About Configuring Radius For Dynamic Interfaces; Subscriber Command; Authenticating Subscribers On Dynamic Bridged Ethernet Over Static Atm Interfaces - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - LINK LAYER CONFIGURATION GUIDE 2010-10-13 Configuration Manual

About Configuring RADIUS for Dynamic Interfaces

Copyright © 2010, Juniper Networks, Inc.
Dynamic interfaces can be configured automatically through authentication and
authorization by the RADIUS server.
On ATM interfaces, you initially create the static portion of the interface column by
creating an ATM interface, ATM 1483 subinterface, and underlying ATM permanent virtual
circuit (PVC).

subscriber Command

For dynamic interfaces that do not have a PPP layer, such as IPoA, you can use the
subscriber command to configure an ATM 1483 subinterface to be authenticated
automatically by the RADIUS server. The subscriber command uses a RADIUS username
and optional password for identification and is available only for bridged Ethernet and
IPoA configurations. This command is used for dynamic encapsulations that do not
provide the authentication information remotely, as PPP does.
For dynamic interfaces with a PPP layer, the RADIUS username and password are obtained
from the remote client, and authentication is performed with the RADIUS server. The
attributes obtained from RADIUS can then be used to configure any higher-layer dynamic
interfaces, such as IP, that are built over PPP.
For more information about using the subscriber command, see "subscriber" on page 553.
Authenticating Subscribers on Dynamic Bridged Ethernet over Static ATM
Interfaces
You can use either of the following methods to configure and manage RADIUS
authentication for IP subscribers on dynamic bridged Ethernet over static ATM interfaces:
The subscriber command
The subscriber management application
The subscriber command does not support running stateful SRP switchover (high
availability) on the router. Therefore, the configuration method you choose depends on
whether stateful SRP switchover is or is not running on your router.
Configuration Method Using subscriber Command
When you use the subscriber command to configure IP subscribers on dynamic bridged
Ethernet over static ATM 1483 interface columns to support RADIUS authentication, the
subscriber command provides the subscriber's authentication parameters. The static
ATM 1483 subinterface acts as the authenticating layer that establishes a session with
RADIUS and passes the subscriber's locally configured username and password
information to the RADIUS server.
However, if your router is running stateful SRP switchover (high availability), the use of
the subscriber command in this configuration might suspend stateful SRP switchover
on the router or prevent stateful SRP switchover from becoming active. To bypass this
limitation, you can use the subscriber management application to configure IP subscribers
on dynamic bridged Ethernet interfaces.
Chapter 17: Configuring Dynamic Interfaces
519