When an RSR Router Functioning as a LNS Is Interconnected to the AAA Server, If Firewall Is Configured in Between, Which Ports Need to Be Enabled on the Firewall?

When an RSR Router Functioning as a LNS Is Interconnected to the AAA Server, If Firewall Is Configured in Between, Which Ports Need to Be Enabled on the Firewall?

Packets involved in the communication between the LNS and the AAA server are mainly RADIUS packets, including authentication packets, accounting packets, and packets for forcing users to go offline. The ports used for processing such packets are as follows:

Authentication packets:

access-request: The adopted protocol is User Datagram Protocol (UDP), the source port is any, and the destination port is 1812.

access-accept: The adopted protocol is UDP,the source port is 1812, and the destination port is the source port that initiates a request.

Accounting packets:

accounting-request: The adopted protocol is UDP, the source port is any, and the destination port is 1813.

accounting-response: The adopted protocol is UDP, the source port is 1813, and the destination port is the source port that initiates a request.

Packets for forcing users to go offline:

disconnect-request: The adopted protocol is UDP, the source port is any, and the destination port is 3799.

disconnect-ack: The adopted protocol is UDP, the source port is 3799, and the destination port is the source port that initiates a request.