Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Access Profiles and Service Profiles Overview

    Dynamic profiles enable you to configure parameters that enable access and services to subscribers.

    Access profiles, also known as client profiles, contain the parameters to grant access and provide basic service to a subscriber during initial login. By configuring the access profile with Junos OS predefined variables, you also enable the service to be activated for those subscribers at login. The RADIUS variables in an access profile map to one or more VSAs.

    Service profiles contain parameters that activate or deactivate services for a subscriber. You can apply a service profile with an access profile at login, or apply the service profile separately to modify a service. A service profile maps to a Service VSA.

    Functionality Supported in Access and Service Profiles

    The types of variables, expressions, and default values that you can use depends on the type of dynamic profile.

    Table 1 lists the types of variables supported by access profiles and service profiles.

    Table 1: Types of Variables Supported in Dynamic Profiles

    Type of Dynamic Profile

    Junos OS Predefined Variable (Local)

    Junos OS Predefined Variable (RADIUS)

    User-Defined Variable

    Access Profile

    Yes

    Yes

    Yes

    Service Profile

    Yes

    No

    Yes

    Table 2 lists the default values, expressions, and unique identifiers supported by access profiles and service profiles.

    Table 2: Default Values and Expressions Supported in Dynamic Profiles

    Type of Dynamic Profile

    Default Values

    Expressions

    Unique Identifiers

    Access Profile

    Yes (RADIUS predefined variables only)

    No

    Yes (Schedulers and Scheduler maps only)

    Service Profile

    Yes (User-defined variables only)

    Yes (Service activation only)

    Yes (Firewall filters only)

    Published: 2013-02-11