Hi Henry, Framed-Routing is defined in the standard as a routing method for the user, when the user is a router to a network. Framed-Route is defined as providing routing information to be configured for the user on the NAS (GGSN in your scenario.) If you are using SBR to assign IP addresses, you would return the Framed-IP-Address attribute with the IP address being assigned.  I would recommend contacting the GGSN vendor for clarification on the attributes it requires.  In generall we will see the Framed-Route attribute being used to provide netmask information in situations where both Framed-IP-Address and Framed-Route are returned. ... View more

Hi Henry,   Framed-Route and Framed-Routing are both standard radius attributes defined in RFC 2865.  If you would like more information on these attributes, follow the link below.   http://tools.ietf.org/html/rfc2865   Does that help?  I'm not sure what information you're looking for on these attributes.   -Jon     ... View more

I haven't seen anything like this before, but I deal mostly with the carrier version. Are you using SQL at all?  What about LDAP?   Thanks,   Jon ... View more

You can use a profile for the users with a checklist attribute of NAS-Identifier = <ssid>   Through the Administrator GUI, just go to "Profiles" and Select "Add,"   This will bring up the Add Profile window.  Under the "Check List" tab select Add, then choose the NAS-Identifier attribute from the Attributes list and enter the SSID name in the String field.  Click Add, then close this window.  Give the profile a name, and click OK.   Repeat this process for each of the SSIDs you need to restrict.   When you have the profiles created, you can set the profile for the specific user through the authentication method you are using.   Hope this helps,   Jon   ... View more

Hi Terebok,   You can also use SBR Carrier to track volume and dynamically change a users profile using CoA and a CST accessor script.   -Jon ... View more

Hi Dan,   If these are separate authentication requests, you can authenticate the user with Username/Password and use EAP-TLS for machine authentication with the certificate. What method are you going to use for the user?    This does depend on how the device will work, but as long as it can trigger a machine auth after the User auth I don't see a problem.   Thanks,   Jon ... View more

Hi Stralex,   Can you share you data.xml and the sessioncontrol config?   If there are any sbr logs of the post attempt that would be helpful as well.   thanks,   Jon ... View more

That's a decent doc, but they missed one step.   In the dictiona.dcm file located in the radius directory you need to add the following:   @h3c.dct   Also, after making these changes you will need to restart the SBR service to read in the changes.   You also need to select the " H3C Enterprise Network Products" on the client in order to use the VSAs in a return list.   Hope that helps.     ... View more

The max current sessions is based on your license.  So if you have a license for 50k sessions you can manage 50k unique sessions.   Concurrency can be set a few different ways.  If you need to enforce concurrency you can do that by setting Apply-Login-Limits=yes in the radius.ini and then sending the Login-Limit attribute in a return list from a profile.  The Login-Limit attribute defines the number of allowed concurrent sessions.  If you aren't concerned with concurrency you can turn it off globally by setting  Apply-Login-Limits=no.   You can also use the %Login-Limit to map an LDAP or SQL attribute to the concurrency limit for SBR.   You should know that SBR Carrier has more advanced concurrency functionality that is a licensed feature. ... View more

Just for future reference you can get a lot of sizing information for SBR Carrier through the Performance and Tuning guide.   Here's the URL:   http://www.juniper.net/techpubs/en_US/sbr-carrier7.5.0/information-products/topic-collections/sw-sbrc-perf-tuning/index.html?book-sw-sbrc-perf-tuning.html ... View more

Does it resolve localhost and the configured IP? ... View more

make sure JuniperSBR2 can resolve to an IP address on the server.  /etc/hosts would work.   It looks like SBR isn't able to get an IP addtess to bind to which is causing the failure.                 02/26/2013 17:30:37: Failed to get IP addresses for JuniperSBR2. Error: -2 ... View more

Make sure the hostname can resolve to the interface addresses.  I've seen something similar before where the hostname resolution fails and adding an entry in /etc/hosts allow's SBR to start.     ... View more

The startup log would let us know more about what's failing to load when its starting.  Do you have the 20130226.log file?     ... View more

Do you have the startup log?  (20130226.log)   That'll give you an idea as to what's failing to load and what needs to be fixed in order to get radius to start.   ... View more

yum will pull in the list of dependencies that were identified as necessary in QA.  We only qualified Red Hat, so there's no telling what might be missing.       ... View more

