aaa commands

configure 
   —  aaa 
      —  apply-groups reference
      —  apply-groups-exclude reference
      —  diameter 
         —  node string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  connection 
               —  ipv4 
                  —  allow-connections boolean
                  —  local-address string
               —  ipv6 
                  —  allow-connections boolean
                  —  local-address string
               —  timer number
            —  description string
            —  origin-realm string
            —  peer index number 
               —  address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  connection-timer number
               —  default-peer boolean
               —  destination-host string
               —  preference number
               —  route index number 
                  —  application keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  preference number
                  —  realm string
               —  watchdog-timer number
            —  python-policy reference
            —  router-instance string
      —  radius 
         —  acct-on-off-group string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
         —  coa-port number
         —  isa-policy string 
            —  accounting 
               —  include-attributes 
                  —  acct-delay-time boolean
                  —  acct-triggered-reason boolean
                  —  called-station-id boolean
                  —  calling-station-id boolean
                  —  circuit-id boolean
                  —  class boolean
                  —  credit-control-quota boolean
                  —  dhcp-options boolean
                  —  dhcp-vendor-class-id boolean
                  —  frame-counters boolean
                  —  framed-ip-address boolean
                  —  framed-ip-netmask boolean
                  —  framed-ipv6-prefix boolean
                  —  hardware-timestamp boolean
                  —  ipv6-address boolean
                  —  mac-address boolean
                  —  millisecond-event-timestamp boolean
                  —  multi-session-id boolean
                  —  nas-identifier boolean
                  —  nas-ip-address boolean
                  —  nas-ipv6-address boolean
                  —  nas-port boolean
                  —  nas-port-id boolean
                  —  nas-port-type boolean
                  —  nat-inside-service-id boolean
                  —  nat-outside-ip-address boolean
                  —  nat-outside-service-id boolean
                  —  nat-port-forward-logging boolean
                  —  nat-port-range-block boolean
                  —  nat-subscriber-string boolean
                  —  octet-counters boolean
                  —  proxied-subscriber-data boolean
                  —  release-reason boolean
                  —  remote-id boolean
                  —  rssi boolean
                  —  session-time boolean
                  —  subscriber-id boolean
                  —  toserver-dhcp6-options boolean
                  —  ue-creation-type boolean
                  —  user-name boolean
                  —  wlan-custom-user-group boolean
                  —  wlan-ssid-vlan boolean
                  —  xconnect-tunnel-home-address boolean
                  —  xconnect-tunnel-local-ipv6-address boolean
                  —  xconnect-tunnel-remote-ipv6-address boolean
                  —  xconnect-tunnel-service boolean
                  —  xconnect-tunnel-type boolean
               —  nat-periodic-update 
                  —  interval number
                  —  rate-limit (number | keyword)
               —  update-triggers 
                  —  address-state boolean
                  —  soft-quota-exhausted boolean
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authentication 
               —  include-attributes 
                  —  called-station-id boolean
                  —  calling-station-id boolean
                  —  circuit-id boolean
                  —  dhcp-vendor-class-id boolean
                  —  framed-ip-address boolean
                  —  ipv6-address boolean
                  —  mac-address boolean
                  —  nas-identifier boolean
                  —  nas-ip-address boolean
                  —  nas-ipv6-address boolean
                  —  nas-port boolean
                  —  nas-port-id boolean
                  —  nas-port-type boolean
                  —  remote-id boolean
                  —  toserver-dhcp-options boolean
                  —  toserver-dhcp6-options boolean
                  —  wlan-ssid-vlan boolean
                  —  xconnect-tunnel-home-address boolean
            —  description string
            —  nas-ip-address-origin keyword
            —  password string
            —  python-policy reference
            —  servers 
               —  access-algorithm keyword
               —  ipv6 
                  —  mtu number
                  —  source-prefix string
               —  router-instance string
               —  server number 
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  purpose 
                     —  accounting 
                        —  udp-port number
                     —  authentication 
                        —  udp-port number
                     —  coa 
                        —  udp-port number
                  —  secret string
               —  source-address-range string
               —  timeout number
               —  total-tries number
            —  user-name 
               —  format keyword
               —  mac-format keyword
         —  l2tp-accounting-policy string 
            —  accounting-type 
               —  session boolean
               —  tunnel boolean
            —  acct-tunnel-connection-fmt string
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  include-radius-attribute 
               —  calling-station-id boolean
               —  nas-identifier boolean
               —  nas-port 
                  —  bit-spec string
               —  nas-port-id 
                  —  prefix-string string
                  —  suffix keyword
               —  nas-port-type 
                  —  type (keyword | number)
            —  radius-server-policy reference
         —  route-downloader string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  base-user-name string
            —  default-metric number
            —  default-tag number
            —  description string
            —  download-interval number
            —  max-routes number
            —  password string
            —  radius-server-policy reference
            —  retry-interval 
               —  max number
               —  min number
         —  server-policy string 
            —  acct-on-off 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  monitor reference
               —  oper-state-change 
                  —  group reference
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  python-policy reference
            —  servers 
               —  access-algorithm keyword
               —  buffering 
                  —  acct-interim 
                     —  lifetime number
                     —  max number
                     —  min number
                  —  acct-start 
                     —  lifetime number
                     —  max number
                     —  min number
                  —  acct-stop 
                     —  lifetime number
                     —  max number
                     —  min number
               —  health-check 
                  —  down-timeout number
                  —  test-account 
                     —  admin-state keyword
                     —  interval number
                     —  password string
                     —  user-name string
               —  hold-down-time number
               —  ipv6-source-address string
               —  retry-count number
               —  router-instance string
               —  server number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  server-name string
               —  source-address string
               —  stickiness boolean
               —  timeout number
      —  wpp 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  portal-group string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  portal string name string 
         —  system-name string

aaa command descriptions

aaa


	Synopsis	Enter the aaa context
	Context	configure aaa
	Tree	aaa
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter


	Synopsis	Enter the diameter context
	Context	configure aaa diameter
	Tree	diameter
	Description	Commands in this context configure Diameter Base parameters.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

node [origin-host] string


	Synopsis	Enter the node list instance
	Context	configure aaa diameter node string
	Tree	node
	Max. Instances	32
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[origin-host] string


