Authenticating Subscribers On Dynamic Bridged Ethernet Over Dynamic Atm Interfaces - Juniper JUNOSE SOFTWARE 11.2.X - LINK LAYER CONFIGURATION GUIDE 7-7-2010 Configuration Manual

JunosE 11.2.x Link Layer Configuration Guide
632
Interfaces" on page 511, which describes the router behavior for static ATM 1483
subinterfaces.
Authenticating Subscribers on Dynamic Bridged Ethernet over Dynamic ATM
Interfaces
You can use either of the following methods to configure and manage RADIUS
authentication for IP subscribers on dynamic bridged Ethernet over dynamic ATM 1483
subinterfaces:
The atm atm1483 subscriber command
The subscriber management application
The atm atm1483 subscriber command does not support running stateful SRP switchover
(high availability) on the router. Therefore, the configuration method you choose depends
on whether stateful SRP switchover is or is not running on your router.
Configuration Method Using atm atm1483 subscriber Command
When you use the atm atm1483 subscriber command, as described in "atm atm1483
subscriber" on page 636, to configure IP subscribers on dynamic bridged Ethernet over
dynamic ATM 1483 subinterface columns to support RADIUS authentication, the atm
atm1483 subscriber command provides the subscriber's authentication parameters.
The dynamic ATM 1483 subinterface acts as the authenticating layer that establishes a
session with RADIUS and passes the subscriber's locally configured username and
password information to the RADIUS server.
However, if your router is running stateful SRP switchover (high availability), the use of
the atm atm1483 subscriber command in this configuration might suspend stateful SRP
switchover on the router or prevent stateful SRP switchover from becoming active. To
bypass this limitation, you can use the subscriber management application to configure
IP subscribers on dynamic bridged Ethernet interfaces.
Configuration Method Using Subscriber Management Application
You can use the JunosE subscriber management application to configure and manage
IP subscribers associated with a dynamic bridged Ethernet interface column. The
subscriber management application uses an IP service profile to manage and authenticate
IP subscribers with RADIUS. An IP service profile contains user and password information,
and is used in a route map for subscriber management and to authenticate subscribers
with RADIUS.
In this configuration, the IP service profile provides the subscriber's authentication
parameters, and the subscriber management application acts as the authenticating layer
to obtain information from RADIUS for configuration of dynamic IP subscribers. To assign
the IP service profile to the interface profile from which the dynamic bridged Ethernet
interface is created, you use the bridge1483 service-profile command in Profile
Configuration mode.
If stateful SRP switchover is disabled or not running on your router, you can continue to
use the atm atm1483 subscriber command to configure IP subscribers on dynamic
bridged Ethernet interfaces to support RADIUS authentication.
Copyright © 2010, Juniper Networks, Inc.