[
Contents]
[
Prev]
[
Next]
[
Index]
[
Report an Error]
Table of Contents
- About This Guide
-
- JUNOS Documentation and Release Notes
- Objectives
- Audience
- Supported Routing Platforms
- Using the Indexes
- Using the Examples in This Manual
- Documentation Conventions
-
- Documentation Feedback
- Requesting
Technical Support
- Managing Access Networks
-
- Subscriber Access Overview
-
- Subscriber Access Overview
-
- Subscriber Access Terms and Acronyms
- Subscriber Access Environment
- Relationship Between Subscribers and Interfaces in an Access
Network
- Subscriber Access Support Limitations
-
- Platform Support
- Interface Support
- DPC Support
- Subscriber Access Licensing Overview
- Subscriber Access Operation Flow
- Activating Subscribers and Managing Services in an Access Network
-
- Components of a Dynamic Profile
- Router Predefined Variables Used by Dynamic Profiles
- Configuring Subscriber Access
- Subscriber Management
-
- Subscriber Management Overview
-
- Subscriber Access Management Overview
- Configuring the AAA Service Framework for Subscriber Access
-
- AAA Service Framework Overview
- Configuring Router Interaction with RADIUS Servers
- Configuring Authentication and Accounting Parameters for Subscriber
Access
- Specifying the Authentication and Accounting Methods for Subscriber
Access
- Configuring How Accounting Statistics Are Collected for Subscriber
Access
- Configuring RADIUS Server Parameters for Subscriber Access
-
- Specifying RADIUS Authentication and Accounting Servers for
Subscriber Access
- Configuring RADIUS Server Options for Subscriber Access
- Configuring How RADIUS Attributes Are Used for Subscriber Access
- Using RADIUS Dynamic Requests for Subscriber Access Management
- Dynamic Service Activation During Login Overview
- RADIUS-Initiated Change of Authorization (CoA) Overview
-
- CoA Messages
- Qualifications for Change of Authorization
- Message Exchange
- RADIUS-Initiated Disconnect Overview
-
- Disconnect Messages
- Qualifications for Disconnect
- Message Exchange
- Configuring RADIUS-Initiated Dynamic Request Support
- Verifying and Managing the RADIUS Dynamic-Request Feature
- RADIUS Attributes and Juniper Networks VSAs Supported by the
AAA Service Framework
- RADIUS IETF Attributes Supported by the AAA Service Framework
- Juniper Networks VSAs Supported by the AAA Service Framework
- Error-Cause Codes (RADIUS Attribute 101) for Dynamic Requests
- Attaching Access Profiles
- Verifying and Managing Subscriber AAA Information
- Configuring Address-Assignment Pools for Subscriber Access
-
- Address-Assignment Pools Overview
- Configuring Address-Assignment Pools Overview
- Configuring an Address-Assignment Pool Name and Network Address
- Configuring a Named Address Range for Dynamic Address Assignment
- Configuring Static Address Assignment
- Configuring DHCP Client-Specific Attributes
- DHCP Attributes for Address-Assignment Pools
- Address-Assignment Pools Licensing Requirements
- Tracing Address-Assignment Pool Processes
-
- Configuring the Address-Assignment Pool Trace Log Filename
- Configuring the Number and Size of Address-Assignment Pool
Processes Log Files
- Configuring Access to the Log File
- Configuring a Regular Expression for Lines to Be Logged
- Configuring the Trace Operation
- Configuring DHCP Local Server for Subscriber Access
-
- Extended DHCP Local Server Overview
-
- Interaction Among the DHCP Client, Extended DHCP Local Server,
and Address-Assignment Pools
- Providing DHCP Client Configuration Information
- Minimal Configuration for Clients
- DHCP Local Server and Address-Assignment Pools
- DHCPv6 Local Server Overview
- Dynamic Profile Attachment to DHCP Subscriber Interfaces Overview
-
- Multiple DHCP Subscribers Sharing the Same VLAN Logical Interface
- Primary Dynamic Profile
- Using External AAA Authentication Services with DHCP
- Configuring How the Extended DHCP Local Server Determines Which
Address-Assignment Pool To Use
