The subscriber access feature requires that a subscriber
(for example, a DHCP client) send a discover message to the router
interface to initialize dynamic configuration of that interface.
Figure 2 shows the flow of operations that occur when the router is using
DHCP relay to enable access for a subscriber.
Figure 2: Subscriber Access
Operation Flow
The following general sequence occurs during
access configuration for a DHCP client:
The client issues a DHCP discover message.
The router DHCP component recognizes the DHCP message
and adds the client to the router session database.
If configured, the router issues an authorization
request to the RADIUS server.
The DHCP server issues an IP address for the client.
When the address is relayed, the address is added to the router session
database.
RADIUS issues an authorization response to the
router.
The router adds RADIUS authorization information
to the router session database.
The router combines the dynamic profile with the
RADIUS authorization information.
The router alerts all internal applications involved
with the subscriber access (for example, routing protocols, dynamic
firewall, and dynamic Class of Service).
The router passes the message through to the DHCP
server.
The router DHCP component sends an acknowledgement
back to the client.
The subscriber now has access to the network and the authorized
service.