Alcatel-Lucent 7750 SR OS Service Manual page 1034

VPRN Service Configuration Commands
subscriber sub-ident-string — Specifies an existing subscriber identification profile to be associated
profiled-traffic-only
Syntax [no] profiled-traffic-only
Context config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt>single-sub
Description
This command enables profiled traffic only for this SAP.
The no form of the command disables the command.
sub-ident-policy
Syntax sub-ident-policy sub-ident-policy-name
Context config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt
Description
This command associates a subscriber identification policy to this SAP. The subscriber identification
policy must be defined prior to associating the profile with a SAP in the config>subscriber-
mgmt>sub-ident-policy context.
Subscribers are managed by the system through the use of subscriber identification strings. A
subscriber identification string uniquely identifies a subscriber. For static hosts, the subscriber
identification string is explicitly defined with each static subscriber host.
For dynamic hosts, the subscriber identification string must be derived from the DHCP ACK message
sent to the subscriber host. The default value for the string is the content of Option 82 CIRCUIT-ID
and REMOTE-ID fields interpreted as an octet string. As an option, the DHCP ACK message may be
processed by a subscriber identification policy which has the capability to parse the message into an
alternative ASCII or octet string value.
Page 1034
with the static subscriber host. The subscriber identification profile is configured in the
config>subscr-mgmt>sub-ident-policy context. The subscriber information is used by the
VPRN SAP arp-reply-agent to determine the proper handling of received ARP requests from
subscribers.
• For VPRN SAPs with
static subscriber host's sub-ident-string is used to determine whether an ARP request
received on the SAP is sourced from a host belonging to the same subscriber as the
destination host. When both the destination and source hosts from the ARP request are
known on the SAP and the subscriber identifications do not match, the ARP request may be
forwarded to the rest of the VPRN destinations.
If the static subscriber host's sub-ident string is not defined, the host is not considered to
belong to the same subscriber as another host on the SAP.
If source or destination host is unknown, the hosts are not considered to belong to the same
subscriber. ARP messages from unknown hosts are subject to anti-spoof filtering rules
applied at the SAP.
If sub-ident is not enabled on the SAP arp-reply-agent, subscriber identification matching is
not performed on ARP requests received on the SAP.
ARP requests are never forwarded back to the same SAP or within the receiving SAP's Split
Horizon Group.
enabled with the optional sub-ident parameter, the
arp-reply-agent
7750 SR OS Services Guide