This article applies to ScreenOS 4.0 and higher.
Your NetScreen device will need to be configured for RADIUS external admin authentication. For more information, go to How Do I Configure My Juniper Networks NetScreen Device for RADIUS Server External Admin Authentication?
To configure Microsoft IAS for RADIUS server external admin authentication, perform the following steps:
On the server, open the Internet Authentication Service.
Right-click Clients, and then click to select New Client. 
From the Add Client dialog box, configure the following settings, and then click Next.
- Friendly name: Enter the name of the NetScreen device.
- Protocol: Click to select RADIUS.
From the Add RADIUS Client dialog box, in the Client address (IP or DNS) text box, enter the local IP address of the NetScreen device. In the Client-Vendor drop-down menu, verify that RADIUS Standard is selected.
In the Shared Secret text box, enter a shared secret and then confirm it.
Click Finish.
Right-click Remote Access Policies, select New, and then click Remote Access Policy.
From the Remote Access Policy dialog box, enter a policy friendly name, and then click Next.
From the Add Remote Access Policy dialog box, click Add.
From the Select Attribute dialog box, click to select Client-IP-Address, and then click Add.
From the Client-IP-Address dialog box, enter the local IP address of the NetScreen device, and then click OK.
Click Next.
Click Grant remote access permission, and then click Next. 
Click Edit Profile.
Click the Authentication tab.
Click to clear MS-CHAP v2, and MS-CHAP, and then click to select PAP, SPAP.
Click the Advanced tab, and then click Add.
From the Add Attributes dialog box, click to select Vendor-Specific, and then click Add.
From the Multivalued Attribute Information dialog box, click Add.
Click to select Enter Vendor Code, and then enter 3224.
Click to select Yes. It Conforms., and then click Configure Attribute.
From the Configure VSA (RFC compliant) dialog box, configure the following settings:
- Vendor-assigned attribute number: 1
- Attribute format: Decimal
- Attribute value: 4
For information on the Vendor-assigned attribute number, go to What are the NetScreen Vendor Specific Attributes required for configuring RADIUS?. For information on the Attribute value, go to Differentiating between a User and an Administrator who has been authenticated via RADIUS. 
Click OK.
Click OK.
Click OK.
Click Close.
Click OK.
Click Finish.