Hi Muhammad,   I have seen this working in a few environments.  Are you trying to implement this?  Having trouble?   Take a look at the SessionControl module in the admin guide for more information on how to configure the module.   http://www.juniper.net/techpubs/en_US/sbr-carrier7.5.0/information-products/topic-collections/sbr-admin-guide-10/part-nine.html   Thanks,   Jon ... View more

My Only question is how do you have the connection defined in ODBC?  When SBR tries to connect to the database it connects to the ODBC driver.  The error you are getting in the SBR logs indicates that the ODBC driver can't find this DSN. ... View more

Hi Fahad,   It looks like SBR can't find the DSN name in the Windows SQL driver.  Can you make a successful connection with that DSN using ODBC?     ... View more

Hi Abdul,   You might be able to add capacity to the Oracle database by increasing MaxConcurrent in your configuration file in SBR.  This will add connections to the database and allow SBR to send more concurrent requests.     You should note that this will increase the load on the database server.   Jon ... View more

Hi Faizal,   These are REALLY good questions, but we need some more information.   1. What is the authentication method the users are going to use?  Native users?  LDAP? SQL? 2. Is the password Generator something to generate a user's initial password, and then require changing it?   COA messages will allow you to change a users profile on the NAS, DM is only a disconnect message ending the users session.     I'm not sure what you mean by expired user records, can you expand on that? ... View more

The minimum requirements listed in the .pdf will be sufficient.  If you anticipate growth in the network you should size the hardware accordingly.     ... View more

Hi Michael,   The links you provided are for two different versions of SBR.  If you need to you SBR Carrier edition you will need a substantially more robust system than you would for Enterprise edition.   Also, the requirements listed in these docs are minimum requirements.  If you are going to have a busy system then you will want to have a faster CPU.   Are you planning on using SBR Carrier or SBR Enterprise?  What is the expected transaction rate?   Is this running on Solaris, Windows, or Red Hat?   Thanks,   Jon ... View more

If you need to change the user privileges on the Huawei device, that will depend on the Huawei vendor specific attributes to assign the user privileges.     You should use the Huawei make/model in the client configuration, this should allow SBR to send the proper attributes to assign user privileges.     If you are using a native user for the authentication you can set the Return List with the Huawei attributes.  If you're using a different authentication method, you will use a profile for the Return List.   ... View more

Hi Faizal,   I would suggest opening a case with JTAC.  I don't know of any configuration that will change the password format for administrators.    This is definitely something that we should look into in more detail, so a JTAC case would be best.   Thanks,   Jon ... View more

Hi  Faizal,   I'm not sure md5 passwords are supported for administrator log-in, but I don't see why it wouldn't be.  If you are changing from _unix_ to md5, you may need to re-add the administrator so that SBR re-imports the information.     If this is a non-root administrator you just need to remove them from the administrators list in the admin gui, then add them back using the same method.   If this is the root user, you will need to create a file called initial_admin_account.dat which includes the username.  Then restart SBR and the file should disappear.    If that doesn't work you should open a case with JTAC so they can dig into it a bit more.   Thanks,   Jon ... View more

If you are installing SBR Carrier edition 7.4, the Linux libraries will be included in the Linux rpm package.  Also, you can use the SBR Ent/GEE Linux installer for Red Hat which will include all of the Linux libraries.   If you are using SBR Carrier 7.4 you will need to use Red Hat 6.1   For SBR Enterprise/Global Enterprise you will need to install Red Hat 4.   You can find the installers for these using the following URL:   Carrier http://www.juniper.net/support/products/carrier/carrier/#sw   Enterprise http://www.juniper.net/support/products/sbr/gee/ http://www.juniper.net/support/products/sbr/ee/ ... View more

Hi,   I'm not sure what version of SBR you are using, but we do not support SuSe linux with SBR.  If you need this to run in a Linux environment you will need to run Red Hat, and the version of Red Hat is dependent on the version of SBR you are running.   ... View more

Just remember that you will have limited performance and some modules may not load properly. With that being said, it should be fine for a lab environment. ... View more

Hi Asmash, For the expected performance numbers we generally recommend that you speak with your Sales team. They are the ones with that information. As far as tracking your TPS there are a couple of ways to do that. First you can enable statloging in the statlog.ini file, just set enable = 1 and restart radius. This will create a .statlog file that has statistics about SBR, including rate broken down by the job (auth, accounting, proxy). Another way would be through the GUI, Go to Statistics>system and you can select Authentication Accounting or proxy from the dropdown. The average is a per second average of the number of transactions. Finally you can enable SNMP and configure that to send rate statistic traps. ... View more