Context | configure aaa radius isa-policy string nas-ip-address-origin keyword | |
Tree | nas-ip-address-origin | |
Options | ||
Default | system-ip | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
password string
Synopsis | Password used in the RADIUS access requests | |
Context | configure aaa radius isa-policy string password string | |
Tree | password | |
String Length | 1 to 42 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
python-policy reference
Synopsis | Python policy used for modifying RADIUS messages | |
Context | configure aaa radius isa-policy string python-policy reference | |
Tree | python-policy | |
Reference | configure python python-policy string | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
servers
Synopsis | Enter the servers context | |
Context | configure aaa radius isa-policy string servers | |
Tree | servers | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
access-algorithm keyword
Synopsis | Algorithm that accesses the RADIUS servers | |
Context | configure aaa radius isa-policy string servers access-algorithm keyword | |
Tree | access-algorithm | |
Options | ||
Default | direct | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
ipv6
mtu number
source-prefix string
Synopsis | Prefix containing individual source addresses per ISA | |
Context | configure aaa radius isa-policy string servers ipv6 source-prefix string | |
Tree | source-prefix | |
Description | This command configures an IPv6 prefix containing individual /128 addresses. These addresses are used as the source address for connections to IPv6 RADIUS servers. The prefix must be large enough to accommodate all BB-ISAs or ESA VMs in the system. | |
Introduced | 22.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
router-instance string
Synopsis | Routing instance | |
Context | configure aaa radius isa-policy string servers router-instance string | |
Tree | router-instance | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
server [index] number
[index] number
admin-state keyword
Synopsis | Administrative state of the ISA RADIUS server | |
Context | configure aaa radius isa-policy string servers server number admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | IP address of the RADIUS server | |
Context | configure aaa radius isa-policy string servers server number ip-address (ipv4-address-no-zone | ipv6-address-no-zone) | |
Tree | ip-address | |
Description | This command configures the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
purpose
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Enter the purpose context | |
Context | configure aaa radius isa-policy string servers server number purpose | |
Tree | purpose | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
accounting
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Enable the accounting context | |
Context | configure aaa radius isa-policy string servers server number purpose accounting | |
Tree | accounting | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
udp-port number
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | ISA RADIUS server accounting UDP port | |
Context | configure aaa radius isa-policy string servers server number purpose accounting udp-port number | |
Tree | udp-port | |
Range | 1 to 65535 | |
Default | 1813 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
authentication
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Enable the authentication context | |
Context | configure aaa radius isa-policy string servers server number purpose authentication | |
Tree | authentication | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
udp-port number
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | ISA RADIUS server authentication UDP port | |
Context | configure aaa radius isa-policy string servers server number purpose authentication udp-port number | |
Tree | udp-port | |
Range | 1 to 65535 | |
Default | 1812 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
coa
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Enable the coa context | |
Context | configure aaa radius isa-policy string servers server number purpose coa | |
Tree | coa | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
udp-port number
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | ISA RADIUS server change of authorization UDP port | |
Context | configure aaa radius isa-policy string servers server number purpose coa udp-port number | |
Tree | udp-port | |
Range | 1 to 65535 | |
Default | 3799 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
secret string
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | Secret key to access the RADIUS server | |
Context | configure aaa radius isa-policy string servers server number secret string | |
Tree | secret | |
String Length | 1 to 115 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
source-address-range string
Synopsis | Starting IP address of the IP address range | |
Context | configure aaa radius isa-policy string servers source-address-range string | |
Tree | source-address-range | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
timeout number
total-tries number
Synopsis | Maximum number of tries toward the same RADIUS server | |
Context | configure aaa radius isa-policy string servers total-tries number | |
Tree | total-tries | |
Range | 1 to 10 | |
Default | 3 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
user-name
Synopsis | Enter the user-name context | |
Context | configure aaa radius isa-policy string user-name | |
Tree | user-name | |
Description | Commands in this context define the format of the username field in the UE authentication request sent to the RADIUS server. For authentication of IPv6 triggers (ICMPv6, DHCPv6, IPv6 data-trigger) the username format will always fall back to MAC only. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
format keyword
mac-format keyword
Synopsis | MAC address format when contacting RADIUS server | |
Context | configure aaa radius isa-policy string user-name mac-format keyword | |
Tree | mac-format | |
Options | ||
Default | alu | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
l2tp-accounting-policy [name] string
Synopsis | Enter the l2tp-accounting-policy list instance | |
Context | configure aaa radius l2tp-accounting-policy string | |
Tree | l2tp-accounting-policy | |
Max. Instances | 32 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[name] string
