Juniper JUNOS OS 10.4 - RELEASE NOTES REV 6 Release Note page 34

JUNOS OS 10.4 Release Notes
34
[Subscriber Access]
Dynamic reconfiguration of extended DHCPv6 local server clients (MX Series
routers)—You can enable dynamic reconfiguration of DHCPv6 clients to enable the
extended DHCPv6 local server to initiate a client update without waiting for the client
to initiate a request. In subscriber management scenarios, a client may need to be
quickly updated with its network address and configuration in the event of server
changes, such as a restructuring of the service provider's addressing scheme or a change
in the local server IP addresses that were provided to the clients. Include the
statement to enable dynamic reconfiguration with default values for all DHCPv6 clients
at the
[edit system services dhcp-local-server dhcpv6]
clients serviced by a specified group of interfaces at the
dhcp-local-server dhcpv6 group group-name]
Optional statements enable you to modify default reconfiguration values: The number
of reconfiguration attempts, the interval between the first and second attempts, what
happens to the client if all reconfiguration attempts fail, what happens to the client in
the event of a RADIUS-initiated disconnect, whether to bind clients that do not support
reconfiguration, and whether to send an authentication token. Issue the
command to initiate reconfiguration. Use the
server reconfigure
and
binding show dhcpv6 server statistics
interactions.
[Subscriber Access]
Support for ascend data filters (RADIUS attribute 242) in subscriber firewall filters
(MX Series routers)—You can now configure subscriber management to use ascend
data filters (ADFs) to create and apply firewall filters to subscriber traffic. The ADF
creates a rule that specifies match conditions on the source and destination IP address,
the protocol, and the source and destination port, and also specifies the action to
perform (such as accept or discard). The ADF rule also specifies the filter direction,
and can optionally provide traffic class and policer information. The router supports
ADF rules for family types inet and inet6.
Subscriber management uses dynamic profiles to obtain the ADF rules from the RADIUS
server. You can use the new Junos OS predefined variables (
family inet and
$junos-adf-rule-v6
or you can statically create ADF rules.
To configure ADF support, use the following stanza at the
profile-name interfaces interface-name unit logical-unit-number family family]
level:
filter {
adf {
counter;
input-precedence precedence;
output-precedence precedence;
rule rule-value;
}
}
[Subscriber Access, System Basics and Services Command Reference]
hierarchy level, and for DHCPv6
[edit system services
hierarchy level.
commands to monitor client-server
for inet6) to map ADF rules to Junos OS functionality,
[edit dynamic-profiles
Copyright © 2011, Juniper Networks, Inc.
reconfigure
request dhcpv6
show dhcpv6 server
for
$junos-adf-rule-v4
hierarchy