aaa commands

configure 
   —  aaa 
      —  apply-groups reference
      —  apply-groups-exclude reference
      —  diameter 
         —  node string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  connection 
               —  ipv4 
                  —  allow-connections boolean
                  —  local-address string
               —  ipv6 
                  —  allow-connections boolean
                  —  local-address string
               —  timer number
            —  description string
            —  origin-realm string
            —  peer index number 
               —  address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  connection-timer number
               —  default-peer boolean
               —  destination-host string
               —  preference number
               —  route index number 
                  —  application keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  preference number
                  —  realm string
               —  watchdog-timer number
            —  python-policy reference
            —  router-instance string
         —  peer-policy string 
            —  applications 
               —  gx boolean
               —  gy boolean
               —  nasreq boolean
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  connection-timer number
            —  description string
            —  ipv4-source-address string
            —  ipv6-source-address string
            —  origin-host string
            —  origin-realm string
            —  peer string 
               —  address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  connection-timer number
               —  destination-host string
               —  destination-realm string
               —  preference number
               —  statistics 
               —  transaction-timer number
               —  transport 
                  —  port-number number
               —  watchdog-timer number
            —  proxy 
               —  admin-state keyword
               —  local-address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  mcs-peer 
                  —  address reference
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  sync-tag string
               —  router-instance string
            —  python-policy reference
            —  role keyword
            —  router-instance string
            —  transaction-timer number
            —  vendor-support keyword
            —  watchdog-timer number
      —  radius 
         —  acct-on-off-group string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
         —  coa-port number
         —  isa-policy string 
            —  accounting 
               —  include-attributes 
                  —  acct-delay-time boolean
                  —  acct-triggered-reason boolean
                  —  called-station-id boolean
                  —  calling-station-id boolean
                  —  circuit-id boolean
                  —  class boolean
                  —  credit-control-quota boolean
                  —  dhcp-options boolean
                  —  dhcp-vendor-class-id boolean
                  —  frame-counters boolean
                  —  framed-ip-address boolean
                  —  framed-ip-netmask boolean
                  —  framed-ipv6-prefix boolean
                  —  hardware-timestamp boolean
                  —  ipv6-address boolean
                  —  mac-address boolean
                  —  millisecond-event-timestamp boolean
                  —  multi-session-id boolean
                  —  nas-identifier boolean
                  —  nas-ip-address boolean
                  —  nas-port boolean
                  —  nas-port-id boolean
                  —  nas-port-type boolean
                  —  nat-inside-service-id boolean
                  —  nat-outside-ip-address boolean
                  —  nat-outside-service-id boolean
                  —  nat-port-range-block boolean
                  —  nat-subscriber-string boolean
                  —  octet-counters boolean
                  —  proxied-subscriber-data boolean
                  —  release-reason boolean
                  —  remote-id boolean
                  —  rssi boolean
                  —  session-time boolean
                  —  subscriber-id boolean
                  —  toserver-dhcp6-options boolean
                  —  ue-creation-type boolean
                  —  user-name boolean
                  —  wlan-ssid-vlan boolean
                  —  xconnect-tunnel-home-address boolean
                  —  xconnect-tunnel-local-ipv6-address boolean
                  —  xconnect-tunnel-remote-ipv6-address boolean
                  —  xconnect-tunnel-service boolean
                  —  xconnect-tunnel-type boolean
               —  nat-periodic-update 
                  —  interval number
                  —  rate-limit (number | keyword)
               —  update-triggers 
                  —  address-state boolean
                  —  soft-quota-exhausted boolean
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authentication 
               —  include-attributes 
                  —  called-station-id boolean
                  —  calling-station-id boolean
                  —  circuit-id boolean
                  —  dhcp-vendor-class-id boolean
                  —  framed-ip-address boolean
                  —  ipv6-address boolean
                  —  mac-address boolean
                  —  nas-identifier boolean
                  —  nas-ip-address boolean
                  —  nas-port boolean
                  —  nas-port-id boolean
                  —  nas-port-type boolean
                  —  remote-id boolean
                  —  toserver-dhcp-options boolean
                  —  toserver-dhcp6-options boolean
                  —  wlan-ssid-vlan boolean
                  —  xconnect-tunnel-home-address boolean
            —  description string
            —  nas-ip-address-origin keyword
            —  password string
            —  python-policy reference
            —  servers 
               —  access-algorithm keyword
               —  router-instance string
               —  server number 
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  purpose 
                     —  accounting 
                        —  udp-port number
                     —  authentication 
                        —  udp-port number
                     —  coa 
                        —  udp-port number
                  —  secret string
               —  source-address-range string
               —  timeout number
               —  total-tries number
            —  user-name 
               —  format keyword
               —  mac-format keyword
         —  l2tp-accounting-policy string 
            —  accounting-type 
               —  session boolean
               —  tunnel boolean
            —  acct-tunnel-connection-fmt string
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  include-radius-attribute 
               —  calling-station-id boolean
               —  nas-identifier boolean
               —  nas-port 
                  —  bit-spec string
               —  nas-port-id 
                  —  prefix-string string
                  —  suffix keyword
               —  nas-port-type 
                  —  type (keyword | number)
            —  radius-server-policy reference
         —  route-downloader string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  base-user-name string
            —  default-metric number
            —  default-tag number
            —  description string
            —  download-interval number
            —  max-routes number
            —  password string
            —  radius-server-policy reference
            —  retry-interval 
               —  max number
               —  min number
         —  server-policy string 
            —  acct-on-off 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  monitor reference
               —  oper-state-change 
                  —  group reference
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  python-policy reference
            —  servers 
               —  access-algorithm keyword
               —  buffering 
                  —  acct-interim 
                     —  lifetime number
                     —  max number
                     —  min number
                  —  acct-start 
                     —  lifetime number
                     —  max number
                     —  min number
                  —  acct-stop 
                     —  lifetime number
                     —  max number
                     —  min number
               —  health-check 
                  —  down-timeout number
                  —  test-account 
                     —  admin-state keyword
                     —  interval number
                     —  password string
                     —  user-name string
               —  hold-down-time number
               —  ipv6-source-address string
               —  retry-count number
               —  router-instance string
               —  server number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  server-name string
               —  source-address string
               —  stickiness boolean
               —  timeout number
      —  wpp 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  portal-group string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  portal string name string 
         —  system-name string
Parent topic: Configuration commands

aaa command descriptions

aaa

  Synopsis Enter the aaa context
  Context configure aaa
  Tree aaa
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter

  Synopsis Enter the diameter context
  Context configure aaa diameter
  Tree diameter
 

Description

Commands in this context configure Diameter Base parameters.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
node [origin-host] string
  Synopsis Enter the node list instance
  Context configure aaa diameter node string
  Tree node
  Max. Instances 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[origin-host] string
  Synopsis Origin-Host AVP
  Context configure aaa diameter node string
  String Length 1 to 80
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
connection
  Synopsis Enter the connection context
  Context configure aaa diameter node string connection
  Tree connection
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ipv4
  Synopsis Enter the ipv4 context
  Context configure aaa diameter node string connection ipv4
  Tree ipv4
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-connections boolean
  Synopsis Listen on local address for incoming peer connections
  Context configure aaa diameter node string connection ipv4 allow-connections boolean
  Tree allow-connections
 

Description

When configured to true, this command is used in multi-chassis redundancy where the local Diameter node accepts connection from the inter-chassis peer. The peer requesting the connection must have the same Diameter name as the local peer and its source address must match the IP address of the locally configured destination peer.

The IPv4 address on which the node listens for incoming connection is the configured source address of the local peer. This source IPv4 address can reference any local interface, including loopbacks.

When configured to false, incoming requests for connections are refused.
  Default false
  Introduced 19.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address string
  Synopsis IPv4 source address for the TCP peer connection
  Context configure aaa diameter node string connection ipv4 local-address string
  Tree local-address
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ipv6
  Synopsis Enter the ipv6 context
  Context configure aaa diameter node string connection ipv6
  Tree ipv6
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-connections boolean
  Synopsis Listen on local address for incoming peer connections
  Context configure aaa diameter node string connection ipv6 allow-connections boolean
  Tree allow-connections
  Default false
  Introduced 19.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address string
  Synopsis IPv6 source address for the TCP peer connection
  Context configure aaa diameter node string connection ipv6 local-address string
  Tree local-address
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
timer number
  Synopsis Wait time before attempting reconnection to peer
  Context configure aaa diameter node string connection timer number
  Tree timer
 

Description

This command configures the time the system waits before attempting to reconnect to a peer after the connection is lost.

  Range 1 to 1000
  Default 30
  Units seconds
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa diameter node string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
origin-realm string
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Origin-realm name
  Context configure aaa diameter node string origin-realm string
  Tree origin-realm
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
peer index number
  Synopsis Enter the peer list instance
  Context configure aaa diameter node string peer index number
  Tree peer
  Max. Instances 5
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
index number
  Synopsis Index of a peer within the node
  Context configure aaa diameter node string peer index number
  Range 1 to 5
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
address (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis Diameter peer address
  Context configure aaa diameter node string peer index number address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
  Synopsis Administrative state of the Diameter peer
  Context configure aaa diameter node string peer index number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
connection-timer number
  Synopsis Wait time before attempting reconnection to peer
  Context configure aaa diameter node string peer index number connection-timer number
  Tree connection-timer
  Range 1 to 1000
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-peer boolean
  Synopsis Use the peer as default route for realm-based routing
  Context configure aaa diameter node string peer index number default-peer boolean
  Tree default-peer
  Default false
  Introduced 19.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
destination-host string
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Destination-Host AVP string for Diameter messages
  Context configure aaa diameter node string peer index number destination-host string
  Tree destination-host
  String Length 1 to 80
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
preference number
  Synopsis Diameter routing preference for a peer
  Context configure aaa diameter node string peer index number preference number
  Tree preference
  Range 1 to 100
  Default 50
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
route index number
  Synopsis Enter the route list instance
  Context configure aaa diameter node string peer index number route index number
  Tree route
  Max. Instances 15
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
index number
  Synopsis Static Diameter route ID
  Context configure aaa diameter node string peer index number route index number
 

Description

This command configures the ID of the static route used to reach remote realms that are not directly connected to the origin realm. The route can also be used to override the route preference (peer preference) of the directly-connected realms.
  Range 1 to 15
 

Notes

This element is part of a list key.
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
application keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Diameter application to which the route applies
  Context configure aaa diameter node string peer index number route index number application keyword
  Tree application
 

Description

This command specifies the Diameter application in the destination realm reachable via the static route. 
  Options nasreq, gy, gx
 

Notes

This element is mandatory.
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
preference number
  Synopsis Static route preference; lower value is preferred
  Context configure aaa diameter node string peer index number route index number preference number
  Tree preference
 

Description

This command configures the preference of the static route. The preference is compared with the preference values of all other static and dynamic routes. The dynamic route is a realm route learned directly from the peer via the Capabilities Exchange process during the peer negotiation phase. The preference value of the dynamic route is configured directly under the peer configuration. A lower preference value is preferred for route selection.
  Range 1 to 100
  Default 50
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
realm string
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Destination realm reachable via the static route
  Context configure aaa diameter node string peer index number route index number realm string
  Tree realm
  String Length 1 to 80
 

Notes

This element is mandatory.
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
watchdog-timer number
  Synopsis Time between consecutive watchdog messages
  Context configure aaa diameter node string peer index number watchdog-timer number
  Tree watchdog-timer
  Range 1 to 1000
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
python-policy reference
  Synopsis Python policy for received or sent Diameter messages
  Context configure aaa diameter node string python-policy reference
  Tree python-policy
 

Reference

configure python python-policy string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
router-instance string
  Synopsis Router in which this node connects to its peers
  Context configure aaa diameter node string router-instance string
  Tree router-instance
  Default Base
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
peer-policy [name] string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enter the peer-policy list instance
  Context configure aaa diameter peer-policy string
  Tree peer-policy
  Max. Instances 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[name] string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Diameter peer policy name
  Context configure aaa diameter peer-policy string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
applications
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enter the applications context
  Context configure aaa diameter peer-policy string applications
  Tree applications
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
gx boolean
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Advertise Gx application support in CER messages
  Context configure aaa diameter peer-policy string applications gx boolean
  Tree gx
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
gy boolean
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Advertise Gy application support in CER messages
  Context configure aaa diameter peer-policy string applications gy boolean
  Tree gy
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
nasreq boolean
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Advertise NASREQ application support in CER messages
  Context configure aaa diameter peer-policy string applications nasreq boolean
  Tree nasreq
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
connection-timer number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Wait time before attempting reconnection to peer
  Context configure aaa diameter peer-policy string connection-timer number
  Tree connection-timer
  Range 1 to 1000
  Default 30
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Text description
  Context configure aaa diameter peer-policy string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ipv4-source-address string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis IPv4 source address for peering connection
  Context configure aaa diameter peer-policy string ipv4-source-address string
  Tree ipv4-source-address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ipv6-source-address string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis IPv6 source address for IPv6 peering connection
  Context configure aaa diameter peer-policy string ipv6-source-address string
  Tree ipv6-source-address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
origin-host string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Origin-Host AVP sent in all Diameter messages
  Context configure aaa diameter peer-policy string origin-host string
  Tree origin-host
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
origin-realm string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Origin-Realm AVP sent in all Diameter messages
  Context configure aaa diameter peer-policy string origin-realm string
  Tree origin-realm
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
peer [peer-name] string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enter the peer list instance
  Context configure aaa diameter peer-policy string peer string
  Tree peer
  Max. Instances 5
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[peer-name] string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Diameter peer name
  Context configure aaa diameter peer-policy string peer string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Diameter peer address
  Context configure aaa diameter peer-policy string peer string address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Administrative state of the peer
  Context configure aaa diameter peer-policy string peer string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
connection-timer number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Wait time before attempting reconnection to a peer
  Context configure aaa diameter peer-policy string peer string connection-timer number
  Tree connection-timer
  Range 1 to 1000
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
destination-host string
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Destination-Host AVP string for Diameter messages
  Context configure aaa diameter peer-policy string peer string destination-host string
  Tree destination-host
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
destination-realm string
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Destination-Realm AVP string for Diameter messages
  Context configure aaa diameter peer-policy string peer string destination-realm string
  Tree destination-realm
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
preference number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Peer preference of the Diameter peer policy
  Context configure aaa diameter peer-policy string peer string preference number
  Tree preference
  Range 1 to 100
  Default 50
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
statistics
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enter the statistics context
  Context configure aaa diameter peer-policy string peer string statistics
  Tree statistics
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
transaction-timer number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Timeout for base Diameter messages (DWR, CER, DPR)
  Context configure aaa diameter peer-policy string peer string transaction-timer number
  Tree transaction-timer
  Range 1 to 1000
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
transport
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enter the transport context
  Context configure aaa diameter peer-policy string peer string transport
  Tree transport
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
port-number number
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Destination TCP port number for the policy peer
  Context configure aaa diameter peer-policy string peer string transport port-number number
  Tree port-number
  Range 1 to 65535
  Default 3868
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
watchdog-timer number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Time between consecutive watchdog messages
  Context configure aaa diameter peer-policy string peer string watchdog-timer number
  Tree watchdog-timer
  Range 1 to 1000
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
proxy
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enter the proxy context
  Context configure aaa diameter peer-policy string proxy
  Tree proxy
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Administrative state of Diameter proxy
  Context configure aaa diameter peer-policy string proxy admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Source IP address on which the Diameter proxy listens
  Context configure aaa diameter peer-policy string proxy local-address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree local-address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
mcs-peer
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Enable the mcs-peer context
  Context configure aaa diameter peer-policy string proxy mcs-peer
  Tree mcs-peer
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
address reference
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis MCS peer address
  Context configure aaa diameter peer-policy string proxy mcs-peer address reference
  Tree address
 

Reference

configure redundancy multi-chassis peer (ipv4-address-no-zone | ipv6-address-no-zone)

 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sync-tag string
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Synchronization tag shared by MCS peers
  Context configure aaa diameter peer-policy string proxy mcs-peer sync-tag string
  Tree sync-tag
  String Length 1 to 32
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
router-instance string
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Routing context associated with Diameter proxy
  Context configure aaa diameter peer-policy string proxy router-instance string
  Tree router-instance
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
python-policy reference
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Name of the python policy for Diameter processing
  Context configure aaa diameter peer-policy string python-policy reference
  Tree python-policy
 

Reference

configure python python-policy string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
role keyword
WARNING:

This element is deprecated and will be removed in a future release.
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Client or proxy role of a Diameter peer policy
  Context configure aaa diameter peer-policy string role keyword
  Tree role
  Default client
  Options client, proxy
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
router-instance string
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Diameter peer policy router
  Context configure aaa diameter peer-policy string router-instance string
  Tree router-instance
  Default Base
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
transaction-timer number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Timeout for base Diameter messages (DWR, CER, DPR)
  Context configure aaa diameter peer-policy string transaction-timer number
  Tree transaction-timer
  Range 1 to 1000
  Default 30
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
vendor-support keyword
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Vendor support announced in the capability exchange
  Context configure aaa diameter peer-policy string vendor-support keyword
  Tree vendor-support
  Default three-gpp
  Options vodafone, three-gpp
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
watchdog-timer number
WARNING:

This element is deprecated and will be removed in a future release.
  Synopsis Time between consecutive watchdog messages
  Context configure aaa diameter peer-policy string watchdog-timer number
  Tree watchdog-timer
  Range 1 to 1000
  Default 30
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

radius

  Synopsis Enter the radius context
  Context configure aaa radius
  Tree radius
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
acct-on-off-group [name] string
  Synopsis Enter the acct-on-off-group list instance
  Context configure aaa radius acct-on-off-group string
  Tree acct-on-off-group
  Max. Instances 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[name] string
  Synopsis Group name for accounting on/off
  Context configure aaa radius acct-on-off-group string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa radius acct-on-off-group string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
coa-port number
  Synopsis RADIUS listening port for CoA and Disconnect messages
  Context configure aaa radius coa-port number
  Tree coa-port
  Range 1647 | 1700 | 1812 | 3799
  Default 3799
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
isa-policy [name] string
  Synopsis Enter the isa-policy list instance
  Context configure aaa radius isa-policy string
  Tree isa-policy
  Max. Instances 8
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[name] string
  Synopsis ISA RADIUS policy name referenced by a NAT application
  Context configure aaa radius isa-policy string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
accounting
  Synopsis Enter the accounting context
  Context configure aaa radius isa-policy string accounting
  Tree accounting
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
include-attributes
  Synopsis Enter the include-attributes context
  Context configure aaa radius isa-policy string accounting include-attributes
  Tree include-attributes
 

Description

Commands in this context specify the attributes to include in the RADIUS accounting messages.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
acct-delay-time boolean
  Synopsis Include the accounting delay time attribute
  Context configure aaa radius isa-policy string accounting include-attributes acct-delay-time boolean
  Tree acct-delay-time
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
acct-triggered-reason boolean
  Synopsis Include the accounting triggered reason attribute
  Context configure aaa radius isa-policy string accounting include-attributes acct-triggered-reason boolean
  Tree acct-triggered-reason
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
called-station-id boolean
  Synopsis Include the Called-Station-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes called-station-id boolean
  Tree called-station-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
calling-station-id boolean
  Synopsis Include the Calling-Station-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes calling-station-id boolean
  Tree calling-station-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
circuit-id boolean
  Synopsis Include the Agent-Circuit-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes circuit-id boolean
  Tree circuit-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
class boolean
  Synopsis Include the Class attribute
  Context configure aaa radius isa-policy string accounting include-attributes class boolean
  Tree class
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
credit-control-quota boolean
  Synopsis Add unconsumed volume quota to Credit-Control-Quota
  Context configure aaa radius isa-policy string accounting include-attributes credit-control-quota boolean
  Tree credit-control-quota
  Default false
  Introduced 21.7.R1
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp-options boolean
  Synopsis Include the Alc-ToServer-Dhcp-Options attribute
  Context configure aaa radius isa-policy string accounting include-attributes dhcp-options boolean
  Tree dhcp-options
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp-vendor-class-id boolean
  Synopsis Include the Alc-Dhcp-Vendor-Class-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes dhcp-vendor-class-id boolean
  Tree dhcp-vendor-class-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
frame-counters boolean
  Synopsis Include Acct-Input-Packets and Acct-Output-Packets
  Context configure aaa radius isa-policy string accounting include-attributes frame-counters boolean
  Tree frame-counters
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
framed-ip-address boolean
  Synopsis Include the Framed-IP-Address attribute
  Context configure aaa radius isa-policy string accounting include-attributes framed-ip-address boolean
  Tree framed-ip-address
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
framed-ip-netmask boolean
  Synopsis Include the Framed-IP-Netmask attribute
  Context configure aaa radius isa-policy string accounting include-attributes framed-ip-netmask boolean
  Tree framed-ip-netmask
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
framed-ipv6-prefix boolean
  Synopsis Include the Framed-IPv6-Prefix attribute
  Context configure aaa radius isa-policy string accounting include-attributes framed-ipv6-prefix boolean
  Tree framed-ipv6-prefix
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
hardware-timestamp boolean
  Synopsis Include the Event-Timestamp attribute
  Context configure aaa radius isa-policy string accounting include-attributes hardware-timestamp boolean
  Tree hardware-timestamp
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
ipv6-address boolean
  Synopsis Include the Alc-Ipv6-Address attribute
  Context configure aaa radius isa-policy string accounting include-attributes ipv6-address boolean
  Tree ipv6-address
 

Description

When configured to true, the IA_NA address of the UE is included in the accounting message if an active IA_NA lease exists.

When configured to false, the address is not included.

  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
mac-address boolean
  Synopsis Include the Alc-Client-Hardware-Addr attribute
  Context configure aaa radius isa-policy string accounting include-attributes mac-address boolean
  Tree mac-address
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
millisecond-event-timestamp boolean
  Synopsis Include the Alc-Millisecond-Event-Timestamp attribute
  Context configure aaa radius isa-policy string accounting include-attributes millisecond-event-timestamp boolean
  Tree millisecond-event-timestamp
 

Description

When configured to true, the router includes the Alc-Millisecond-Event-Timestamp attribute in the accounting message. This attribute includes the time the accounting event was logged in milliseconds since Jan 1, 1970 00:00:00 UTC.

When configured to false, the router does not include this attribute.
  Default false
  Introduced 20.10.R1
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
multi-session-id boolean
  Synopsis Include the Acct-Multi-Session-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes multi-session-id boolean
  Tree multi-session-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-identifier boolean
  Synopsis Include the NAS-Identifier attribute
  Context configure aaa radius isa-policy string accounting include-attributes nas-identifier boolean
  Tree nas-identifier
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-ip-address boolean
  Synopsis Include the NAS-IP-Address attribute
  Context configure aaa radius isa-policy string accounting include-attributes nas-ip-address boolean
  Tree nas-ip-address
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-port boolean
  Synopsis Include the NAS-Port attribute
  Context configure aaa radius isa-policy string accounting include-attributes nas-port boolean
  Tree nas-port
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-port-id boolean
  Synopsis Include the NAS-Port-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes nas-port-id boolean
  Tree nas-port-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-port-type boolean
  Synopsis Include the NAS-Port-Type attribute
  Context configure aaa radius isa-policy string accounting include-attributes nas-port-type boolean
  Tree nas-port-type
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-inside-service-id boolean
  Synopsis Include NAT inside service ID in Alc-Serv-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes nat-inside-service-id boolean
  Tree nat-inside-service-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-outside-ip-address boolean
  Synopsis Include the Alc-Nat-Outside-Ip-Addr attribute
  Context configure aaa radius isa-policy string accounting include-attributes nat-outside-ip-address boolean
  Tree nat-outside-ip-address
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-outside-service-id boolean
  Synopsis Include NAT outside service ID in Alc-Serv-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes nat-outside-service-id boolean
  Tree nat-outside-service-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-port-range-block boolean
  Synopsis Include the Alc-Nat-Port-Range attribute
  Context configure aaa radius isa-policy string accounting include-attributes nat-port-range-block boolean
  Tree nat-port-range-block
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-subscriber-string boolean
  Synopsis Include the Alc-Subsc-ID-Str attribute
  Context configure aaa radius isa-policy string accounting include-attributes nat-subscriber-string boolean
  Tree nat-subscriber-string
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
octet-counters boolean
  Synopsis Include Acct-Input-Octets and Acct-Output-Octets
  Context configure aaa radius isa-policy string accounting include-attributes octet-counters boolean
  Tree octet-counters
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
proxied-subscriber-data boolean
  Synopsis Include subscriber data as RADIUS attributes
  Context configure aaa radius isa-policy string accounting include-attributes proxied-subscriber-data boolean
  Tree proxied-subscriber-data
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
release-reason boolean
  Synopsis Include reason in the Acct-Terminate-Cause attribute
  Context configure aaa radius isa-policy string accounting include-attributes release-reason boolean
  Tree release-reason
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
remote-id boolean
  Synopsis Include the Agent-Remote-Id attribute
  Context configure aaa radius isa-policy string accounting include-attributes remote-id boolean
  Tree remote-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
rssi boolean
  Synopsis Include the Alc-RSSI attribute
  Context configure aaa radius isa-policy string accounting include-attributes rssi boolean
  Tree rssi
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-time boolean
  Synopsis Include the Acct-Session-Time attribute
  Context configure aaa radius isa-policy string accounting include-attributes session-time boolean
  Tree session-time
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
subscriber-id boolean
  Synopsis Include the Alc-Subsc-ID-Str attribute
  Context configure aaa radius isa-policy string accounting include-attributes subscriber-id boolean
  Tree subscriber-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
toserver-dhcp6-options boolean
  Synopsis Include the Alc-ToServer-Dhcp6-Options attribute
  Context configure aaa radius isa-policy string accounting include-attributes toserver-dhcp6-options boolean
  Tree toserver-dhcp6-options
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
ue-creation-type boolean
  Synopsis Include the Alc-Wlan-Ue-Creation-Type attribute
  Context configure aaa radius isa-policy string accounting include-attributes ue-creation-type boolean
  Tree ue-creation-type
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
user-name boolean
  Synopsis Include the User-Name attribute
  Context configure aaa radius isa-policy string accounting include-attributes user-name boolean
  Tree user-name
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
wlan-ssid-vlan boolean
  Synopsis Include per-SSID VLAN in Alc-Wlan-SSID-VLAN attribute
  Context configure aaa radius isa-policy string accounting include-attributes wlan-ssid-vlan boolean
  Tree wlan-ssid-vlan
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
xconnect-tunnel-home-address boolean
  Synopsis Include the Alc-Xconnect-Tunnel-Home-Ipv6 attribute
  Context configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-home-address boolean
  Tree xconnect-tunnel-home-address
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
xconnect-tunnel-local-ipv6-address boolean
  Synopsis Include the Alc-Xconnect-Tunnel-Local-Ipv6 attribute
  Context configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-local-ipv6-address boolean
  Tree xconnect-tunnel-local-ipv6-address
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
xconnect-tunnel-remote-ipv6-address boolean
  Synopsis Include the Alc-Xconnect-Tunnel-Remote-Ipv6 attribute
  Context configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-remote-ipv6-address boolean
  Tree xconnect-tunnel-remote-ipv6-address
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
xconnect-tunnel-service boolean
  Synopsis Include the Alc-Xconnect-Tunnel-Service attribute
  Context configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-service boolean
  Tree xconnect-tunnel-service
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
xconnect-tunnel-type boolean
  Synopsis Include the Alc-Xconnect-Tunnel-Type attribute
  Context configure aaa radius isa-policy string accounting include-attributes xconnect-tunnel-type boolean
  Tree xconnect-tunnel-type
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-periodic-update
  Synopsis Enter the nat-periodic-update context
  Context configure aaa radius isa-policy string accounting nat-periodic-update
  Tree nat-periodic-update
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
interval number
  Synopsis Interval for periodic RADIUS Interim-Update messages
  Context configure aaa radius isa-policy string accounting nat-periodic-update interval number
  Tree interval
  Range 1 to 72
  Units hours
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
rate-limit (number | keyword)
  Synopsis Rate limit for periodic RADIUS Interim-Update messages
  Context configure aaa radius isa-policy string accounting nat-periodic-update rate-limit (number | keyword)
  Tree rate-limit
  Range 1 to 100000
  Default unlimited
  Units packets per second
  Options unlimited
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
update-triggers
  Synopsis Enter the update-triggers context
  Context configure aaa radius isa-policy string accounting update-triggers
  Tree update-triggers
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-state boolean
  Synopsis Send an Interim-Update when address allocated or freed
  Context configure aaa radius isa-policy string accounting update-triggers address-state boolean
  Tree address-state
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
soft-quota-exhausted boolean
  Synopsis Send interim update when soft volume quota is reached
  Context configure aaa radius isa-policy string accounting update-triggers soft-quota-exhausted boolean
  Tree soft-quota-exhausted
  Default false
  Introduced 21.7.R1
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
authentication
  Synopsis Enter the authentication context
  Context configure aaa radius isa-policy string authentication
  Tree authentication
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
include-attributes
  Synopsis Enter the include-attributes context
  Context configure aaa radius isa-policy string authentication include-attributes
  Tree include-attributes
 

Description

Commands in this context specify the attributes to include in the RADIUS authentication messages.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
called-station-id boolean
  Synopsis Include the Called-Station-Id attribute
  Context configure aaa radius isa-policy string authentication include-attributes called-station-id boolean
  Tree called-station-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
calling-station-id boolean
  Synopsis Include the Calling-Station-Id attribute
  Context configure aaa radius isa-policy string authentication include-attributes calling-station-id boolean
  Tree calling-station-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
circuit-id boolean
  Synopsis Include the Agent-Circuit-Id attribute
  Context configure aaa radius isa-policy string authentication include-attributes circuit-id boolean
  Tree circuit-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp-vendor-class-id boolean
  Synopsis Include the Alc-DHCP-Vendor-Class-Id attribute
  Context configure aaa radius isa-policy string authentication include-attributes dhcp-vendor-class-id boolean
  Tree dhcp-vendor-class-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
framed-ip-address boolean
  Synopsis Include the Framed-IP-Address attribute
  Context configure aaa radius isa-policy string authentication include-attributes framed-ip-address boolean
  Tree framed-ip-address
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
ipv6-address boolean
  Synopsis Include the Alc-IPv6-address attribute
  Context configure aaa radius isa-policy string authentication include-attributes ipv6-address boolean
  Tree ipv6-address
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
mac-address boolean
  Synopsis Include the Alc-Client-Hardware-Addr attribute
  Context configure aaa radius isa-policy string authentication include-attributes mac-address boolean
  Tree mac-address
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-identifier boolean
  Synopsis Include the NAS-Identifier attribute
  Context configure aaa radius isa-policy string authentication include-attributes nas-identifier boolean
  Tree nas-identifier
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-ip-address boolean
  Synopsis Include the NAS-IP-Address attribute
  Context configure aaa radius isa-policy string authentication include-attributes nas-ip-address boolean
  Tree nas-ip-address
  Default true
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-port boolean
  Synopsis Include the NAS-Port attribute
  Context configure aaa radius isa-policy string authentication include-attributes nas-port boolean
  Tree nas-port
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-port-id boolean
  Synopsis Include the NAS-Port-Id attribute
  Context configure aaa radius isa-policy string authentication include-attributes nas-port-id boolean
  Tree nas-port-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-port-type boolean
  Synopsis Include the NAS-Port-Type attribute
  Context configure aaa radius isa-policy string authentication include-attributes nas-port-type boolean
  Tree nas-port-type
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
remote-id boolean
  Synopsis Include the Agent-Remote-Id attribute
  Context configure aaa radius isa-policy string authentication include-attributes remote-id boolean
  Tree remote-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
toserver-dhcp-options boolean
  Synopsis Include the Alc-ToServer-Dhcp-Options attribute
  Context configure aaa radius isa-policy string authentication include-attributes toserver-dhcp-options boolean
  Tree toserver-dhcp-options
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
toserver-dhcp6-options boolean
  Synopsis Include the Alc-ToServer-Dhcp6-Options attribute
  Context configure aaa radius isa-policy string authentication include-attributes toserver-dhcp6-options boolean
  Tree toserver-dhcp6-options
  Default false
  Introduced 16.0.R4
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
wlan-ssid-vlan boolean
  Synopsis Include per-SSID VLAN in Alc-Wlan-SSID-VLAN attribute
  Context configure aaa radius isa-policy string authentication include-attributes wlan-ssid-vlan boolean
  Tree wlan-ssid-vlan
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
xconnect-tunnel-home-address boolean
  Synopsis Include the Alc-Xconnect-Tunnel-Home-Ipv6 attribute
  Context configure aaa radius isa-policy string authentication include-attributes xconnect-tunnel-home-address boolean
  Tree xconnect-tunnel-home-address
  Default false
  Introduced 16.0.R5
 

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa radius isa-policy string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nas-ip-address-origin keyword
  Synopsis NAS-IP-Address attribute
  Context configure aaa radius isa-policy string nas-ip-address-origin keyword
  Tree nas-ip-address-origin
  Default system-ip
  Options system-ip, isa-ip
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
password string
  Synopsis Password used in the RADIUS access requests
  Context configure aaa radius isa-policy string password string
  Tree password
  String Length 1 to 42
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
python-policy reference
  Synopsis Python policy used for modifying RADIUS messages
  Context configure aaa radius isa-policy string python-policy reference
  Tree python-policy
 

Reference

configure python python-policy string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
servers
  Synopsis Enter the servers context
  Context configure aaa radius isa-policy string servers
  Tree servers
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
access-algorithm keyword
  Synopsis Algorithm that accesses the RADIUS servers
  Context configure aaa radius isa-policy string servers access-algorithm keyword
  Tree access-algorithm
  Default direct
  Options direct, round-robin, hash-based, direct-priority
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
router-instance string
  Synopsis Routing instance
  Context configure aaa radius isa-policy string servers router-instance string
  Tree router-instance
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server [index] number
  Synopsis Enter the server list instance
  Context configure aaa radius isa-policy string servers server number
  Tree server
  Max. Instances 10
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[index] number
  Synopsis RADIUS server ID
  Context configure aaa radius isa-policy string servers server number
  Range 1 to 10
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
  Synopsis Administrative state of the ISA RADIUS server
  Context configure aaa radius isa-policy string servers server number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis IP address of the RADIUS server
  Context configure aaa radius isa-policy string servers server number ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree ip-address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
purpose
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Enter the purpose context
  Context configure aaa radius isa-policy string servers server number purpose
  Tree purpose
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
accounting
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Enable the accounting context
  Context configure aaa radius isa-policy string servers server number purpose accounting
  Tree accounting
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
udp-port number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis ISA RADIUS server accounting UDP port
  Context configure aaa radius isa-policy string servers server number purpose accounting udp-port number
  Tree udp-port
  Range 1 to 65535
  Default 1813
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
authentication
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Enable the authentication context
  Context configure aaa radius isa-policy string servers server number purpose authentication
  Tree authentication
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
udp-port number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis ISA RADIUS server authentication UDP port
  Context configure aaa radius isa-policy string servers server number purpose authentication udp-port number
  Tree udp-port
  Range 1 to 65535
  Default 1812
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
coa
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Enable the coa context
  Context configure aaa radius isa-policy string servers server number purpose coa
  Tree coa
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
udp-port number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis ISA RADIUS server change of authorization UDP port
  Context configure aaa radius isa-policy string servers server number purpose coa udp-port number
  Tree udp-port
  Range 1 to 65535
  Default 3799
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
secret string
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis Secret key to access the RADIUS server
  Context configure aaa radius isa-policy string servers server number secret string
  Tree secret
  String Length 1 to 115
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
source-address-range string
  Synopsis Starting IP address of the IP address range
  Context configure aaa radius isa-policy string servers source-address-range string
  Tree source-address-range
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
timeout number
  Synopsis Timeout for a response from the RADIUS server
  Context configure aaa radius isa-policy string servers timeout number
  Tree timeout
  Range 1 to 90
  Default 5
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
total-tries number
  Synopsis Maximum number of tries toward the same RADIUS server
  Context configure aaa radius isa-policy string servers total-tries number
  Tree total-tries
  Range 1 to 10
  Default 3
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
user-name
  Synopsis Enter the user-name context
  Context configure aaa radius isa-policy string user-name
  Tree user-name
 

Description

Commands in this context define the format of the username field in the UE authentication request sent to the RADIUS server. For authentication of IPv6 triggers (ICMPv6, DHCPv6, IPv6 data-trigger) the username format will always fall back to MAC only.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
format keyword
  Synopsis Username format in RADIUS message
  Context configure aaa radius isa-policy string user-name format keyword
  Tree format
  Default mac
  Options mac, mac-ip, dhcp-vendor, circuit-id
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
mac-format keyword
  Synopsis MAC address format when contacting RADIUS server
  Context configure aaa radius isa-policy string user-name mac-format keyword
  Tree mac-format
  Default alu
  Options alu, ieee
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2tp-accounting-policy [name] string
  Synopsis Enter the l2tp-accounting-policy list instance
  Context configure aaa radius l2tp-accounting-policy string
  Tree l2tp-accounting-policy
  Max. Instances 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[name] string
  Synopsis L2TP RADIUS accounting policy name
  Context configure aaa radius l2tp-accounting-policy string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
accounting-type
  Synopsis Enter the accounting-type context
  Context configure aaa radius l2tp-accounting-policy string accounting-type
  Tree accounting-type
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session boolean
  Synopsis Enable per-session accounting
  Context configure aaa radius l2tp-accounting-policy string accounting-type session boolean
  Tree session
  Default true
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
tunnel boolean
  Synopsis Enable per-tunnel accounting
  Context configure aaa radius l2tp-accounting-policy string accounting-type tunnel boolean
  Tree tunnel
  Default true
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
acct-tunnel-connection-fmt string
  Synopsis Accounting tunnel connection ASCII specification
  Context configure aaa radius l2tp-accounting-policy string acct-tunnel-connection-fmt string
  Tree acct-tunnel-connection-fmt
  String Length 1 to 253
  Default %n
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa radius l2tp-accounting-policy string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
include-radius-attribute
  Synopsis Enter the include-radius-attribute context
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute
  Tree include-radius-attribute
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
calling-station-id boolean
  Synopsis Include the Calling-Station-Id attribute
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute calling-station-id boolean
  Tree calling-station-id
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
nas-identifier boolean
  Synopsis Include the NAS-Identifier attribute
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-identifier boolean
  Tree nas-identifier
  Default false
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
nas-port
  Synopsis Enable the nas-port context
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port
  Tree nas-port
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
bit-spec string
  Synopsis RADIUS NAS-Port attribute
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port bit-spec string
  Tree bit-spec
  String Length 1 to 255
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
nas-port-id
  Synopsis Enable the nas-port-id context
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id
  Tree nas-port-id
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
prefix-string string
  Synopsis Prefix string added to RADIUS NAS-Port attribute
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id prefix-string string
  Tree prefix-string
  String Length 1 to 8
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
suffix keyword
  Synopsis NAS-Port-Id suffix type
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-id suffix keyword
  Tree suffix
  Options circuit-id, remote-id
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
nas-port-type
  Synopsis Enable the nas-port-type context
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-type
  Tree nas-port-type
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
type (keyword | number)
  Synopsis Value for RADIUS NAS-Port-Type attribute
  Context configure aaa radius l2tp-accounting-policy string include-radius-attribute nas-port-type type (keyword | number)
  Tree type
  Range 0 to 255
  Default rfc-aligned
  Options rfc-aligned
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
radius-server-policy reference
  Synopsis RADIUS server policy referenced
  Context configure aaa radius l2tp-accounting-policy string radius-server-policy reference
  Tree radius-server-policy
 

Reference

configure aaa radius server-policy string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
route-downloader [name] string
  Synopsis Enter the route-downloader list instance
  Context configure aaa radius route-downloader string
  Tree route-downloader
  Max. Instances 1
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[name] string
  Synopsis RADIUS route downloader name
  Context configure aaa radius route-downloader string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
  Synopsis Administrative state of this route downloader
  Context configure aaa radius route-downloader string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
base-user-name string
  Synopsis Prefix of the username used as access requests
  Context configure aaa radius route-downloader string base-user-name string
  Tree base-user-name
 

Description

This command sets the prefix for the username that is used for access requests. The actual name used is a concatenation of this string, the “-” (dash) character and a monotonically increasing integer.
  String Length 1 to 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-metric number
  Synopsis Default metric that RTM imported routes acquire
  Context configure aaa radius route-downloader string default-metric number
  Tree default-metric
  Range 0 to 254
  Default 2
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-tag number
  Synopsis Default tag of this route downloader
  Context configure aaa radius route-downloader string default-tag number
  Tree default-tag
  Range 0 to 4294967295
  Default 0
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa radius route-downloader string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
download-interval number
  Synopsis Wait time between consecutive runs of the process
  Context configure aaa radius route-downloader string download-interval number
  Tree download-interval
  Range 1 to 1440
  Default 720
  Units minutes
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
max-routes number
  Synopsis Maximum routes imported by this route downloader
  Context configure aaa radius route-downloader string max-routes number
  Tree max-routes
  Range 1 to 200000
  Default 200000
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
password string
  Synopsis Route downloader password for RADIUS access requests
  Context configure aaa radius route-downloader string password string
  Tree password
  String Length 1 to 71
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
radius-server-policy reference
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.
  Synopsis RADIUS server policy referenced
  Context configure aaa radius route-downloader string radius-server-policy reference
  Tree radius-server-policy
 

Reference

configure aaa radius server-policy string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
retry-interval
  Synopsis Enter the retry-interval context
  Context configure aaa radius route-downloader string retry-interval
  Tree retry-interval
 

Description

Commands in this context configure parameters of the retry interval timer, which is an exponential backoff timer. The system retries sending an Access Request message after the previous message was unanswered (for example, a RADIUS failure or ICMP port unreachable error).
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
max number
  Synopsis Maximum duration of the retry interval
  Context configure aaa radius route-downloader string retry-interval max number
  Tree max
  Range 1 to 1440
  Default 20
  Units minutes
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
min number
  Synopsis Minimum duration of the retry interval
  Context configure aaa radius route-downloader string retry-interval min number
  Tree min
 

Description

This command specifies the minimum duration of the retry interval. This duration grows exponentially after each sequential failure.
  Range 1 to 1440
  Default 10
  Units minutes
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server-policy [name] string
  Synopsis Enter the server-policy list instance
  Context configure aaa radius server-policy string
  Tree server-policy
  Max. Instances 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[name] string
  Synopsis RADIUS server policy name
  Context configure aaa radius server-policy string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
acct-on-off
  Synopsis Enable the acct-on-off context
  Context configure aaa radius server-policy string acct-on-off
  Tree acct-on-off
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
monitor reference
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Accounting on/off group name
  Context configure aaa radius server-policy string acct-on-off monitor reference
  Tree monitor
 

Reference

configure aaa radius acct-on-off-group string

 

Notes

The following elements are part of a choice: monitor or oper-state-change.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
oper-state-change
  Synopsis Enable the oper-state-change context
  Context configure aaa radius server-policy string acct-on-off oper-state-change
  Tree oper-state-change
 

Notes

The following elements are part of a choice: monitor or oper-state-change.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
group reference
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Operational state for a group
  Context configure aaa radius server-policy string acct-on-off oper-state-change group reference
  Tree group
 

Reference

configure aaa radius acct-on-off-group string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa radius server-policy string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
python-policy reference
  Synopsis Python policy for RADIUS packets to/from RADIUS servers
  Context configure aaa radius server-policy string python-policy reference
  Tree python-policy
 

Reference

configure python python-policy string

  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
servers
  Synopsis Enter the servers context
  Context configure aaa radius server-policy string servers
  Tree servers
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
access-algorithm keyword
  Synopsis Algorithm to select a RADIUS server from the pool
  Context configure aaa radius server-policy string servers access-algorithm keyword
  Tree access-algorithm
  Default direct
  Options direct, round-robin, hash-based
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
buffering
  Synopsis Enter the buffering context
  Context configure aaa radius server-policy string servers buffering
  Tree buffering
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
acct-interim
  Synopsis Enable the acct-interim context
  Context configure aaa radius server-policy string servers buffering acct-interim
  Tree acct-interim
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lifetime number
  Synopsis Time accounting message can be in retransmission buffer
  Context configure aaa radius server-policy string servers buffering acct-interim lifetime number
  Tree lifetime
  Range 1 to 25
  Units hours
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
max number
  Synopsis Maximum time between accounting message resend attempts
  Context configure aaa radius server-policy string servers buffering acct-interim max number
  Tree max
  Range 1 to 3600
  Units seconds
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
min number
  Synopsis Minimum time between accounting message resend attempts
  Context configure aaa radius server-policy string servers buffering acct-interim min number
  Tree min
  Range 1 to 3600
  Units seconds
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
acct-start
  Synopsis Enable the acct-start context
  Context configure aaa radius server-policy string servers buffering acct-start
  Tree acct-start
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lifetime number
  Synopsis Time accounting message can be in retransmission buffer
  Context configure aaa radius server-policy string servers buffering acct-start lifetime number
  Tree lifetime
  Range 1 to 25
  Units hours
 

Notes

This element is mandatory.
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
max number
  Synopsis Maximum time between accounting message resend attempts
  Context configure aaa radius server-policy string servers buffering acct-start max number
  Tree max
  Range 1 to 3600
  Units seconds
 

Notes

This element is mandatory.
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
min number
  Synopsis Minimum time between accounting message resend attempts
  Context configure aaa radius server-policy string servers buffering acct-start min number
  Tree min
  Range 1 to 3600
  Units seconds
 

Notes

This element is mandatory.
  Introduced 20.7.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
acct-stop
  Synopsis Enable the acct-stop context
  Context configure aaa radius server-policy string servers buffering acct-stop
  Tree acct-stop
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lifetime number
  Synopsis Time accounting message can be in retransmission buffer
  Context configure aaa radius server-policy string servers buffering acct-stop lifetime number
  Tree lifetime
  Range 1 to 25
  Units hours
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
max number
  Synopsis Maximum time between accounting message resend attempts
  Context configure aaa radius server-policy string servers buffering acct-stop max number
  Tree max
  Range 1 to 3600
  Units seconds
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
min number
  Synopsis Minimum time between accounting message resend attempts
  Context configure aaa radius server-policy string servers buffering acct-stop min number
  Tree min
  Range 1 to 3600
  Units seconds
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
health-check
  Synopsis Enter the health-check context
  Context configure aaa radius server-policy string servers health-check
  Tree health-check
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
down-timeout number
  Synopsis Wait time before declaring RADIUS server out-of-service
  Context configure aaa radius server-policy string servers health-check down-timeout number
  Tree down-timeout
  Range 1 to 340
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
test-account
  Synopsis Enter the test-account context
  Context configure aaa radius server-policy string servers health-check test-account
  Tree test-account
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
  Synopsis Administrative state of the health check
  Context configure aaa radius server-policy string servers health-check test-account admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
interval number
  Synopsis Time for test account to check health of RADIUS servers
  Context configure aaa radius server-policy string servers health-check test-account interval number
  Tree interval
  Range 1 to 60
  Default 3
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
password string
  Synopsis Test account password for RADIUS server health check
  Context configure aaa radius server-policy string servers health-check test-account password string
  Tree password
  String Length 1 to 115
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
user-name string
  Synopsis Username to send access requests to probe RADIUS server
  Context configure aaa radius server-policy string servers health-check test-account user-name string
  Tree user-name
  String Length 1 to 64
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
hold-down-time number
  Synopsis Hold time before reusing a RADIUS server that was down
  Context configure aaa radius server-policy string servers hold-down-time number
  Tree hold-down-time
  Range 30 to 86400
  Default 30
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ipv6-source-address string
  Synopsis Source address for IPv6 RADIUS datagrams
  Context configure aaa radius server-policy string servers ipv6-source-address string
  Tree ipv6-source-address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
retry-count number
  Synopsis Number of retries for contacting the RADIUS server
  Context configure aaa radius server-policy string servers retry-count number
  Tree retry-count
  Range 1 to 256
  Default 3
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
router-instance string
  Synopsis RADIUS routing instance
  Context configure aaa radius server-policy string servers router-instance string
  Tree router-instance
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server [server-index] number
  Synopsis Enter the server list instance
  Context configure aaa radius server-policy string servers server number
  Tree server
  Max. Instances 32
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[server-index] number
  Synopsis RADIUS server index
  Context configure aaa radius server-policy string servers server number
  Range 1 to 16
 

Notes

This element is part of a list key.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server-name string
  Synopsis RADIUS server name
  Context configure aaa radius server-policy string servers server number server-name string
  Tree server-name
  String Length 1 to 32
 

Notes

This element is mandatory.
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
source-address string
  Synopsis Source address of RADIUS messages
  Context configure aaa radius server-policy string servers source-address string
  Tree source-address
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
stickiness boolean
  Synopsis Allow stickiness in a multi-server application
  Context configure aaa radius server-policy string servers stickiness boolean
  Tree stickiness
  Default true
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
timeout number
  Synopsis Time until the next retry to the RADIUS server
  Context configure aaa radius server-policy string servers timeout number
  Tree timeout
  Range 1 to 340
  Default 5
  Units seconds
  Introduced 16.0.R4
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

wpp

  Synopsis Enter the wpp context
  Context configure aaa wpp
  Tree wpp
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
portal-group [group-name] string
  Synopsis Enter the portal-group list instance
  Context configure aaa wpp portal-group string
  Tree portal-group
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[group-name] string
  Synopsis Portal group name
  Context configure aaa wpp portal-group string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
  Synopsis Administrative state of the portal group
  Context configure aaa wpp portal-group string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure aaa wpp portal-group string description string
  Tree description
  String Length 1 to 80
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
portal [router-instance] string name string
  Synopsis Add a list entry for portal
  Context configure aaa wpp portal-group string portal string name string
  Tree portal
  Max. Instances 8
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
[router-instance] string
  Synopsis Router on which the portal is configured
  Context configure aaa wpp portal-group string portal string name string
 

Notes

This element is part of a list key.
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
name string
  Synopsis Web portal server name
  Context configure aaa wpp portal-group string portal string name string
  String Length 1 to 32
 

Notes

This element is part of a list key.
  Introduced 16.0.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
system-name string
  Synopsis System name used in WPP protocol messages
  Context configure aaa wpp system-name string
  Tree system-name
  String Length 1 to 16
  Introduced 16.0.R6
 

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR