Understanding Juniper Steel-Belted Radius(SBR) Attributes

Radius attribute is one of the core part in radius protocol. it allow you to shape and control the subscriber behavior and give BRAS the ability to assign correct services to subscriber and information like routing, IP Address, VRF and other important info. Below I will illustrate type of attributes

1-Attribute without specific value (to be provided by Administrator)

image

Here you should provide value to this attribute. other examples are Framed-IP-Address, Service-Info, Framed-Routing..etc

 

*The Attribute ID is shown as a number beside the AVP in wireshark “(1)”

clip_image001

2-Attributes with pre-defined Values (You can assign only these values)

Example

clip_image002

3-Macro

clip_image003

clip_image004

-number 26 is appear in wireshark as “vendor specific” then the vid number . See the below capture

clip_image005

*Defining Values for attribute

clip_image006

Example 2 for macro

*Alcatel VSA PDF

clip_image007

Notes

1-VSA definition in radius packet should be 1 byte but in above vendor definition it’s two bytes so we need to change the definition to be type 2 not type 1

if you configure it as type 1(use byte1=2^8=255), you will have to use from 0 to 255.

-Alcatel use VSA range from 1792 to 2047

clip_image008

clip_image009

Data Types

1-String

2-int1

3-integer

4-stringnz

5-hexadecimal

6-ipaddr

7-ipv6addr

Advertisements

2 thoughts on “Understanding Juniper Steel-Belted Radius(SBR) Attributes

  1. Hi Basim,
    Sorry for bothering you, I am about to start using Juniper SBR, and there are a few things confused me a lot. While searching on the internet, i found your blog which is really helpful. So i Just want to know if you can help me out with some issues. Thanks in advanced.

    Angelia

Share you opinion to benefit others :)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s