Configuration Example Using Subscriber Command; Equivalent Configuration Example Using Ip Subscriber Management - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - LINK LAYER CONFIGURATION GUIDE 2010-10-13 Configuration Manual

JunosE 11.3.x Link Layer Configuration Guide
558

Configuration Example Using subscriber Command

The following configuration example illustrates the preceding procedure. The example
has two parts:
The first part of the example shows how to use the subscriber command to configure
RADIUS authentication for IP subscribers on a dynamic bridged Ethernet interface.
This configuration method does not support running stateful SRP switchover on the
router.
The second part of the example shows the commands required to re-create this
configuration using the IP subscriber management application. This configuration
method uses the bridge1483 service-profile command to assign the specified IP service
profile to the interface profile, and does support running stateful SRP switchover on
the router.
Assume that you have issued the following commands to configure IP subscribers on a
dynamic bridged Ethernet interface for RADIUS authentication. In this configuration, the
subscriber command provides the subscriber's authentication parameters, and the static
ATM 1483 subinterface is the authenticating layer. Keep in mind that the subscriber
command does not support running stateful SRP switchover on the router.
! Configure the interface profile from which to create a dynamic bridged Ethernet
! interface. Include the desired attributes (in this case, IGMP) and, optionally, the
! name of the route map used to configure the IP subscriber interface.
host1(config)#profile east
host1(config-profile)#ip igmp
host1(config-profile)#ip igmp immediate-leave
host1(config-profile)#ip igmp group limit 6
host1(config-profile)#ip route-map ip-subscriber eastRouteMap
host1(config-profile)#exit
! Configure the static ATM 1483 subinterface to assign the east profile, support
! RADIUS authentication, enable autodetection of the bridged Ethernet upper-layer
! encapsulation type, and define the ATM PVC.
host1(config)#interface atm 2/1.100 point-to-point
host1(config-subif)#profile bridgedEthernet east
host1(config-subif)#subscriber bridgedEthernet user westford001
domain xyzcorp.east password abc123
host1(config-subif)#auto-configure bridgedEthernet
host1(config-subif)#atm pvc 100 10 101 aal5snap 6400 0 0
host1(config-subif)#exit

Equivalent Configuration Example Using IP Subscriber Management

To achieve the same functionality without adversely affecting stateful SRP switchover
if it is running on the router, you can issue the following commands to use the subscriber
management feature to configure IP subscribers on a dynamic bridged Ethernet interface
using RADIUS. In this configuration, the IP service profile provides the subscriber's
authentication parameters, and the subscriber management application is the
authenticating layer. To assign the IP service profile to the interface profile, use the
bridge1483 service-profile command.
! Define an IP service profile containing the subscriber's username, domain,
and password.
Copyright © 2010, Juniper Networks, Inc.