Configuring Subscriber Access

To configure subscriber access, perform the following tasks:

1. Configure the client access protocol.

   Configure one of the following DHCP access methods:

   • Configure DHCP local server.

     See Extended DHCP Local Server Overview.

   • Configure DHCP relay.

     See Extended DHCP Relay Agent Overview.

2. Configure subscriber authentication, accounting, and addressing.
   1. Configure RADIUS:
      1. Specify the RADIUS servers.

         See Specifying the RADIUS Authentication and Accounting Servers for Subscriber Access.

      2. Specify any optional server attributes.

         See Configuring RADIUS Server Options for Subscriber Access.

      3. (Optional) Configure the CoA feature for the RADIUS dynamic-request server to change or deactivate the service after login.

         See Configuring RADIUS-Initiated Dynamic Request Support.

      4. Configure subscriber accounting (RADIUS accounting).

         See Configuring How Accounting Statistics Are Collected for Subscriber Access.

   2. Configure addressing:
      • Configure address-assignment pools.

        See Configuring Address-Assignment Pools.

3. Create and manage dynamic profiles for access and service.
   1. Configure a basic dynamic profile.

      See Configuring a Basic Dynamic Profile.

   2. Configure a dynamic profile for access.

      See Configuring a Dynamic Profile for Client Access.

   3. Configure a dynamic profile for services.

      See Configuring a Dynamic Profile for Various Levels of Services.

   4. Configure the static subscriber interfaces to be referenced in the dynamic profile.

      See Configuring a Subscriber Interface with a Static VLAN Interface.

   5. Specify the interface-name and unit variables that the router uses to dynamically associate to a subscriber’s incoming interface.

      See Associating Dynamic Profiles with Statically Created Interfaces.

   6. Add, modify, or delete dynamic profile values to manage subscriber access and services.

      See Modifying Dynamic Profiles.

The router dynamically activates or modifies the subscriber service using the RADIUS configuration.

• When the subscriber logs in, the router dynamically activates the service.

  See Dynamic Service Activation During Login Overview.

• If RADIUS CoA has been configured, the router can dynamically modify the service for a subscriber.

  See RADIUS-Initiated Change of Authorization (CoA) Overview.

Figure 3 shows the configuration sequence you perform for subscriber access. It also shows the dynamic configuration performed by the router.

Figure 3: Subscriber Access Configuration Workflow

Related Topics

• Subscriber Access Overview
• Subscriber Access Support Limitations