Synopsis | L2TP RADIUS accounting policy name | |
Context | configure aaa radius l2tp-accounting-policy string | |
Tree | l2tp-accounting-policy | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
accounting-type
Synopsis | Enter the accounting-type context | |
Context | configure aaa radius l2tp-accounting-policy string accounting-type | |
Tree | accounting-type | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
session boolean
Synopsis | Enable per-session accounting | |
Context | configure aaa radius l2tp-accounting-policy string accounting-type session boolean | |
Tree | session | |
Default | true | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
tunnel boolean
Synopsis | Enable per-tunnel accounting | |
Context | configure aaa radius l2tp-accounting-policy string accounting-type tunnel boolean | |
Tree | tunnel | |
Default | true | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
acct-tunnel-connection-fmt string
Synopsis | Accounting tunnel connection ASCII specification | |
Context | configure aaa radius l2tp-accounting-policy string acct-tunnel-connection-fmt string | |
Tree | acct-tunnel-connection-fmt | |
String Length | 1 to 253 | |
Default | %n | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa radius l2tp-accounting-policy string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
include-radius-attribute
Synopsis | Enter the include-radius-attribute context | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute | |
Tree | include-radius-attribute | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
calling-station-id boolean
Synopsis | Include the Calling-Station-Id attribute | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute calling-station-id boolean | |
Tree | calling-station-id | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
nas-identifier boolean
Synopsis | Include the NAS-Identifier attribute | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-identifier boolean | |
Tree | nas-identifier | |
Default | false | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
nas-port
Synopsis | Enable the nas-port context | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port | |
Tree | nas-port | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
bit-spec string
Synopsis | RADIUS NAS-Port attribute | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port bit-spec string | |
Tree | bit-spec | |
String Length | 1 to 255 | |
Notes | This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
nas-port-id
Synopsis | Enable the nas-port-id context | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id | |
Tree | nas-port-id | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
prefix-string string
Synopsis | Prefix string added to RADIUS NAS-Port attribute | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id prefix-string string | |
Tree | prefix-string | |
String Length | 1 to 8 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
suffix keyword
Synopsis | NAS-Port-Id suffix type | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id suffix keyword | |
Tree | suffix | |
Options | ||
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
nas-port-type
Synopsis | Enable the nas-port-type context | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-type | |
Tree | nas-port-type | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
type (keyword | number)
Synopsis | Value for RADIUS NAS-Port-Type attribute | |
Context | configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-type type (keyword | number) | |
Tree | type | |
Range | 0 to 255 | |
Options | ||
Default | rfc-aligned | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
radius-server-policy reference
Synopsis | RADIUS server policy referenced | |
Context | configure aaa radius l2tp-accounting-policy string radius-server-policy reference | |
Tree | radius-server-policy | |
Reference | configure aaa radius server-policy string | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
route-downloader [name] string
Synopsis | Enter the route-downloader list instance | |
Context | configure aaa radius route-downloader string | |
Tree | route-downloader | |
Max. Instances | 1 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[name] string
Synopsis | RADIUS route downloader name | |
Context | configure aaa radius route-downloader string | |
Tree | route-downloader | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
admin-state keyword
Synopsis | Administrative state of this route downloader | |
Context | configure aaa radius route-downloader string admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
base-user-name string
Synopsis | Prefix of the username used as access requests | |
Context | configure aaa radius route-downloader string base-user-name string | |
Tree | base-user-name | |
Description | This command sets the prefix for the username that is used for access requests. The actual name used is a concatenation of this string, the “-” (dash) character and a monotonically increasing integer. | |
String Length | 1 to 32 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
default-metric number
Synopsis | Default metric that RTM imported routes acquire | |
Context | configure aaa radius route-downloader string default-metric number | |
Tree | default-metric | |
Range | 0 to 254 | |
Default | 2 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
default-tag number
Synopsis | Default tag of this route downloader | |
Context | configure aaa radius route-downloader string default-tag number | |
Tree | default-tag | |
Range | 0 to 4294967295 | |
Default | 0 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa radius route-downloader string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
download-interval number
Synopsis | Wait time between consecutive runs of the process | |
Context | configure aaa radius route-downloader string download-interval number | |
Tree | download-interval | |
Range | 1 to 1440 | |
Units | minutes | |
Default | 720 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
max-routes number
Synopsis | Maximum routes imported by this route downloader | |
Context | configure aaa radius route-downloader string max-routes number | |
Tree | max-routes | |
Range | 1 to 200000 | |
Default | 200000 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
password string
Synopsis | Route downloader password for RADIUS access requests | |