- Grouping Interfaces with Common DHCP Configurations
- Group-Specific DHCP Local Server Options
- Overriding Default DHCP Local Server Configuration Settings
-
- Specifying the Maximum Number of DHCP Clients Per Interface
- Disabling ARP Table Population
- DHCP Auto Logout Overview
-
- Auto Logout Overview
- How DHCP Identifies and Releases Clients
- Option 60 and Option 82 Requirements
- Automatically Logging Out DHCP Clients
- Attaching Dynamic Profiles to DHCP Subscriber Interfaces
-
- Attaching a Dynamic Profile to All DHCP Subscriber Interfaces
- Attaching a Dynamic Profile to a Group of DHCP Subscriber Interfaces
- Configuring Passwords for Usernames
- Creating Unique Usernames for DHCP Clients
- Verifying and Managing DHCP Local Server Configuration
- Tracing Extended DHCP Operations
-
- Configuring the Extended DHCP Log Filename
- Configuring the Number and Size of Extended DHCP Log Files
- Configuring Access to the Extended DHCP Log File
- Configuring a Regular Expression for Extended DHCP Lines to
Be Logged
- Configuring the Extended DHCP Tracing Flags
- Configuring DHCP Relay for Subscriber Access
-
- Extended DHCP Relay Agent Overview
-
- Interaction Among the DHCP Relay Agent, DHCP Client, and DHCP
Servers
- DHCP Relay Proxy Overview
-
- Interaction Among DHCP Relay Proxy, DHCP Client, and DHCP Servers
- Access and Access-Internal Routes for DHCP Subscriber Management
- Configuring Dynamic Access Routes for DHCP Subscriber Management
- Configuring Dynamic Access-Internal Routes for DHCP Subscriber
Management
- Verifying the Configuration of Access and Access-Internal Routes
for DHCP Subscriber Management
- Dynamic Profile Attachment to DHCP Subscriber Interfaces Overview
-
- Multiple DHCP Subscribers Sharing the Same VLAN Logical Interface
- Primary Dynamic Profile
- Using External AAA Authentication Services with DHCP
- Grouping Interfaces with Common DHCP Configurations
- Group-Specific DHCP Relay Options
- Overriding the Default DHCP Relay Configuration
-
- Overwriting giaddr Information
- Replacing the DHCP Relay Request and Release Packet Source
Address
- Overriding Option 82 Information
- Using Layer 2 Unicast Transmission for DHCP Packets
- Trusting Option 82 Information
- Disabling ARP Table Population
- Specifying the Maximum Number of DHCP Clients Per Interface
- Disabling DHCP Relay
- DHCP Auto Logout Overview
-
- Auto Logout Overview
- How DHCP Identifies and Releases Clients
- Option 60 and Option 82 Requirements
- DHCP Relay Agent Option 82 Value for Auto Logout
- Automatically Logging Out DHCP Clients
- Using Option 60 Information to Forward Client Traffic to Specific
DHCP Servers
-
- Using Matching Option 60 Strings to Process DHCP Client
Traffic
- Using Nonmatching Option 60 Strings to Process DHCP Client
Traffic
- Displaying a Count of Discarded DHCP Packets with Option 60
Information
- Enabling and Disabling Insertion of Option 82 Information
-
- Configuring Agent Circuit ID Information
- Configuring an Option 82 Prefix
- Using a Textual Description in Option 82
- Configuring Server Groups
- Configuring Active Server Groups
- Enabling DHCP Relay Proxy Mode
- Attaching Dynamic Profiles to DHCP Subscriber Interfaces
-
- Attaching a Dynamic Profile to All DHCP Subscriber Interfaces
- Attaching a Dynamic Profile to a Group of DHCP Subscriber Interfaces
- Verifying and Managing DHCP Relay Configuration
- Tracing Extended DHCP Operations
-
- Configuring the Extended DHCP Log Filename
- Configuring the Number and Size of Extended DHCP Log Files
- Configuring Access to the Extended DHCP Log File
- Configuring a Regular Expression for Extended DHCP Lines to
Be Logged
- Configuring the Extended DHCP Tracing Flags
- Configuring PPP for Subscriber Access
-
- Dynamic Profile Attachment to PPP Subscriber Interfaces Overview
- Attaching Dynamic Profiles to PPP Subscriber Interfaces
- Configuring Subscriber Secure Policy Traffic Mirroring
-
- Subscriber Secure Policy Overview
-
- Subscriber Secure Policy Terms
- Subscriber Secure Policy Licensing Requirements
- Subscriber Secure Policy Traffic Mirroring Architecture
- RADIUS Attributes Used for Subscriber Secure Policy
-
- RADIUS Attributes Used as Traffic Mirroring Triggers
- RADIUS-Based Mirroring Attributes
- Considerations When Using RADIUS Attributes for Subscriber
Secure Policy
- Configuring Subscriber Secure Policy Mirroring Overview
- Guidelines for Configuring Subscriber Secure Policy Mirroring
on the Flow-Tap Service
- Configuring Flow-Tap Service Support for Subscriber Secure
Policy Mirroring
- Configuring RADIUS Server Support for Subscriber Secure Policy
Mirroring
- Terminating Subscriber Secure Policy Mirroring Sessions
- AAA and Remote Subscriber Access Configuration Examples
-
- Example: Configuring RADIUS-Based Subscriber Authentication
and Accounting
- Example: Configuring an Address-Assignment Pool
- Example: Minimum Extended DHCP Local Server Configuration
- Example: Extended DHCP Local Server Configuration with Optional
Pool Matching
- Example: Minimum DHCP Relay Agent Configuration
- Example: DHCP Relay Agent Configuration with Multiple Clients
and Servers
- Example: Extended DHCPv6 Local Server Configuration
- Example: Using Option 60 Strings to Forward DHCP Client
Traffic
- Example: Using Option 60 Strings to Drop DHCP Client Traffic
- Summary of AAA and Remote Subscriber Access Statements
-
- access
- access-internal
- accounting
- accounting-port
- accounting-server
- accounting-session-id-format
- accounting-stop-on-access-deny
- accounting-stop-on-failure
- active-server-group
- address-assignment
- aggregate-clients
- aggregate-clients
- always-write-giaddr
- always-write-option-82
- attributes
- authentication
- authentication
- authentication-order
- authentication-server
- boot-file
- boot-server
- circuit-id
- circuit-id
- circuit-type
- circuit-type
- client-discover-match
- client-discover-match
- client-id
- default-local-server-group
- default-relay-server-group
- delimiter
- delimiter
- dhcp-attributes
- dhcp-local-server
- dhcp-relay
- dhcpv6
- disable-relay
- domain-name
- domain-name
- domain-name
- drop
- dynamic-profile
- dynamic-profile
- dynamic-profile
- ethernet-port-type-virtual
- exclude
- forwarding-class
- grace-period
- group
- group
- hardware-address
- host
- ignore
- immediate-update
- interface
- interface
- interface-client-limit
- interface-client-limit
- interface-description-format
- interfaces
- ip-address
- ip-address-first
- layer2-unicast-replies
- local-server-group
- logical-system-name
- logical-system-name
- mac-address
- mac-address
- mac-address
- maximum-lease-time
- metric
- name-server
- nas-identifier
- nas-port-extended-format
- netbios-node-type
- network
- next-hop
- no-arp
- no-arp
- option
- option-60
- option-60
- option-82
- option-82
- option-82
- option-82
- option-match
- options
- order
- override-nas-information
- overrides
- overrides
- password
- password
- pool
- pool-match-order
- port
- preference
- prefix
- profile
- proxy-mode
- qualified-next-hop
- radius
- radius-flow-tap
- radius-server
- range
- relay-agent-interface-id
- relay-agent-remote-id
- relay-agent-subscriber-id
- relay-option-60
- relay-option-82
- relay-server-group
- remote-id
- replace-ip-source-with
- retry
- revert-interval
- route
- route
- router
- routing-instance
- routing-instance-name
- routing-instance-name
- secret
- server-group
- source-address
- source-ipv4-address
- statistics
- tftp-server
- timeout
- traceoptions
- traceoptions
- traceoptions
- trust-option-82
- update-interval
- use-interface-description
- use-primary
- use-primary
- user-prefix
- user-prefix
- username-include
- username-include
- vendor-option
- vlan-nas-port-stacked-format
- wins-server
- Diameter Base Protocol and Applications for Subscriber
Access
-
- Diameter Base Protocol Overview
-
- Diameter Base Protocol Overview
- Configuring Diameter Base Protocol
-
- Configuring Diameter
- Configuring the Origin Attributes of the Diameter Instance
- Configuring Diameter Peers
- Configuring Diameter Network Elements
- Tracing Diameter Base Protocol Processes
-
- Configuring the Diameter Base Protocol Trace Log Filename
- Configuring the Number and Size of Diameter Base Protocol IP
Log Files
- Configuring Access to the Diameter Base Protocol Log File
- Configuring a Regular Expression for Diameter Base Protocol
Lines to Be Logged
- Configuring the Diameter Base Protocol Tracing Flags
- Troubleshooting Diameter Network Configuration
- Troubleshooting Diameter Network Connectivity
- Verifying Diameter Node, Instance, and Route Information
- Verifying and Managing Diameter Function Information
- Verifying and Managing Diameter Peer Information
- Verifying Diameter Network Element Information
- Summary of Diameter Base Protocol Statements
-
- address
- connect-actively
- destination
- diameter
- forwarding
- function
- host
- logical-system
- metric
- network-element
- origin
- peer
- peer
- port
- priority
- realm
- route
- routing-instance
- traceoptions
- JSRC and Juniper Networks Session Resource Control (SRC) Overview
-
- Juniper Networks Session and Resource Control (SRC) and JSRC
Overview
-
- Hardware Requirements for JSRC for Subscriber Access
- Diameter Messages Exchanged by JSRC and the SAE
- Understanding Diameter AVPs
- Understanding JSRC-SAE Interactions
-
- Subscriber Login
- Subscriber Service Activation and Deactivation
- Subscriber Resynchronization
- Subscriber Session Terminated by the SAE
- Subscriber Logout
- Configuring JSRC for Subscriber Access
-
- Configuring JSRC
- Configuring the JSRC Partition
- Assigning a Partition to JSRC
- Authorizing Subscribers with JSRC
- Provisioning Subscribers with JSRC
- Summary of JSRC Statements
-
- authorization-order
- destination-host
- destination-realm
- diameter-instance
- jsrc
- jsrc-partition
- partition
- provisioning-order
- Subscribers on Static Interfaces
-
- Subscribers on Static Interfaces Overview
- Configuring Subscribers over Static Interfaces
-
- Configuring Subscribers over Static Interfaces
- Tracing Static Subscriber Operations
-
- Configuring the Static Subscribers Trace Log Filename
- Configuring the Number and Size of Static Subscribers Log Files
- Configuring Access to the Static Subscribers Log File
- Configuring a Regular Expression for Static Subscriber Lines
to Be Logged
- Configuring the Static Subscribers Tracing Flags
- Specifying the Static Subscriber Global Access Profile
- Specifying the Static Subscriber Global Dynamic Profile
- Enabling Multiple Subscribers on a VLAN Logical Interface for
All Static Subscribers
- Configuring the Static Subscriber Global Authentication Password
- Configuring the Static Subscriber Global Username
- Creating a Static Subscriber Group
- Specifying the Static Subscriber Group Access Profile
- Specifying the Static Subscriber Group Dynamic Profile
- Enabling Multiple Subscribers on a VLAN Logical Interface for
a Static Subscriber Group
- Configuring the Static Subscriber Group Authentication Password
- Configuring the Static Subscriber Group Username
- Forcing a Static Subscriber to Be Logged Out
- Resetting the State of an Interface for Static Subscriber Login
- Forcing a Group of Static Subscribers to Be Logged Out
- Resetting the State of an Interface Group for Static Subscriber
Login
- Static Subscribers for Subscriber Access Examples
-
- Example: Configuring Static Subscribers for Subscriber Access
- Summary of Static Subscriber Statements
-
- access-profile
- access-profile
- aggregate-clients
- aggregate-clients
- authentication
- authentication
- domain-name
- domain-name
- dynamic-profile
- dynamic-profile
- group
- interface
- interface
- interface
- logical-system-name
- logical-system-name
- password
- password
- routing-instance-name
- routing-instance-name
- static-subscribers
- traceoptions
- username-include
- username-include
- user-prefix
- user-prefix
- Mobile IP Access
-
- Mobile IP Overview
-
- Mobile IP Home Agent Elements and Behavior
- Mobile IP Registration
-
- Home Address Assignment
- Authentication
- Reauthentication
- AAA Authentication
- Local Authentication
- Accounting
- Mobile IP Routing and Forwarding
- Mobile IP in the WiMAX Environment
- Configuring Mobile IP
-
- Configuring Mobile IP
- Tracing Mobile IP Operations
-
- Configuring the Mobile IP Trace Log Filename
- Configuring the Number and Size of Mobile IP Log Files
- Configuring Access to the Mobile IP Log File
- Configuring a Regular Expression for Mobile IP Lines to Be
Logged
- Configuring the Mobile IP Tracing Flags
- Configuring the Mobile IP Authentication Method
- Configuring the Mobile IP Home Agent
- Configuring the Local Authentication Attributes for the Mobile
Node
- Configuring Accounting for Mobile IP Subscribers
- Configuring Dynamic Home Assignment for the Mobile Node
- Configuring the Access Type for Mobile IP
- Summary of Mobile IP Statements
-
- access-type
- algorithm
- authenticate
- dynamic-home-assignment
- enable-service
- entity-type
- generic
- home-agent
- home-agent
- home-agent-address
- key
- mobile-ip
- nai
- order
- peer
- registration-lifetime
- replay-method
- revocation-required
- spi
- statistics
- timestamp-tolerance
- traceoptions
- wimax
- virtual-network
- Dynamic Profiles for Access and Services
-
- Dynamic Profiles Overview
-
- Dynamic Profiles Overview
-
- Dynamic Profile Interface Support
- What Dynamic Profiles Do
- How Dynamic Profiles Work
- Dynamic Variables Overview
-
- How Dynamic Variables Work
- JUNOS Predefined Variables
- User-Defined Variables
- Configuring Dynamic Profiles
-
- Configuring a Basic Dynamic Profile
- Configuring Predefined Internal Dynamic Variables in Dynamic
Profiles
- Configuring User-Defined Dynamic Variables in Dynamic Profiles
- Configuring a Dynamic Profile for Client Access
- Configuring a Dynamic Profile for Various Levels of Services
- Modifying Dynamic Profiles
- Dynamic Profile Examples
-
- Example: IGMP Dynamic Profile
- Example: Firewall Dynamic Profile
- Example: Minimum PPPoE Dynamic Profile
- Example: Subscriber Secure Policy Dynamic Profile
- Summary of Dynamic Profile Statements
-
- attribute
- default-value
- dynamic-profiles
- mandatory
- radius
- routing-instances
- tag
- variables
- vendor-id
- vlan-id
- vlan-tags
- Dynamic VLANs
-
- Dynamic VLAN Overview
-
- Dynamic 802.1Q VLAN Overview
-
- Static VLAN Configuration
- Dynamic VLAN Configuration
- Configuring Dynamic VLANs
-
- Configuring VLAN Dynamic Profiles
-
- Configuring a VLAN Dynamic Profile for Creating Single-Tag
VLANs Using Standard TPID Values
- Configuring a VLAN Dynamic Profile for Creating Single-Tag
VLANs Using Any TPID Values
- Configuring a Stacked VLAN Dynamic Profile
- Configuring VLAN Interfaces to Use Dynamic Profiles
-
- Associating a Single-Tag VLAN Dynamic Profile to an Interface
- Associating a Stacked VLAN Dynamic Profile to an Interface
- Configuring Which VLAN Ethernet Packet Types Dynamic Profiles
Can Accept
-
- Configuring the VLAN Ethernet Packet Type for Single-Tag VLAN
Dynamic Profiles
- Configuring the VLAN Ethernet Packet Type for Stacked VLAN
Dynamic Profiles
- Configuring VLAN Ranges for Use with Dynamic Profiles
-
- Configuring Single-Level VLAN Ranges for Use with VLAN Dynamic
Profiles
- Configuring Stacked VLAN Ranges for Use with Stacked VLAN Dynamic
Profiles
- Configuring Dynamic Mixed VLAN Ranges
- Verifying and Managing Dynamic VLAN Configuration
- Dynamic VLAN Examples
-
- Example: Configuring a VLAN Dynamic Profile for VLANs with
a TPID of 0x8100
- Example: Configuring a VLAN Dynamic Profile for VLANs with
Any TPID Value and Enabling Demux Interfaces over the VLAN Interface
- Example: Configuring a Stacked VLAN Dynamic Profile
- Example: Dynamic VLAN Interface Configuration
- Example: Dynamic Stacked VLAN Interface Configuration
- Example: Dynamic Flexible VLAN Interface Configuration
- Example: Configuring a Flexible VLAN Interface for Use with
a Nonstandard Ethertype
- Subscriber Interfaces
-
- Subscriber Interface Overview
-
- Subscriber Interface Overview
-
- Statically Identifying Subscribers
- Dynamically Identifying Subscribers
- Static Subscriber Interfaces and VLAN Overview
- Subscriber Interfaces and IP Demux Overview
-
- Interface Sets of Static Demux Interfaces
- Dynamic Demux Interfaces
- Guidelines for Configuring IP Demux Interfaces for Subscriber
Access
- MAC Address Validation for Subscriber Interfaces Overview
-
- Supported Types of Subscriber Interfaces
- Trusted Addresses
- Types of MAC Address Validation
- Configuring Subscriber Interfaces for Dynamic Profiles
-
- Configuring Static Subscriber Interfaces in Dynamic Profiles
-
- Configuring a Subscriber Interface with a Static VLAN Interface
- Associating Dynamic Profiles with Statically Created Interfaces
- Configuring a Subscriber Interface Using a Set of Static IP
Demux Interfaces
- Configuring Dynamic Subscriber Interfaces Using IP Demux Interfaces
in Dynamic Profiles
- Configuring MAC Address Validation for Subscriber Interfaces
-
- Configuring MAC Address Validation for Static Subscriber Interfaces
- Configuring MAC Address Validation for Dynamic Subscriber Interfaces
- Subscriber Interface Examples
-
- Example: Configuring a Static Subscriber Interface on a Gigabit
Ethernet VLAN Interface (Multiple Logical Units)
- Example: Configuring a Static Subscriber Interface on a Gigabit
Ethernet VLAN Interface
- Example: Configuring a Static Subscriber Interface on a Gigabit
Ethernet VLAN Interface (No Autonegotiation)
- Example: Configuring a Static Subscriber Interface with a Loopback
- Example: Configuring Dynamic Subscriber Interfaces on IP Demux
Interfaces
- Subscriber Interfaces over Aggregated Ethernet Overview
-
- Static VLAN Subscriber Interfaces over Aggregated Ethernet
Overview
-
- Guidelines for Configuring a Static VLAN Subscriber Interface
over Aggregated Ethernet for Static or Dynamic CoS Support
- Guidelines for Configuring an Aggregated Ethernet Logical Interface
to Support a Static VLAN Subscriber Interface
- Static or Dynamic IP Demux Subscriber Interfaces over Aggregated
Ethernet Overview
-
- Options for Aggregated Ethernet Logical Interfaces That Support
IP Demux Subscriber Interfaces
- Features Supported with Static or Dynamic IP Demux Subscriber
Interfaces over Aggregated Ethernet
- Configuring Subscriber Interfaces over Aggregated Ethernet
-
- Configuring a Static VLAN Subscriber Interface over Aggregated
Ethernet
- Configuring a Static or Dynamic IP Demux Subscriber Interface
over Aggregated Ethernet
-
- Configuring the Number of Aggregated Ethernet Logical Interfaces
on the Router
- Configuring Ethernet Links as Members of an Aggregated Ethernet
Logical Interface for a Static or Dynamic IP Demux Subscriber Interface
- Configuring an Aggregated Ethernet Logical Interface to Support
a Static or Dynamic IP Demux Subscriber Interface
- Configuring a Static IP Demux Subscriber Interface over an
Aggregated Ethernet Logical Interface
- Configuring a Dynamic IP Demux Subscriber Interface over an
Aggregated Ethernet Logical Interface
- Displaying Configuration Information About IP Demux Interfaces
over Aggregated Ethernet
- Subscriber Interfaces over Aggregated Ethernet Examples
-
- Example: Configuring a Static Subscriber Interface on a VLAN
Interface over Aggregated Ethernet
- Example: Configuring a Static Subscriber Interface on an IP
Demux Interface over Aggregated Ethernet
- Summary of Subscriber Interface Configuration Statements
-
- address
- demux0
- demux-options
- demux-source
- family
- family
- filter
- interfaces
- interfaces
- mac-validate
- mode
- precedence
- preferred-source-address
- proxy-arp
- rpf-check
- underlying-interface
- unit
- unit
- unnumbered-address
- vlan-id
- vlan-tagging
- Dynamic Firewall Services for Subscriber Access
-
- Dynamic Firewall Services Overview
-
- Dynamic Firewall Filters Overview
- Classic Filters Overview
-
- Classic Filter Types
- Classic Filter Components
- Classic Filter Processing
- Guidelines for Creating and Applying Classic Filters for Subscriber
Interfaces
- Basic Classic Filter Syntax
- Fast Update Filters Overview
-
- Fast Update Filter Components
- Fast Update Filter Processing
- Fast Update Filter Names
- Guidelines for Creating and Applying Fast Update Filters
- Basic Fast Update Filter Syntax
- Match Conditions and Actions in Fast Update Filters
-
- Match Conditions
- Actions
- Adding Terms Only Once
- Configuring Filters for Dynamic Profiles
-
- Dynamically Attaching Statically Created Filters
- Dynamically Attaching Filters Using RADIUS Variables
- Defining Dynamic Filter Processing Order
- Configuring Fast Update Filters
-
- Configuring Fast Update Filters
- Configuring the Match Order for Fast Update Filters
- Configuring Terms for Fast Update Filters
- Fast Update Filter Match Conditions
- Fast Update Filter Actions and Action Modifiers
- Configuring Filters to Permit Expected Traffic
- Avoiding Conflicts When Terms Are Matched
-
- How the Router Evaluates Terms in a Filter
- Using Implied Wildcards
- Conflict Caused by Overlapping Ranges
- Associating Fast Update Filters to Interfaces in a Dynamic
Profile
- Verifying and Managing Firewall Filter Configuration
- Firewall Filter Examples
-
- Examples: Configuring Static Filters
- Example: Configuring Fast Update Filters for Subscriber Access
- Summary of Dynamic Firewall For Subscriber Access Statements
-
- dynamic-profiles
- family
- fast-update-filter
- firewall
- interface-specific
- match-order
- precedence
- term
- Class of Service for Subscriber Access
-
- Class of Service for Subscriber Access Overview
-
- CoS for Subscriber Access Overview
-
- Hardware Requirements for CoS for Dynamic Subscriber Access
- CoS and Static IP Demux Interface Set Overview
- Subscriber Interfaces that Provide Initial CoS Parameters Dynamically
Obtained from RADIUS
-
- Dynamic Configuration of Initial CoS in Access Profiles
- Predefined Variables for Dynamic Configuration of Initial Traffic
Shaping
- Predefined Variables for Dynamic Configuration of Initial Scheduling
and Queuing
- Changing CoS Services Overview
-
- Types of CoS Variables Used in a Service Profile
- Static and Dynamic CoS Configurations
- Scenarios for Static and Dynamic Configuration of CoS Parameters
- Guidelines for Configuring CoS for Subscriber Access
- Configuring Class of Service for Subscriber Access
-
- Configuring Static Scheduling and Queuing in a Dynamic Profile
for Subscriber Access
- Configuring Dynamic Scheduling and Queuing in a Dynamic Profile
for Subscriber Access
- Configuring Traffic Shaping and Scheduling in a Dynamic Profile
- Configuring Schedulers in a Dynamic Profile
- Configuring Initial CoS Parameters Dynamically Obtained from
RADIUS
-
- Configuring a RADIUS Authentication Server with Values for
Initial CoS
- Associating an Access Dynamic Profile with a Subscriber Interface
That Supports Hierarchical CoS
- Applying a Traffic-Control Profile to the Subscriber Interface
- Configuring Initial Traffic-Shaping Parameters to be Obtained
from RADIUS
- Configuring Static Forwarding Classes and Scheduler Maps
- Configuring Initial Scheduling and Queuing Parameters to be
Obtained from RADIUS
- Configuring User-Defined CoS Variables in a Dynamic Service
Profile
- Applying CoS to an Interface in a Dynamic Profile
- Configuring CoS on a Set of Static IP Demux Interfaces
- Verifying the Scheduling and Shaping Configuration for Subscriber
Access
- Class of Service for Subscriber Access Examples
-
- Example: Configuring Static Scheduling and Queuing for Subscriber
Access
- Example: Configuring Aggregate Scheduling of Queues for Residential
Subscribers on Static IP Demux Interfaces
- Example: Configuring Dynamic Scheduling and Queuing for Subscriber
Access
- Example: Configuring Initial CoS Parameters Dynamically Obtained
from RADIUS
- Class of Service Shaping-Rate Adjustments Overview
-
- Hierarchical CoS Shaping-Rate Adjustments Overview
- CoS Shaping-Rate Adjustments for Subscriber Local Loops Overview
- Guidelines for Configuring CoS Shaping-Rate Adjustments for
Subscriber Local Loops
- Configuring Class of Service Shaping-Rate Adjustments
-
- Enabling CoS Shaping-Rate Adjustments for Subscriber Local
Loops
-
- Configuring Static Logical Interface Sets to Serve as CoS Hierarchical
Scheduler Nodes for Subscriber Loops
- Configuring the Logical Interfaces That Compose the Static
Logical Interface Sets
- Configuring Hierarchical CoS on the Static Logical Interface
Sets That Serve as Hierarchical Scheduler Nodes for Subscriber Local
Loops
- Configuring ANCP Functionality That Supports and Drives Shaping-Rate
Adjustments for Subscriber Local Loops
- Displaying Configuration Information About ANCP
- Displaying Configuration Information About Shaping-Rate Adjustments
for Subscriber Local Loops
- Disabling CoS Shaping-Rate Adjustments for Subscriber Local
Loops
- Disabling Hierarchical Bandwidth Adjustment for Subscriber
Interfaces with Reverse-OIF Mapping
- Class of Service Shaping-Rate Adjustments Examples
-
- Example: Configuring Hierarchical CoS Shaping-Rate Adjustments
for Subscriber Local Loops
- Summary of Class of Service for Subscriber Access Configuration Statements
-
- buffer-size
- class-of-service
- delay-buffer-rate
- drop-profile
- drop-profile-map
- forwarding-class
- guaranteed-rate
- interfaces
- loss-priority
- output-traffic-control-profile
- priority
- protocol
- scheduler
- scheduler-map
- scheduler-maps
- schedulers
- shaping-rate
- traffic-control-profiles
- transmit-rate
- unit
- Protocols for Subscriber Access
-
- Dynamic IGMP Configuration Overview
-
- Dynamic IGMP Configuration Overview
- Summary of IGMP Dynamic Profile Statements
-
- accounting
- disable
- group
- group-policy
- igmp
- immediate-leave
- interface
- no-accounting
- oif-map
- passive
- promiscuous-mode
- protocols
- source
- ssm-map
- static
- version
- ANCP Overview
-
- ANCP Topology Discovery and Traffic Monitoring Overview
- Configuring ANCP
-
- Configuring ANCP
- Tracing ANCP Operations
-
- Configuring the ANCP Trace Log Filename
- Configuring the Number and Size of ANCP Log Files
- Configuring Access to the ANCP Log File
- Configuring a Regular Expression for ANCP Lines to Be Logged
- Configuring the ANCP Tracing Flags
- Configuring ANCP Neighbors
- Associating an Access Node with Subscribers for ANCP Operations
- Specifying the Interval Between ANCP Adjacency Messages
- Specifying the Maximum Number of Discovery Table Entries
- Configuring ANCP for Backward Compatibility
- Specifying How Long Processes Wait for ANCP Restart to Complete
- Configuring ANCP to Adjust CoS Traffic Shaping
- Summary of ANCP Configuration Statements
-
- access-identifier
- adjacency-timer
- ancp
- discovery-mode
- ietf-mode
- interface-set
- interfaces
- maximum-discovery-table-entries
- maximum-helper-restart-time
- neighbor
- neighbor
- pre-ietf-mode
- qos-adjust
- traceoptions
- Subscriber Access Examples
-
- Service Profile Examples
-
- Example: Configuring a Tiered Service Profile for Subscriber
Access
- Complete Configuration Statement Hierarchy for Subscriber
Access
-
- Subscriber Access Statement Hierarchy
-
- [edit access address-assignment] Hierarchy Level
- [edit access profile] Hierarchy Level
- [edit diameter] Hierarchy Level
- [edit dynamic-profiles] Hierarchy Level
- [edit dynamic-profiles profile-name protocols] Hierarchy Level
- [edit forwarding-options dhcp-relay] Hierarchy Level
- [edit protocols ancp] Hierarchy Level
- [edit jsrc] Hierarchy Level
- [edit services mobile-ip] Hierarchy Level
- [edit services radius-flow-tap] Hierarchy Level
- [edit system services dhcp-local-server] Hierarchy Level
- [edit system services static-subscribers] Hierarchy Level
- Index
-
- Index
- Index of Statements and Commands
[
Contents]
[
Prev]
[
Next]
[
Index]
[
Report an Error]