JunosE 11.3.x Link Layer Configuration Guide
520
Configuration Method Using Subscriber Management Application
You can use the JunosE subscriber management application to configure and manage
IP subscribers associated with a dynamic bridged Ethernet interface column. The
subscriber management application uses an IP service profile to manage and authenticate
IP subscribers with RADIUS. An IP service profile contains user and password information,
and is used in a route map for subscriber management and to authenticate subscribers
with RADIUS.
In this configuration, the IP service profile provides the subscriber's authentication
parameters, and the subscriber management application acts as the authenticating layer
to obtain information from RADIUS for configuration of dynamic IP subscribers. To assign
the IP service profile to the interface profile from which the dynamic bridged Ethernet
interface is created, you use the bridge1483 service-profile command in Profile
Configuration mode.
If stateful SRP switchover is disabled or not running on your router, you can continue to
use the subscriber command to configure IP subscribers on dynamic bridged Ethernet
interfaces to support RADIUS authentication.
Alternatively, you can use the subscriber management application to create and configure
dynamic IP interfaces regardless of whether stateful SRP switchover is running on the
router. In addition, using subscriber management enables you to take advantage of
several useful features such as the IP inactivity timer.
In the event that an interface profile for a dynamic bridged Ethernet interface includes
the subscriber command to configure a local subscriber as well as the bridge1483
service-profile command to reference an IP service profile, the values specified with the
subscriber command take precedence. The router ignores the values in the IP service
profile in this case.
For details about using the subscriber management application to configure RADIUS
authentication for IP subscribers on dynamic bridged Ethernet interfaces, see "Configuring
Subscriber Management for IP Subscribers on Dynamic Bridged Ethernet Interfaces" on
page 557.
For more information about using the subscriber management application, see JunosE
Broadband Access Configuration Guide.
Placing Dynamic IP Routes in the Routing Table
If you want to insert a dynamic IP route into the routing table of the relevant virtual router
to point to the subscriber's subinterface, you can use the Framed-Route [22] RADIUS
attribute to do so. Defined by RFC 2865—Remote Authentication Dial In User Service
(RADIUS) (June 2000), the Framed-Route attribute can be returned in Access-Accept
messages to specify the route as follows:
Framed-Route = ipAddress/mask nextHop
For dynamic IP interfaces, the next hop might not be known when you create the user
record. In this case, use the value 0.0.0.0 for the next hop; the E Series router then assigns
the subinterface associated with the user as the next hop in the routing table.
Copyright © 2010, Juniper Networks, Inc.
Need help?
Do you have a question about the JUNOSE SOFTWARE FOR E SERIES 11.3.X - LINK LAYER CONFIGURATION GUIDE 2010-10-13 and is the answer not in the manual?
Questions and answers