Context | configure aaa radius route-downloader string password string | |
Tree | password | |
String Length | 1 to 71 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
radius-server-policy reference
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
Synopsis | RADIUS server policy referenced | |
Context | configure aaa radius route-downloader string radius-server-policy reference | |
Tree | radius-server-policy | |
Reference | configure aaa radius server-policy string | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
retry-interval
Synopsis | Enter the retry-interval context | |
Context | configure aaa radius route-downloader string retry-interval | |
Tree | retry-interval | |
Description | Commands in this context configure parameters of the retry interval timer, which is an exponential backoff timer. The system retries sending an Access Request message after the previous message was unanswered (for example, a RADIUS failure or ICMP port unreachable error). | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
max number
Synopsis | Maximum duration of the retry interval | |
Context | configure aaa radius route-downloader string retry-interval max number | |
Tree | max | |
Range | 1 to 1440 | |
Units | minutes | |
Default | 20 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
min number
Synopsis | Minimum duration of the retry interval | |
Context | configure aaa radius route-downloader string retry-interval min number | |
Tree | min | |
Description | This command specifies the minimum duration of the retry interval. This duration grows exponentially after each sequential failure. | |
Range | 1 to 1440 | |
Units | minutes | |
Default | 10 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
server-policy [name] string
Synopsis | Enter the server-policy list instance | |
Context | configure aaa radius server-policy string | |
Tree | server-policy | |
Max. Instances | 32 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[name] string
Synopsis | RADIUS server policy name | |
Context | configure aaa radius server-policy string | |
Tree | server-policy | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
acct-on-off
Synopsis | Enable the acct-on-off context | |
Context | configure aaa radius server-policy string acct-on-off | |
Tree | acct-on-off | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
monitor reference
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Accounting on/off group name | |
Context | configure aaa radius server-policy string acct-on-off monitor reference | |
Tree | monitor | |
Reference | configure aaa radius acct-on-off-group string | |
Notes | The following elements are part of a choice: monitor or oper-state-change. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
oper-state-change
Synopsis | Enable the oper-state-change context | |
Context | configure aaa radius server-policy string acct-on-off oper-state-change | |
Tree | oper-state-change | |
Notes | The following elements are part of a choice: monitor or oper-state-change. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
group reference
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
Synopsis | Operational state for a group | |
Context | configure aaa radius server-policy string acct-on-off oper-state-change group reference | |
Tree | group | |
Reference | configure aaa radius acct-on-off-group string | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa radius server-policy string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
python-policy reference
Synopsis | Python policy for RADIUS packets to/from RADIUS servers | |
Context | configure aaa radius server-policy string python-policy reference | |
Tree | python-policy | |
Reference | configure python python-policy string | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
servers
Synopsis | Enter the servers context | |
Context | configure aaa radius server-policy string servers | |
Tree | servers | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
access-algorithm keyword
Synopsis | Algorithm to select a RADIUS server from the pool | |
Context | configure aaa radius server-policy string servers access-algorithm keyword | |
Tree | access-algorithm | |
Options | ||
Default | direct | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
buffering
acct-interim
Synopsis | Enable the acct-interim context | |
Context | configure aaa radius server-policy string servers buffering acct-interim | |
Tree | acct-interim | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
lifetime number
Synopsis | Time accounting message can be in retransmission buffer | |
Context | configure aaa radius server-policy string servers buffering acct-interim lifetime number | |
Tree | lifetime | |
Range | 1 to 25 | |
Units | hours | |
Notes |
This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
max number
Synopsis | Maximum time between accounting message resend attempts | |
Context | configure aaa radius server-policy string servers buffering acct-interim max number | |
Tree | max | |
Range | 1 to 3600 | |
Units | seconds | |
Notes |
This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
min number
Synopsis | Minimum time between accounting message resend attempts | |
Context | configure aaa radius server-policy string servers buffering acct-interim min number | |
Tree | min | |
Range | 1 to 3600 | |
Units | seconds | |
Notes |
This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
acct-start
Synopsis | Enable the acct-start context | |
Context | configure aaa radius server-policy string servers buffering acct-start | |
Tree | acct-start | |
Introduced | 20.7.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
lifetime number
Synopsis | Time accounting message can be in retransmission buffer | |
Context | configure aaa radius server-policy string servers buffering acct-start lifetime number | |
Tree | lifetime | |
Range | 1 to 25 | |
Units | hours | |
Notes |
This element is mandatory. | |
Introduced | 20.7.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
max number
Synopsis | Maximum time between accounting message resend attempts | |
Context | configure aaa radius server-policy string servers buffering acct-start max number | |
Tree | max | |
Range | 1 to 3600 | |
Units | seconds | |
Notes |
This element is mandatory. | |
Introduced | 20.7.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
min number
