Subscriber Access Operation Flow
The subscriber access feature requires that a subscriber (for example, a DHCP client) send a discover message to the router interface to initialize dynamic configuration of that interface.
Figure 1 shows the flow of operations that occur when the router is using DHCP relay to enable access for a subscriber.
Figure 1: Subscriber Access Operation Flow

The following general sequence occurs during access configuration for a DHCP client:
- The client issues a DHCP discover message.
- The router DHCP component recognizes the DHCP message and adds the client to the router session database.
- If configured, the router issues an authorization request to the RADIUS server.
- The DHCP server issues an IP address for the client. When the address is relayed, the address is added to the router session database.
- RADIUS issues an authorization response to the router.
- The router adds RADIUS authorization information to the router session database.
- The router combines the dynamic profile with the RADIUS authorization information.
- The router alerts all internal applications involved with the subscriber access (for example, routing protocols, dynamic firewall, and dynamic Class of Service).
- The router passes the message through to the DHCP server.
- The router DHCP component sends an acknowledgement back to the client.
The subscriber now has access to the network and the authorized service.