	Synopsis	Origin-Host AVP
	Context	configure aaa diameter node string
	Tree	node
	String Length	1 to 80
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

connection


	Synopsis	Enter the connection context
	Context	configure aaa diameter node string connection
	Tree	connection
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

ipv4


	Synopsis	Enter the ipv4 context
	Context	configure aaa diameter node string connection ipv4
	Tree	ipv4
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

allow-connections boolean


	Synopsis	Listen on local address for incoming peer connections
	Context	configure aaa diameter node string connection ipv4 allow-connections boolean
	Tree	allow-connections
	Description	When configured to true, this command is used in multi-chassis redundancy where the local Diameter node accepts connection from the inter-chassis peer. The peer requesting the connection must have the same Diameter name as the local peer and its source address must match the IP address of the locally configured destination peer. The IPv4 address on which the node listens for incoming connection is the configured source address of the local peer. This source IPv4 address can reference any local interface, including loopbacks. When configured to false, incoming requests for connections are refused.
	Default	false
	Introduced	19.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

local-address string


	Synopsis	IPv4 source address for the TCP peer connection
	Context	configure aaa diameter node string connection ipv4 local-address string
	Tree	local-address
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

ipv6


	Synopsis	Enter the ipv6 context
	Context	configure aaa diameter node string connection ipv6
	Tree	ipv6
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

allow-connections boolean


	Synopsis	Listen on local address for incoming peer connections
	Context	configure aaa diameter node string connection ipv6 allow-connections boolean
	Tree	allow-connections
	Default	false
	Introduced	19.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

local-address string


	Synopsis	IPv6 source address for the TCP peer connection
	Context	configure aaa diameter node string connection ipv6 local-address string
	Tree	local-address
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

timer number


	Synopsis	Wait time before attempting reconnection to peer
	Context	configure aaa diameter node string connection timer number
	Tree	timer
	Description	This command configures the time the system waits before attempting to reconnect to a peer after the connection is lost.
	Range	1 to 1000
	Units	seconds
	Default	30
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa diameter node string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

origin-realm string


WARNING: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Origin-realm name
	Context	configure aaa diameter node string origin-realm string
	Tree	origin-realm
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

peer index number


	Synopsis	Enter the peer list instance
	Context	configure aaa diameter node string peer index number
	Tree	peer
	Max. Instances	5
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

index number


	Synopsis	Index of a peer within the node
	Context	configure aaa diameter node string peer index number
	Tree	peer
	Range	1 to 5
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)


	Synopsis	Diameter peer address
	Context	configure aaa diameter node string peer index number address (ipv4-address-no-zone \| ipv6-address-no-zone)
	Tree	address
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword


	Synopsis	Administrative state of the Diameter peer
	Context	configure aaa diameter node string peer index number admin-state keyword
	Tree	admin-state
	Options	enable, disable
	Default	disable
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

connection-timer number


	Synopsis	Wait time before attempting reconnection to peer
	Context	configure aaa diameter node string peer index number connection-timer number
	Tree	connection-timer
	Range	1 to 1000
	Units	seconds
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-peer boolean


	Synopsis	Use the peer as default route for realm-based routing
	Context	configure aaa diameter node string peer index number default-peer boolean
	Tree	default-peer
	Default	false
	Introduced	19.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

destination-host string


WARNING: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Destination-Host AVP string for Diameter messages
	Context	configure aaa diameter node string peer index number destination-host string
	Tree	destination-host
	String Length	1 to 80
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

preference number


	Synopsis	Diameter routing preference for a peer
	Context	configure aaa diameter node string peer index number preference number
	Tree	preference
	Range	1 to 100
	Default	50
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

route index number


	Synopsis	Enter the route list instance
	Context	configure aaa diameter node string peer index number route index number
	Tree	route
	Max. Instances	15
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

index number


	Synopsis	Static Diameter route ID
	Context	configure aaa diameter node string peer index number route index number
	Tree	route
	Description	This command configures the ID of the static route used to reach remote realms that are not directly connected to the origin realm. The route can also be used to override the route preference (peer preference) of the directly-connected realms.
	Range	1 to 15
	Notes	This element is part of a list key.
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

application keyword


WARNING: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Diameter application to which the route applies
	Context	configure aaa diameter node string peer index number route index number application keyword
	Tree	application
	Description	This command specifies the Diameter application in the destination realm reachable via the static route.
	Options	nasreq, gy, gx
	Notes	This element is mandatory.
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

preference number


	Synopsis	Static route preference; lower value is preferred
	Context	configure aaa diameter node string peer index number route index number preference number
	Tree	preference
	Description	This command configures the preference of the static route. The preference is compared with the preference values of all other static and dynamic routes. The dynamic route is a realm route learned directly from the peer via the Capabilities Exchange process during the peer negotiation phase. The preference value of the dynamic route is configured directly under the peer configuration. A lower preference value is preferred for route selection.
	Range	1 to 100
	Default	50
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

realm string


WARNING: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Destination realm reachable via the static route
	Context	configure aaa diameter node string peer index number route index number realm string
	Tree	realm
	String Length	1 to 80
	Notes	This element is mandatory.
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

watchdog-timer number


	Synopsis	Time between consecutive watchdog messages
	Context	configure aaa diameter node string peer index number watchdog-timer number
	Tree	watchdog-timer
	Range	1 to 1000
	Units	seconds
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

python-policy reference


	Synopsis	Python policy for received or sent Diameter messages
	Context	configure aaa diameter node string python-policy reference
	Tree	python-policy
	Reference	configure python python-policy string
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

router-instance string


	Synopsis	Router in which this node connects to its peers
	Context	configure aaa diameter node string router-instance string
	Tree	router-instance
	Default	Base
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

radius


	Synopsis	Enter the radius context
	Context	configure aaa radius
	Tree	radius
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

acct-on-off-group [name] string


	Synopsis	Enter the acct-on-off-group list instance
	Context	configure aaa radius acct-on-off-group string
	Tree	acct-on-off-group
	Max. Instances	32
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[name] string


	Synopsis	Group name for accounting on/off
	Context	configure aaa radius acct-on-off-group string
	Tree	acct-on-off-group
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa radius acct-on-off-group string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

coa-port number


	Synopsis	RADIUS listening port for CoA and Disconnect messages
	Context	configure aaa radius coa-port number
	Tree	coa-port
	Range	1647 \| 1700 \| 1812 \| 3799
	Default	3799
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

isa-policy [name] string


	Synopsis	Enter the isa-policy list instance
	Context	configure aaa radius isa-policy string
	Tree	isa-policy
	Max. Instances	8
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[name] string


	Synopsis	ISA RADIUS policy name referenced by a NAT application
	Context	configure aaa radius isa-policy string
	Tree	isa-policy
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting


	Synopsis	Enter the accounting context
	Context	configure aaa radius isa-policy string accounting
	Tree	accounting
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

include-attributes


	Synopsis	Enter the include-attributes context
	Context	configure aaa radius isa-policy string accounting include-attributes
	Tree	include-attributes
	Description	Commands in this context specify the attributes to include in the RADIUS accounting messages.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

acct-delay-time boolean


	Synopsis	Include the accounting delay time attribute
	Context	configure aaa radius isa-policy string accounting include-attributes acct-delay-time boolean
	Tree	acct-delay-time
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

acct-triggered-reason boolean


	Synopsis	Include the accounting triggered reason attribute
	Context	configure aaa radius isa-policy string accounting include-attributes acct-triggered-reason boolean
	Tree	acct-triggered-reason
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

called-station-id boolean


	Synopsis	Include the Called-Station-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes called-station-id boolean
	Tree	called-station-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

calling-station-id boolean


	Synopsis	Include the Calling-Station-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes calling-station-id boolean
	Tree	calling-station-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

circuit-id boolean


	Synopsis	Include the Agent-Circuit-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes circuit-id boolean
	Tree	circuit-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

class boolean


	Synopsis	Include the Class attribute
	Context	configure aaa radius isa-policy string accounting include-attributes class boolean
	Tree	class
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

credit-control-quota boolean


	Synopsis	Add unconsumed volume quota to Credit-Control-Quota
	Context	configure aaa radius isa-policy string accounting include-attributes credit-control-quota boolean
	Tree	credit-control-quota
	Default	false
	Introduced	21.7.R1
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp-options boolean


	Synopsis	Include the Alc-ToServer-Dhcp-Options attribute
	Context	configure aaa radius isa-policy string accounting include-attributes dhcp-options boolean
	Tree	dhcp-options
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp-vendor-class-id boolean


	Synopsis	Include the Alc-Dhcp-Vendor-Class-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes dhcp-vendor-class-id boolean
	Tree	dhcp-vendor-class-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

frame-counters boolean


	Synopsis	Include Acct-Input-Packets and Acct-Output-Packets
	Context	configure aaa radius isa-policy string accounting include-attributes frame-counters boolean
	Tree	frame-counters
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

framed-ip-address boolean


	Synopsis	Include the Framed-IP-Address attribute
	Context	configure aaa radius isa-policy string accounting include-attributes framed-ip-address boolean
	Tree	framed-ip-address
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

framed-ip-netmask boolean


	Synopsis	Include the Framed-IP-Netmask attribute
	Context	configure aaa radius isa-policy string accounting include-attributes framed-ip-netmask boolean
	Tree	framed-ip-netmask
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

framed-ipv6-prefix boolean


	Synopsis	Include the Framed-IPv6-Prefix attribute
	Context	configure aaa radius isa-policy string accounting include-attributes framed-ipv6-prefix boolean
	Tree	framed-ipv6-prefix
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

hardware-timestamp boolean


	Synopsis	Include the Event-Timestamp attribute
	Context	configure aaa radius isa-policy string accounting include-attributes hardware-timestamp boolean
	Tree	hardware-timestamp
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ipv6-address boolean


	Synopsis	Include the Alc-Ipv6-Address attribute
	Context	configure aaa radius isa-policy string accounting include-attributes ipv6-address boolean
	Tree	ipv6-address
	Description	When configured to true, the IA_NA address of the UE is included in the accounting message if an active IA_NA lease exists. When configured to false, the address is not included.
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

mac-address boolean


	Synopsis	Include the Alc-Client-Hardware-Addr attribute
	Context	configure aaa radius isa-policy string accounting include-attributes mac-address boolean
	Tree	mac-address
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

millisecond-event-timestamp boolean


	Synopsis	Include the Alc-Millisecond-Event-Timestamp attribute
	Context	configure aaa radius isa-policy string accounting include-attributes millisecond-event-timestamp boolean
	Tree	millisecond-event-timestamp
	Description	When configured to true, the router includes the Alc-Millisecond-Event-Timestamp attribute in the accounting message. This attribute includes the time the accounting event was logged in milliseconds since Jan 1, 1970 00:00:00 UTC. When configured to false, the router does not include this attribute.
	Default	false
	Introduced	20.10.R1
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

multi-session-id boolean


	Synopsis	Include the Acct-Multi-Session-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes multi-session-id boolean
	Tree	multi-session-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-identifier boolean


	Synopsis	Include the NAS-Identifier attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nas-identifier boolean
	Tree	nas-identifier
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-ip-address boolean


	Synopsis	Include the NAS-IP-Address attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nas-ip-address boolean
	Tree	nas-ip-address
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-ipv6-address boolean


	Synopsis	Include the NAS-IPv6-Address attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nas-ipv6-address boolean
	Tree	nas-ipv6-address
	Description	When configured to true, the router includes the NAS-IPv6-Address attribute in RADIUS accounting messages using the address specified in the configure aaa radius isa-policy nas-ip-address-origin command. The NAS-IPv6-Address attribute is included in both IPv4 and IPv6 RADIUS connections. When configured to false, the router does not include the NAS-IPv6-Address attribute in RADIUS accounting messages.
	Default	false
	Introduced	22.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-port boolean


	Synopsis	Include the NAS-Port attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nas-port boolean
	Tree	nas-port
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-port-id boolean


	Synopsis	Include the NAS-Port-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nas-port-id boolean
	Tree	nas-port-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-port-type boolean


	Synopsis	Include the NAS-Port-Type attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nas-port-type boolean
	Tree	nas-port-type
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-inside-service-id boolean


	Synopsis	Include NAT inside service ID in Alc-Serv-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nat-inside-service-id boolean
	Tree	nat-inside-service-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-outside-ip-address boolean


	Synopsis	Include the Alc-Nat-Outside-Ip-Addr attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nat-outside-ip-address boolean
	Tree	nat-outside-ip-address
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-outside-service-id boolean


	Synopsis	Include NAT outside service ID in Alc-Serv-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nat-outside-service-id boolean
	Tree	nat-outside-service-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-port-forward-logging boolean


