Description

Customer may met below authd error message:

Mar 5 02:01:38 2024 mx authd[84255]: %DAEMON-3: Framed-Route parsing error, string = xxx, user = User, session-id:xxxx

Symptoms

From authd traceoption, the radius server returned RADIUS IETF Attributes 22(Framed-Route) is not compatible with MX. 

 

Mar 6 11:28:27.840100 processRadiusAttrib22: wholeString: [xxxx]
Mar 6 11:28:27.840131 No network mask found. Discarding framed route
Mar 6 11:28:27.840138 Framed-Route parsing error, string = xxxx, user = User, session-id:xxxx
Mar 6 11:28:27.840178 radius-access-accept: Framed-Route received: xxxx

Solution

According to below link:

https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/topic-map/radius-std-attributes-vsas-support.html

RADIUS IETF Attributes 22(Framed-Route):

String that provides routing information to be configured for the user on the NAS in the format:

<addr>[/<maskLen>] [<nexthop> [<cost>]] [tag <tagValue>] [distance <distValue>]

 

For example:

Framed-Route = "192.168.0.0/24 192.168.0.1"

 

Other vendor BRAS may use IETF Attributes 22 in different format.

For this reason, radius server may returned this attributes with MX unsupported format.

If MX has not used this IETF Attributes, we can set below knob to ignore this attribute.

#set access profile radius-profile radius attributes ignore standard-attribute 22

Modification History

2024-03-06 : Article Created