Synopsis | Minimum time between accounting message resend attempts | |
Context | configure aaa radius server-policy string servers buffering acct-start min number | |
Tree | min | |
Range | 1 to 3600 | |
Units | seconds | |
Notes |
This element is mandatory. | |
Introduced | 20.7.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
acct-stop
lifetime number
Synopsis | Time accounting message can be in retransmission buffer | |
Context | configure aaa radius server-policy string servers buffering acct-stop lifetime number | |
Tree | lifetime | |
Range | 1 to 25 | |
Units | hours | |
Notes |
This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
max number
Synopsis | Maximum time between accounting message resend attempts | |
Context | configure aaa radius server-policy string servers buffering acct-stop max number | |
Tree | max | |
Range | 1 to 3600 | |
Units | seconds | |
Notes |
This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
min number
Synopsis | Minimum time between accounting message resend attempts | |
Context | configure aaa radius server-policy string servers buffering acct-stop min number | |
Tree | min | |
Range | 1 to 3600 | |
Units | seconds | |
Notes |
This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
health-check
Synopsis | Enter the health-check context | |
Context | configure aaa radius server-policy string servers health-check | |
Tree | health-check | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
down-timeout number
Synopsis | Wait time before declaring RADIUS server out-of-service | |
Context | configure aaa radius server-policy string servers health-check down-timeout number | |
Tree | down-timeout | |
Range | 1 to 340 | |
Units | seconds | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
test-account
Synopsis | Enter the test-account context | |
Context | configure aaa radius server-policy string servers health-check test-account | |
Tree | test-account | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
admin-state keyword
Synopsis | Administrative state of the health check | |
Context | configure aaa radius server-policy string servers health-check test-account admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
interval number
Synopsis | Time for test account to check health of RADIUS servers | |
Context | configure aaa radius server-policy string servers health-check test-account interval number | |
Tree | interval | |
Range | 1 to 60 | |
Units | seconds | |
Default | 3 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
password string
Synopsis | Test account password for RADIUS server health check | |
Context | configure aaa radius server-policy string servers health-check test-account password string | |
Tree | password | |
String Length | 1 to 115 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
user-name string
Synopsis | Username to send access requests to probe RADIUS server | |
Context | configure aaa radius server-policy string servers health-check test-account user-name string | |
Tree | user-name | |
String Length | 1 to 64 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
hold-down-time number
Synopsis | Hold time before reusing a RADIUS server that was down | |
Context | configure aaa radius server-policy string servers hold-down-time number | |
Tree | hold-down-time | |
Range | 30 to 86400 | |
Units | seconds | |
Default | 30 | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
ipv6-source-address string
Synopsis | Source address for IPv6 RADIUS datagrams | |
Context | configure aaa radius server-policy string servers ipv6-source-address string | |
Tree | ipv6-source-address | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
retry-count number
Synopsis | Number of retries for contacting the RADIUS server | |
Context | configure aaa radius server-policy string servers retry-count number | |
Tree | retry-count | |
Range | 1 to 256 | |
Default | 3 | |
Introduced | 16.0.R4 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
router-instance string
Synopsis | RADIUS routing instance | |
Context | configure aaa radius server-policy string servers router-instance string | |
Tree | router-instance | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
server [server-index] number
[server-index] number
server-name string
Synopsis | RADIUS server name | |
Context | configure aaa radius server-policy string servers server number server-name string | |
Tree | server-name | |
String Length | 1 to 32 | |
Notes | This element is mandatory. | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
source-address string
Synopsis | Source address of RADIUS messages | |
Context | configure aaa radius server-policy string servers source-address string | |
Tree | source-address | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
stickiness boolean
Synopsis | Allow stickiness in a multi-server application | |
Context | configure aaa radius server-policy string servers stickiness boolean | |
Tree | stickiness | |
Default | true | |
Introduced | 16.0.R4 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
timeout number
wpp
portal-group [group-name] string
Synopsis | Enter the portal-group list instance | |
Context | configure aaa wpp portal-group string | |
Tree | portal-group | |
Introduced | 16.0.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
[group-name] string
Synopsis | Portal group name | |
Context | configure aaa wpp portal-group string | |
Tree | portal-group | |
String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
Introduced | 16.0.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
admin-state keyword
Synopsis | Administrative state of the portal group | |
Context | configure aaa wpp portal-group string admin-state keyword | |
Tree | admin-state | |
Options | ||
Default | disable | |
Introduced | 16.0.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
description string
Synopsis | Text description | |
Context | configure aaa wpp portal-group string description string | |
Tree | description | |
String Length | 1 to 80 | |
Introduced | 16.0.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
portal [router-instance] string name string
[router-instance] string
name string
system-name string
Synopsis | System name used in WPP protocol messages | |
Context | configure aaa wpp system-name string | |
Tree | system-name | |
String Length | 1 to 16 | |
Introduced | 16.0.R6 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |