Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010 Configuration Manual page 556

JUNOSe 11.1.x Link Layer Configuration Guide
Configuration Method Using subscriber Command
When you use the subscriber command to configure IP subscribers on dynamic
bridged Ethernet over static ATM 1483 interface columns to support RADIUS
authentication, the subscriber command provides the subscriber's authentication
parameters. The static ATM 1483 subinterface acts as the authenticating layer that
establishes a session with RADIUS and passes the subscriber's locally configured
username and password information to the RADIUS server.
However, if your router is running stateful SRP switchover (high availability), the use
of the subscriber command in this configuration might suspend stateful SRP
switchover on the router or prevent stateful SRP switchover from becoming active.
To bypass this limitation, you can use the subscriber management application to
configure IP subscribers on dynamic bridged Ethernet interfaces.
Configuration Method Using Subscriber Management Application
You can use the JUNOSe subscriber management application to configure and manage
IP subscribers associated with a dynamic bridged Ethernet interface column. The
subscriber management application uses an IP service profile to manage and
authenticate IP subscribers with RADIUS. An IP service profile contains user and
password information, and is used in a route map for subscriber management and
to authenticate subscribers with RADIUS.
In this configuration, the IP service profile provides the subscriber's authentication
parameters, and the subscriber management application acts as the authenticating
layer to obtain information from RADIUS for configuration of dynamic IP subscribers.
To assign the IP service profile to the interface profile from which the dynamic bridged
Ethernet interface is created, you use the bridge1483 service-profile command in
Profile Configuration mode.
If stateful SRP switchover is disabled or not running on your router, you can continue
to use the subscriber command to configure IP subscribers on dynamic bridged
Ethernet interfaces to support RADIUS authentication.
Alternatively, you can use the subscriber management application to create and
configure dynamic IP interfaces regardless of whether stateful SRP switchover is
running on the router. In addition, using subscriber management enables you to take
advantage of several useful features such as the IP inactivity timer.
In the event that an interface profile for a dynamic bridged Ethernet interface includes
the subscriber command to configure a local subscriber as well as the bridge1483
service-profile command to reference an IP service profile, the values specified with
the subscriber command take precedence. The router ignores the values in the IP
service profile in this case.
For details about using the subscriber management application to configure RADIUS
authentication for IP subscribers on dynamic bridged Ethernet interfaces, see
"Configuring Subscriber Management for IP Subscribers on Dynamic Bridged Ethernet
Interfaces" on page 561.
524
About Configuring Dynamic Interfaces over Static ATM