Clustered AAA redundancy support within a radius server
AssigneeJuniper Networks, Inc.
InventorsSubash Tirupachur Comerica, Dhiraj D. Ballal
Life of this patent
Estimating the term…
Abstract
In general, techniques are described for supporting interchassis redundancy (ICR) by a plurality of network access servers (NASes) that are members of an ICR. For example, techniques may be used to associate, within a RADIUS server, multiple NAS identifiers for the NASes with a single NAS identifier alias. The RADIUS server is configured to handle RADIUS protocol messages from any member of the ICR cluster as though the RADIUS protocol messages issued from a single NAS having the NAS identifier alias.
Claims25
A method comprising:
- storing, with a Remote Authentication Dial-In User Service (RADIUS) server for a service provider network, aliasing information that associates a plurality of redundant network access servers with a common network access server identifier alias;
- receiving, with the RADIUS server, a RADIUS protocol request message from a first network access server of the plurality of redundant network access servers for a session that enables connectivity between a subscriber and the service provider network;
- associating, with the RADIUS server, the RADIUS protocol request message with the network access server identifier alias based at least on the aliasing information;
- and
- accessing, with the RADIUS server, a session record for the session using the network access server identifier alias.
A server that provides authentication, authorization, and accounting services for a service provider network, the server comprising:
- a control unit having one or more processors;
- an alias table to store aliasing information that associates a plurality of redundant network access servers with a common network access server identifier alias;
- a network interface to receive a Remote Authentication Dial-In User Service (RADIUS) protocol request message from a first network access server of the plurality of redundant network access servers for a session that enables connectivity between a subscriber and the service provider network;
- an alias module to associate the RADIUS protocol request message with the network access server identifier alias based at least on the aliasing information,
- wherein the control unit accesses a session record for the session using the network access server identifier alias.
A non-transitory computer-readable medium comprising ins ructions for causing one or more programmable processors to:
- store, with a Remote Authentication Dial-In User Service (RADIUS) server for a service provider network, aliasing information that associates a plurality of redundant network access servers with a common network access server identifier alias;
- receive, with the RADIUS server, a RADIUS protocol request message from a first network access server of the plurality of redundant network access servers for a session that enables connectivity between a subscriber and the service provider network;
- associate, with the RADIUS server, the RADIUS protocol request message with the network access server identifier alias based at least on the aliasing information;
- and
- access, with the RADIUS server, a session record for the session using the network access server identifier alias.
Dependencies are inferred from the claim text.