	Synopsis	Enable logging of port forwards via RADIUS
	Context	configure aaa radius isa-policy string accounting include-attributes nat-port-forward-logging boolean
	Tree	nat-port-forward-logging
	Description	When configured to true, the router enables static or PCP port-forward logging via RADIUS. Port-forward logging is supported only in conjunction with the logging of port blocks. When configured to false, the router disables static or PCP port-forward logging.
	Default	false
	Introduced	24.3.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-port-range-block boolean


	Synopsis	Include the Alc-Nat-Port-Range attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nat-port-range-block boolean
	Tree	nat-port-range-block
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-subscriber-string boolean


	Synopsis	Include the Alc-Subsc-ID-Str attribute
	Context	configure aaa radius isa-policy string accounting include-attributes nat-subscriber-string boolean
	Tree	nat-subscriber-string
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

octet-counters boolean


	Synopsis	Include Acct-Input-Octets and Acct-Output-Octets
	Context	configure aaa radius isa-policy string accounting include-attributes octet-counters boolean
	Tree	octet-counters
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

proxied-subscriber-data boolean


	Synopsis	Include subscriber data as RADIUS attributes
	Context	configure aaa radius isa-policy string accounting include-attributes proxied-subscriber-data boolean
	Tree	proxied-subscriber-data
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

release-reason boolean


	Synopsis	Include reason in the Acct-Terminate-Cause attribute
	Context	configure aaa radius isa-policy string accounting include-attributes release-reason boolean
	Tree	release-reason
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

remote-id boolean


	Synopsis	Include the Agent-Remote-Id attribute
	Context	configure aaa radius isa-policy string accounting include-attributes remote-id boolean
	Tree	remote-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rssi boolean


	Synopsis	Include the Alc-RSSI attribute
	Context	configure aaa radius isa-policy string accounting include-attributes rssi boolean
	Tree	rssi
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-time boolean


	Synopsis	Include the Acct-Session-Time attribute
	Context	configure aaa radius isa-policy string accounting include-attributes session-time boolean
	Tree	session-time
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

subscriber-id boolean


	Synopsis	Include the Alc-Subsc-ID-Str attribute
	Context	configure aaa radius isa-policy string accounting include-attributes subscriber-id boolean
	Tree	subscriber-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

toserver-dhcp6-options boolean


	Synopsis	Include the Alc-ToServer-Dhcp6-Options attribute
	Context	configure aaa radius isa-policy string accounting include-attributes toserver-dhcp6-options boolean
	Tree	toserver-dhcp6-options
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

ue-creation-type boolean


	Synopsis	Include the Alc-Wlan-Ue-Creation-Type attribute
	Context	configure aaa radius isa-policy string accounting include-attributes ue-creation-type boolean
	Tree	ue-creation-type
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

user-name boolean


	Synopsis	Include the User-Name attribute
	Context	configure aaa radius isa-policy string accounting include-attributes user-name boolean
	Tree	user-name
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

wlan-custom-user-group boolean


	Synopsis	Include the Wlan-Custom-User-Group attribute
	Context	configure aaa radius isa-policy string accounting include-attributes wlan-custom-user-group boolean
	Tree	wlan-custom-user-group
	Description	When configured to true, the router includes the Alc-Wlan-Custom-User-Group attribute in the RADIUS accounting messages.
	Default	false
	Introduced	24.3.R1
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

wlan-ssid-vlan boolean


	Synopsis	Include per-SSID VLAN in Alc-Wlan-SSID-VLAN attribute
	Context	configure aaa radius isa-policy string accounting include-attributes wlan-ssid-vlan boolean
	Tree	wlan-ssid-vlan
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

xconnect-tunnel-home-address boolean


	Synopsis	Include the Alc-Xconnect-Tunnel-Home-Ipv6 attribute
	Context	configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-home-address boolean
	Tree	xconnect-tunnel-home-address
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

xconnect-tunnel-local-ipv6-address boolean


	Synopsis	Include the Alc-Xconnect-Tunnel-Local-Ipv6 attribute
	Context	configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-local-ipv6-address boolean
	Tree	xconnect-tunnel-local-ipv6-address
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

xconnect-tunnel-remote-ipv6-address boolean


	Synopsis	Include the Alc-Xconnect-Tunnel-Remote-Ipv6 attribute
	Context	configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-remote-ipv6-address boolean
	Tree	xconnect-tunnel-remote-ipv6-address
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

xconnect-tunnel-service boolean


	Synopsis	Include the Alc-Xconnect-Tunnel-Service attribute
	Context	configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-service boolean
	Tree	xconnect-tunnel-service
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

xconnect-tunnel-type boolean


	Synopsis	Include the Alc-Xconnect-Tunnel-Type attribute
	Context	configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-type boolean
	Tree	xconnect-tunnel-type
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

nat-periodic-update


	Synopsis	Enter the nat-periodic-update context
	Context	configure aaa radius isa-policy string accounting nat-periodic-update
	Tree	nat-periodic-update
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

interval number


	Synopsis	Interval for periodic RADIUS Interim-Update messages
	Context	configure aaa radius isa-policy string accounting nat-periodic-update interval number
	Tree	interval
	Range	1 to 72
	Units	hours
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-limit (number | keyword)


	Synopsis	Rate limit for periodic RADIUS Interim-Update messages
	Context	configure aaa radius isa-policy string accounting nat-periodic-update rate-limit (number \| keyword)
	Tree	rate-limit
	Range	1 to 100000
	Units	packets per second
	Options	unlimited
	Default	unlimited
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

update-triggers


	Synopsis	Enter the update-triggers context
	Context	configure aaa radius isa-policy string accounting update-triggers
	Tree	update-triggers
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

address-state boolean


	Synopsis	Send an Interim-Update when address allocated or freed
	Context	configure aaa radius isa-policy string accounting update-triggers address-state boolean
	Tree	address-state
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

soft-quota-exhausted boolean


	Synopsis	Send interim update when soft volume quota is reached
	Context	configure aaa radius isa-policy string accounting update-triggers soft-quota-exhausted boolean
	Tree	soft-quota-exhausted
	Default	false
	Introduced	21.7.R1
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

authentication


	Synopsis	Enter the authentication context
	Context	configure aaa radius isa-policy string authentication
	Tree	authentication
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

include-attributes


	Synopsis	Enter the include-attributes context
	Context	configure aaa radius isa-policy string authentication include-attributes
	Tree	include-attributes
	Description	Commands in this context specify the attributes to include in the RADIUS authentication messages.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

called-station-id boolean


	Synopsis	Include the Called-Station-Id attribute
	Context	configure aaa radius isa-policy string authentication include-attributes called-station-id boolean
	Tree	called-station-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

calling-station-id boolean


	Synopsis	Include the Calling-Station-Id attribute
	Context	configure aaa radius isa-policy string authentication include-attributes calling-station-id boolean
	Tree	calling-station-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

circuit-id boolean


	Synopsis	Include the Agent-Circuit-Id attribute
	Context	configure aaa radius isa-policy string authentication include-attributes circuit-id boolean
	Tree	circuit-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp-vendor-class-id boolean


	Synopsis	Include the Alc-DHCP-Vendor-Class-Id attribute
	Context	configure aaa radius isa-policy string authentication include-attributes dhcp-vendor-class-id boolean
	Tree	dhcp-vendor-class-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

framed-ip-address boolean


	Synopsis	Include the Framed-IP-Address attribute
	Context	configure aaa radius isa-policy string authentication include-attributes framed-ip-address boolean
	Tree	framed-ip-address
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ipv6-address boolean


	Synopsis	Include the Alc-IPv6-address attribute
	Context	configure aaa radius isa-policy string authentication include-attributes ipv6-address boolean
	Tree	ipv6-address
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

mac-address boolean


	Synopsis	Include the Alc-Client-Hardware-Addr attribute
	Context	configure aaa radius isa-policy string authentication include-attributes mac-address boolean
	Tree	mac-address
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-identifier boolean


	Synopsis	Include the NAS-Identifier attribute
	Context	configure aaa radius isa-policy string authentication include-attributes nas-identifier boolean
	Tree	nas-identifier
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-ip-address boolean


	Synopsis	Include the NAS-IP-Address attribute
	Context	configure aaa radius isa-policy string authentication include-attributes nas-ip-address boolean
	Tree	nas-ip-address
	Default	true
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-ipv6-address boolean


	Synopsis	Include the NAS-IPv6-Address attribute
	Context	configure aaa radius isa-policy string authentication include-attributes nas-ipv6-address boolean
	Tree	nas-ipv6-address
	Description	When configured to true, the router includes the NAS-IPv6-Address attribute in RADIUS authentication messages using the address specified in the configure aaa radius isa-policy nas-ip-address-origin command. The NAS-IPv6-Address attribute is included in both IPv4 and IPv6 RADIUS connections. When configured to false, the router does not include the NAS-IPv6-Address attribute in RADIUS authentication messages.
	Introduced	22.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-port boolean


	Synopsis	Include the NAS-Port attribute
	Context	configure aaa radius isa-policy string authentication include-attributes nas-port boolean
	Tree	nas-port
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-port-id boolean


	Synopsis	Include the NAS-Port-Id attribute
	Context	configure aaa radius isa-policy string authentication include-attributes nas-port-id boolean
	Tree	nas-port-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-port-type boolean


	Synopsis	Include the NAS-Port-Type attribute
	Context	configure aaa radius isa-policy string authentication include-attributes nas-port-type boolean
	Tree	nas-port-type
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

remote-id boolean


	Synopsis	Include the Agent-Remote-Id attribute
	Context	configure aaa radius isa-policy string authentication include-attributes remote-id boolean
	Tree	remote-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

toserver-dhcp-options boolean


	Synopsis	Include the Alc-ToServer-Dhcp-Options attribute
	Context	configure aaa radius isa-policy string authentication include-attributes toserver-dhcp-options boolean
	Tree	toserver-dhcp-options
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

toserver-dhcp6-options boolean


	Synopsis	Include the Alc-ToServer-Dhcp6-Options attribute
	Context	configure aaa radius isa-policy string authentication include-attributes toserver-dhcp6-options boolean
	Tree	toserver-dhcp6-options
	Default	false
	Introduced	16.0.R4
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

wlan-ssid-vlan boolean


	Synopsis	Include per-SSID VLAN in Alc-Wlan-SSID-VLAN attribute
	Context	configure aaa radius isa-policy string authentication include-attributes wlan-ssid-vlan boolean
	Tree	wlan-ssid-vlan
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

xconnect-tunnel-home-address boolean


	Synopsis	Include the Alc-Xconnect-Tunnel-Home-Ipv6 attribute
	Context	configure aaa radius isa-policy string authentication include-attributes xconnect-tunnel-home-address boolean
	Tree	xconnect-tunnel-home-address
	Default	false
	Introduced	16.0.R5
	Platforms	7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa radius isa-policy string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

nas-ip-address-origin keyword


	Synopsis	NAS-IP-Address attribute
	Context	configure aaa radius isa-policy string nas-ip-address-origin keyword
	Tree	nas-ip-address-origin
	Options	system-ip, isa-ip
	Default	system-ip
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

password string


	Synopsis	Password used in the RADIUS access requests
	Context	configure aaa radius isa-policy string password string
	Tree	password
	String Length	1 to 42
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

python-policy reference


	Synopsis	Python policy used for modifying RADIUS messages
	Context	configure aaa radius isa-policy string python-policy reference
	Tree	python-policy
	Reference	configure python python-policy string
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

servers


	Synopsis	Enter the servers context
	Context	configure aaa radius isa-policy string servers
	Tree	servers
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

access-algorithm keyword


	Synopsis	Algorithm that accesses the RADIUS servers
	Context	configure aaa radius isa-policy string servers access-algorithm keyword
	Tree	access-algorithm
	Options	direct, round-robin, hash-based, direct-priority
	Default	direct
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ipv6


	Synopsis	Enter the ipv6 context
	Context	configure aaa radius isa-policy string servers ipv6
	Tree	ipv6
	Description	Commands in this context configure how to communicate with IPv6 RADIUS servers.
	Introduced	22.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mtu number


	Synopsis	MTU used to fragment outgoing IPv6 RADIUS packets
	Context	configure aaa radius isa-policy string servers ipv6 mtu number
	Tree	mtu
	Range	1280 to 9000
	Default	9000
	Introduced	22.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source-prefix string


	Synopsis	Prefix containing individual source addresses per ISA
	Context	configure aaa radius isa-policy string servers ipv6 source-prefix string
	Tree	source-prefix
	Description	This command configures an IPv6 prefix containing individual /128 addresses. These addresses are used as the source address for connections to IPv6 RADIUS servers. The prefix must be large enough to accommodate all BB-ISAs or ESA VMs in the system.
	Introduced	22.10.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

router-instance string


	Synopsis	Routing instance
	Context	configure aaa radius isa-policy string servers router-instance string
	Tree	router-instance
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server [index] number


	Synopsis	Enter the server list instance
	Context	configure aaa radius isa-policy string servers server number
	Tree	server
	Max. Instances	10
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[index] number


	Synopsis	RADIUS server ID
	Context	configure aaa radius isa-policy string servers server number
	Tree	server
	Range	1 to 10
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword


	Synopsis	Administrative state of the ISA RADIUS server
	Context	configure aaa radius isa-policy string servers server number admin-state keyword
	Tree	admin-state
	Options	enable, disable
	Default	disable
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-address (ipv4-address-no-zone | ipv6-address-no-zone)


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	IP address of the RADIUS server
	Context	configure aaa radius isa-policy string servers server number ip-address (ipv4-address-no-zone \| ipv6-address-no-zone)
	Tree	ip-address
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

purpose


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	Enter the purpose context
	Context	configure aaa radius isa-policy string servers server number purpose
	Tree	purpose
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	Enable the accounting context
	Context	configure aaa radius isa-policy string servers server number purpose accounting
	Tree	accounting
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

udp-port number


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	ISA RADIUS server accounting UDP port
	Context	configure aaa radius isa-policy string servers server number purpose accounting udp-port number
	Tree	udp-port
	Range	1 to 65535
	Default	1813
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

authentication


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	Enable the authentication context
	Context	configure aaa radius isa-policy string servers server number purpose authentication
	Tree	authentication
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

udp-port number


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	ISA RADIUS server authentication UDP port
	Context	configure aaa radius isa-policy string servers server number purpose authentication udp-port number
	Tree	udp-port
	Range	1 to 65535
	Default	1812
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

coa


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	Enable the coa context
	Context	configure aaa radius isa-policy string servers server number purpose coa
	Tree	coa
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

udp-port number


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	ISA RADIUS server change of authorization UDP port
	Context	configure aaa radius isa-policy string servers server number purpose coa udp-port number
	Tree	udp-port
	Range	1 to 65535
	Default	3799
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

secret string


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	Secret key to access the RADIUS server
	Context	configure aaa radius isa-policy string servers server number secret string
	Tree	secret
	String Length	1 to 115
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source-address-range string


	Synopsis	Starting IP address of the IP address range
	Context	configure aaa radius isa-policy string servers source-address-range string
	Tree	source-address-range
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

timeout number


	Synopsis	Timeout for a response from the RADIUS server
	Context	configure aaa radius isa-policy string servers timeout number
	Tree	timeout
	Range	1 to 90
	Units	seconds
	Default	5
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

total-tries number


	Synopsis	Maximum number of tries toward the same RADIUS server
	Context	configure aaa radius isa-policy string servers total-tries number
	Tree	total-tries
	Range	1 to 10
	Default	3
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

user-name


	Synopsis	Enter the user-name context
	Context	configure aaa radius isa-policy string user-name
	Tree	user-name
	Description	Commands in this context define the format of the username field in the UE authentication request sent to the RADIUS server. For authentication of IPv6 triggers (ICMPv6, DHCPv6, IPv6 data-trigger) the username format will always fall back to MAC only.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

format keyword


	Synopsis	Username format in RADIUS message
	Context	configure aaa radius isa-policy string user-name format keyword
	Tree	format
	Options	mac, mac-ip, dhcp-vendor, circuit-id
	Default	mac
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mac-format keyword


	Synopsis	MAC address format when contacting RADIUS server
	Context	configure aaa radius isa-policy string user-name mac-format keyword
	Tree	mac-format
	Options	alu, ieee
	Default	alu
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

l2tp-accounting-policy [name] string


	Synopsis	Enter the l2tp-accounting-policy list instance
	Context	configure aaa radius l2tp-accounting-policy string
	Tree	l2tp-accounting-policy
	Max. Instances	32
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[name] string


	Synopsis	L2TP RADIUS accounting policy name
	Context	configure aaa radius l2tp-accounting-policy string
	Tree	l2tp-accounting-policy
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

accounting-type


	Synopsis	Enter the accounting-type context
	Context	configure aaa radius l2tp-accounting-policy string accounting-type
	Tree	accounting-type
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session boolean


	Synopsis	Enable per-session accounting
	Context	configure aaa radius l2tp-accounting-policy string accounting-type session boolean
	Tree	session
	Default	true
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

tunnel boolean


	Synopsis	Enable per-tunnel accounting
	Context	configure aaa radius l2tp-accounting-policy string accounting-type tunnel boolean
	Tree	tunnel
	Default	true
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

acct-tunnel-connection-fmt string


	Synopsis	Accounting tunnel connection ASCII specification
	Context	configure aaa radius l2tp-accounting-policy string acct-tunnel-connection-fmt string
	Tree	acct-tunnel-connection-fmt
	String Length	1 to 253
	Default	%n
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa radius l2tp-accounting-policy string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

include-radius-attribute


	Synopsis	Enter the include-radius-attribute context
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute
	Tree	include-radius-attribute
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

calling-station-id boolean


	Synopsis	Include the Calling-Station-Id attribute
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute calling-station-id boolean
	Tree	calling-station-id
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nas-identifier boolean


	Synopsis	Include the NAS-Identifier attribute
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-identifier boolean
	Tree	nas-identifier
	Default	false
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nas-port


	Synopsis	Enable the nas-port context
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port
	Tree	nas-port
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

bit-spec string


	Synopsis	RADIUS NAS-Port attribute
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port bit-spec string
	Tree	bit-spec
	String Length	1 to 255
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nas-port-id


	Synopsis	Enable the nas-port-id context
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id
	Tree	nas-port-id
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

prefix-string string


	Synopsis	Prefix string added to RADIUS NAS-Port attribute
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id prefix-string string
	Tree	prefix-string
	String Length	1 to 8
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

suffix keyword


	Synopsis	NAS-Port-Id suffix type
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id suffix keyword
	Tree	suffix
	Options	circuit-id, remote-id
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nas-port-type


	Synopsis	Enable the nas-port-type context
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-type
	Tree	nas-port-type
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

type (keyword | number)


	Synopsis	Value for RADIUS NAS-Port-Type attribute
	Context	configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-type type (keyword \| number)
	Tree	type
	Range	0 to 255
	Options	rfc-aligned
	Default	rfc-aligned
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

radius-server-policy reference


	Synopsis	RADIUS server policy referenced
	Context	configure aaa radius l2tp-accounting-policy string radius-server-policy reference
	Tree	radius-server-policy
	Reference	configure aaa radius server-policy string
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

route-downloader [name] string


	Synopsis	Enter the route-downloader list instance
	Context	configure aaa radius route-downloader string
	Tree	route-downloader
	Max. Instances	1
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[name] string


	Synopsis	RADIUS route downloader name
	Context	configure aaa radius route-downloader string
	Tree	route-downloader
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword


	Synopsis	Administrative state of this route downloader
	Context	configure aaa radius route-downloader string admin-state keyword
	Tree	admin-state
	Options	enable, disable
	Default	disable
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

base-user-name string


	Synopsis	Prefix of the username used as access requests
	Context	configure aaa radius route-downloader string base-user-name string
	Tree	base-user-name
	Description	This command sets the prefix for the username that is used for access requests. The actual name used is a concatenation of this string, the “-” (dash) character and a monotonically increasing integer.
	String Length	1 to 32
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-metric number


	Synopsis	Default metric that RTM imported routes acquire
	Context	configure aaa radius route-downloader string default-metric number
	Tree	default-metric
	Range	0 to 254
	Default	2
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-tag number


	Synopsis	Default tag of this route downloader
	Context	configure aaa radius route-downloader string default-tag number
	Tree	default-tag
	Range	0 to 4294967295
	Default	0
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa radius route-downloader string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

download-interval number


	Synopsis	Wait time between consecutive runs of the process
	Context	configure aaa radius route-downloader string download-interval number
	Tree	download-interval
	Range	1 to 1440
	Units	minutes
	Default	720
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

max-routes number


	Synopsis	Maximum routes imported by this route downloader
	Context	configure aaa radius route-downloader string max-routes number
	Tree	max-routes
	Range	1 to 200000
	Default	200000
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

password string


	Synopsis	Route downloader password for RADIUS access requests
	Context	configure aaa radius route-downloader string password string
	Tree	password
	String Length	1 to 71
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

radius-server-policy reference


WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
	Synopsis	RADIUS server policy referenced
	Context	configure aaa radius route-downloader string radius-server-policy reference
	Tree	radius-server-policy
	Reference	configure aaa radius server-policy string
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

retry-interval


	Synopsis	Enter the retry-interval context
	Context	configure aaa radius route-downloader string retry-interval
	Tree	retry-interval
	Description	Commands in this context configure parameters of the retry interval timer, which is an exponential backoff timer. The system retries sending an Access Request message after the previous message was unanswered (for example, a RADIUS failure or ICMP port unreachable error).
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

max number


	Synopsis	Maximum duration of the retry interval
	Context	configure aaa radius route-downloader string retry-interval max number
	Tree	max
	Range	1 to 1440
	Units	minutes
	Default	20
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

min number


	Synopsis	Minimum duration of the retry interval
	Context	configure aaa radius route-downloader string retry-interval min number
	Tree	min
	Description	This command specifies the minimum duration of the retry interval. This duration grows exponentially after each sequential failure.
	Range	1 to 1440
	Units	minutes
	Default	10
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server-policy [name] string


	Synopsis	Enter the server-policy list instance
	Context	configure aaa radius server-policy string
	Tree	server-policy
	Max. Instances	32
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[name] string


	Synopsis	RADIUS server policy name
	Context	configure aaa radius server-policy string
	Tree	server-policy
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

acct-on-off


	Synopsis	Enable the acct-on-off context
	Context	configure aaa radius server-policy string acct-on-off
	Tree	acct-on-off
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

monitor reference


WARNING: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Accounting on/off group name
	Context	configure aaa radius server-policy string acct-on-off monitor reference
	Tree	monitor
	Reference	configure aaa radius acct-on-off-group string
	Notes	The following elements are part of a choice: monitor or oper-state-change.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

oper-state-change


	Synopsis	Enable the oper-state-change context
	Context	configure aaa radius server-policy string acct-on-off oper-state-change
	Tree	oper-state-change
	Notes	The following elements are part of a choice: monitor or oper-state-change.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

group reference


WARNING: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Operational state for a group
	Context	configure aaa radius server-policy string acct-on-off oper-state-change group reference
	Tree	group
	Reference	configure aaa radius acct-on-off-group string
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa radius server-policy string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

python-policy reference


	Synopsis	Python policy for RADIUS packets to/from RADIUS servers
	Context	configure aaa radius server-policy string python-policy reference
	Tree	python-policy
	Reference	configure python python-policy string
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

servers


	Synopsis	Enter the servers context
	Context	configure aaa radius server-policy string servers
	Tree	servers
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

access-algorithm keyword


	Synopsis	Algorithm to select a RADIUS server from the pool
	Context	configure aaa radius server-policy string servers access-algorithm keyword
	Tree	access-algorithm
	Options	direct, round-robin, hash-based
	Default	direct
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

buffering


	Synopsis	Enter the buffering context
	Context	configure aaa radius server-policy string servers buffering
	Tree	buffering
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

acct-interim


	Synopsis	Enable the acct-interim context
	Context	configure aaa radius server-policy string servers buffering acct-interim
	Tree	acct-interim
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

lifetime number


	Synopsis	Time accounting message can be in retransmission buffer
	Context	configure aaa radius server-policy string servers buffering acct-interim lifetime number
	Tree	lifetime
	Range	1 to 25
	Units	hours
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

max number


	Synopsis	Maximum time between accounting message resend attempts
	Context	configure aaa radius server-policy string servers buffering acct-interim max number
	Tree	max
	Range	1 to 3600
	Units	seconds
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

min number


	Synopsis	Minimum time between accounting message resend attempts
	Context	configure aaa radius server-policy string servers buffering acct-interim min number
	Tree	min
	Range	1 to 3600
	Units	seconds
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

acct-start


	Synopsis	Enable the acct-start context
	Context	configure aaa radius server-policy string servers buffering acct-start
	Tree	acct-start
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

lifetime number


	Synopsis	Time accounting message can be in retransmission buffer
	Context	configure aaa radius server-policy string servers buffering acct-start lifetime number
	Tree	lifetime
	Range	1 to 25
	Units	hours
	Notes	This element is mandatory.
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

max number


	Synopsis	Maximum time between accounting message resend attempts
	Context	configure aaa radius server-policy string servers buffering acct-start max number
	Tree	max
	Range	1 to 3600
	Units	seconds
	Notes	This element is mandatory.
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

min number


	Synopsis	Minimum time between accounting message resend attempts
	Context	configure aaa radius server-policy string servers buffering acct-start min number
	Tree	min
	Range	1 to 3600
	Units	seconds
	Notes	This element is mandatory.
	Introduced	20.7.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

acct-stop


	Synopsis	Enable the acct-stop context
	Context	configure aaa radius server-policy string servers buffering acct-stop
	Tree	acct-stop
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

lifetime number


	Synopsis	Time accounting message can be in retransmission buffer
	Context	configure aaa radius server-policy string servers buffering acct-stop lifetime number
	Tree	lifetime
	Range	1 to 25
	Units	hours
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

max number


	Synopsis	Maximum time between accounting message resend attempts
	Context	configure aaa radius server-policy string servers buffering acct-stop max number
	Tree	max
	Range	1 to 3600
	Units	seconds
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

min number


	Synopsis	Minimum time between accounting message resend attempts
	Context	configure aaa radius server-policy string servers buffering acct-stop min number
	Tree	min
	Range	1 to 3600
	Units	seconds
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

health-check


	Synopsis	Enter the health-check context
	Context	configure aaa radius server-policy string servers health-check
	Tree	health-check
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

down-timeout number


	Synopsis	Wait time before declaring RADIUS server out-of-service
	Context	configure aaa radius server-policy string servers health-check down-timeout number
	Tree	down-timeout
	Range	1 to 340
	Units	seconds
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

test-account


	Synopsis	Enter the test-account context
	Context	configure aaa radius server-policy string servers health-check test-account
	Tree	test-account
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword


	Synopsis	Administrative state of the health check
	Context	configure aaa radius server-policy string servers health-check test-account admin-state keyword
	Tree	admin-state
	Options	enable, disable
	Default	disable
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

interval number


	Synopsis	Time for test account to check health of RADIUS servers
	Context	configure aaa radius server-policy string servers health-check test-account interval number
	Tree	interval
	Range	1 to 60
	Units	seconds
	Default	3
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

password string


	Synopsis	Test account password for RADIUS server health check
	Context	configure aaa radius server-policy string servers health-check test-account password string
	Tree	password
	String Length	1 to 115
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

user-name string


	Synopsis	Username to send access requests to probe RADIUS server
	Context	configure aaa radius server-policy string servers health-check test-account user-name string
	Tree	user-name
	String Length	1 to 64
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

hold-down-time number


	Synopsis	Hold time before reusing a RADIUS server that was down
	Context	configure aaa radius server-policy string servers hold-down-time number
	Tree	hold-down-time
	Range	30 to 86400
	Units	seconds
	Default	30
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

ipv6-source-address string


	Synopsis	Source address for IPv6 RADIUS datagrams
	Context	configure aaa radius server-policy string servers ipv6-source-address string
	Tree	ipv6-source-address
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

retry-count number


	Synopsis	Number of retries for contacting the RADIUS server
	Context	configure aaa radius server-policy string servers retry-count number
	Tree	retry-count
	Range	1 to 256
	Default	3
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

router-instance string


	Synopsis	RADIUS routing instance
	Context	configure aaa radius server-policy string servers router-instance string
	Tree	router-instance
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server [server-index] number


	Synopsis	Enter the server list instance
	Context	configure aaa radius server-policy string servers server number
	Tree	server
	Max. Instances	32
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[server-index] number


	Synopsis	RADIUS server index
	Context	configure aaa radius server-policy string servers server number
	Tree	server
	Range	1 to 16
	Notes	This element is part of a list key.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server-name string


	Synopsis	RADIUS server name
	Context	configure aaa radius server-policy string servers server number server-name string
	Tree	server-name
	String Length	1 to 32
	Notes	This element is mandatory.
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

source-address string


	Synopsis	Source address of RADIUS messages
	Context	configure aaa radius server-policy string servers source-address string
	Tree	source-address
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

stickiness boolean


	Synopsis	Allow stickiness in a multi-server application
	Context	configure aaa radius server-policy string servers stickiness boolean
	Tree	stickiness
	Default	true
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

timeout number


	Synopsis	Time until the next retry to the RADIUS server
	Context	configure aaa radius server-policy string servers timeout number
	Tree	timeout
	Range	1 to 340
	Units	seconds
	Default	5
	Introduced	16.0.R4
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

wpp


	Synopsis	Enter the wpp context
	Context	configure aaa wpp
	Tree	wpp
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

portal-group [group-name] string


	Synopsis	Enter the portal-group list instance
	Context	configure aaa wpp portal-group string
	Tree	portal-group
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[group-name] string


	Synopsis	Portal group name
	Context	configure aaa wpp portal-group string
	Tree	portal-group
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword


	Synopsis	Administrative state of the portal group
	Context	configure aaa wpp portal-group string admin-state keyword
	Tree	admin-state
	Options	enable, disable
	Default	disable
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description string


	Synopsis	Text description
	Context	configure aaa wpp portal-group string description string
	Tree	description
	String Length	1 to 80
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

portal [router-instance] string name string


	Synopsis	Add a list entry for portal
	Context	configure aaa wpp portal-group string portal string name string
	Tree	portal
	Max. Instances	8
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

[router-instance] string


	Synopsis	Router on which the portal is configured
	Context	configure aaa wpp portal-group string portal string name string
	Tree	portal
	Notes	This element is part of a list key.
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

name string


	Synopsis	Web portal server name
	Context	configure aaa wpp portal-group string portal string name string
	Tree	portal
	String Length	1 to 32
	Notes	This element is part of a list key.
	Introduced	16.0.R1
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

system-name string


	Synopsis	System name used in WPP protocol messages
	Context	configure aaa wpp system-name string
	Tree	system-name
	String Length	1 to 16
	Introduced	16.0.R6
	Platforms	7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR