Table of Contents

About the Documentation
E Series and JunosE Documentation and Release Notes
Audience
E Series and JunosE Text and Syntax Conventions
Obtaining Documentation
Documentation Feedback
Requesting Technical Support
Managing Remote Access
Remote Access Overview
Remote Access Overview
B-RAS Data Flow
Configuring IP Addresses for Remote Clients
AAA Overview
Remote Access Platform Considerations
B-RAS Protocol Support
Remote Access References
Mapping a User Domain to a Virtual Router Overview
Mapping User Requests Without a Valid Domain Name
Mapping User Requests Without a Configured Domain Name
Using DNIS
Redirected Authentication
IP Hinting
Domain Name and Realm Name Overview
Using the Realm Name as the Domain Name
Using Delimiters Other Than @
Using Either the Domain or the Realm as the Domain Name
Specifying the Domain Name or Realm Name Parse Direction
Stripping the Domain Name
Stripping the Domain Name Per Virtual Router
Subscriber Username for RID, COA Requests, and Lawful Intercepts When Strip Domain Is Enabled
Using the Strip Domain Functionality Per Virtual Router When Strip Domain Is Enabled for an AAA Domain Map
Redirected Authentication When Strip Domain Is Enabled
Example: Domain Name and Realm Name
Example: Stripping Domain Name Per Virtual Router for RADIUS Server Authentication
Single Name Specification for Users from a Domain Overview
RADIUS Authentication and Accounting Servers Configuration Overview
Server Access
Server Request Processing Limit
Authentication and Accounting Methods
Supporting Exchange of Extensible Authentication Protocol Messages
Immediate Accounting Updates
Interim Accounting Updates
Duplicate and Broadcast Accounting
UDP Checksums
SNMP Traps and System Log Messages Overview
SNMP Traps
System Log Messages
Local Authentication Servers Configuration Overview
Tunnel Subscriber Authentication Configuration Overview
Name Server Addresses Configuration Overview
Local Address Servers Configuration Overview
Local Address Pool Ranges
Local Address Pool Aliases
Shared Local Address Pools
SNMP Thresholds
DHCP Features
Domain Name Aliases Overview
AAA Profile Configuration Overview
RADIUS Route-Download Server for Route Distribution Overview
Format of Downloaded Routes
Framed-Route (RADIUS attribute 22)
Framed-IPv6-Route (RADIUS attribute 99)
Cisco AV-Pair (Cisco VSA 26-1)
How the Route-Download Server Downloads Routes
AAA Logical Line Identifier for Subscriber Tracking Overview
How the Router Obtains and Uses the LLID
RADIUS Attributes in Preauthentication Request
Considerations for Using the LLID
VSAs for Dynamic IP Interfaces Overview
Traffic Shaping for PPP over ATM Interfaces
Mapping Application Terminate Reasons and RADIUS Terminate Codes Overview
Timeout Configuration Overview
Limiting Active Subscribers
AAA Failure Notification for RADIUS
Configuring AAA Session Timeout
Standard RADIUS IPv6 Attributes for IPv6 Neighbor Discovery Router Advertisements and DHCPv6 Prefix Delegation Configuration
Maximum Number of IPv6 Prefixes Assigned to Clients by Using Only the DHCPv6 Local Server
Maximum Number of IPv6 Prefixes Assigned to Clients by Using Both DHCPv6 Local Server and Neighbor Discovery Router Advertisements
Unique IPv6 Prefix Delegated Per Subscriber
Same IPv6 Prefix Delegated to Multiple Subscribers
Duplicate IPv6 Prefix Check Overview
Duplicate IPv6 Prefix Detection in the AAA User Profile Database Overview
Guidelines for Duplicate Address Verification
Propagation of LAG Subscriber Information to AAA and RADIUS
SRC Client Configuration Overview
SRC Client and COPS Terminology
Retrieval of DSL Line Rate Information from Access Nodes Overview
DHCPv6 Local Address Pools for Allocation of IPv6 Prefixes Overview
Example: Delegating the DHCPv6 Prefix
Order of Preference in Determining the Local Address Pool for Allocating Prefixes
Order of Preference in Allocating Prefixes and Assigning DNS Addresses to Requesting Routers
Sending of Delegated-IPv6-Prefix from the DHCPv6 Local Server to SRC Client Overview
IPv6 Prefix Allocation Using Neighbor Discovery Router Advertisements from IPv6 Address Pools Overview
Allocation of Neighbor Discovery Prefixes for IPv6 Subscribers over PPP Links
Order of Preference in Determining the Local Address Pool for Allocating Prefixes for Neighbor Discovery Router Advertisements
Order of Preference in Assigning Prefixes when Neighbor Discovery Router Advertisements are Configured on an Interface
Guidelines for Allocating Neighbor Discovery Prefixes Using IPv6 Address Pools
Understanding IPCP and IPv6CP Negotiations for IPv4 and IPv6 Clients Based on RADIUS-Returned Attributes
Sending the Acct-Start and Acct-Update Messages After NCP Negotiation Is Completed Overview
Configuring Remote Access
Remote Access Configuration Tasks
Configuring a B-RAS License
Configuring AAA Duplicate Accounting
Configuring AAA Broadcast Accounting
Overriding AAA Accounting NAS Information
Collecting Accounting Statistics
Configuring RADIUS AAA Servers
Configuring SNMP Traps
Creating the AAA Local Authentication Environment
Creating AAA Local User Databases
Adding AAA User Entries to Local User Databases
Adding AAA User Entries to Default Local User Databases
Configuring AAA User Entries in Local User Databases
Assigning a Local User Database to a Virtual Router
Enabling Local Authentication on the Virtual Router
Example: Configuring AAA Local Authentication
Configuring DNS Primary and Secondary NMS
Configuring WINS Primary and Secondary NMS
Configuring a Local Address Server
Creating an IP Interface
Configuring Single PPP Clients per ATM Subinterface
Configuring Multiple PPP Clients per ATM Subinterface
Controlling Access to Domain Names
Example: Associating all Subscribers of a PPP Interface with a Specific Domain Name
Example: Associating Multiple Domain Names with a Specific Domain Name
Configuring an AAA Per-Profile Attribute List
Configuring Interim, Broadcast, and Policy-Based Accounting in Virtual Router Groups and PPP Profiles
Configuring the NAS-Port-Type Attribute Manually
Configuring a Service Description for the AAA Profile
Configuring the Route-Download Server to Download Routes
Configuring the Router to Obtain the LLID for a Subscriber
Troubleshooting Subscriber Preauthentication
Configuring Custom Mappings for PPP Terminate Reasons
Configuring Duplicate IPv6 Prefix Check
Configuring Detection of Duplicate IPv6 Prefixes in the AAA User Profile Database
Configuring the SRC Client
Configuring the Forwarding of COPS Requests to the SRC Server Based on DCM Profiles
Configuring the DHCPv6 Local Address Pools
Example: Limiting the Number of Prefixes Used by DHCPv6 Clients
Example: Using DHCPv6 Local Address Pools for Prefix Delegation over non-PPP Links
Configuring IPv6 Neighbor Discovery Local Address Pools
Overriding AAA to Perform IPCP and IPv6CP Negotiations Based on RADIUS-Returned Attributes
Sending the Acct-Start and Acct-Update Messages After NCP Negotiation Is Completed
Monitoring and Troubleshooting Remote Access
Setting Baselines for Remote Access
Setting a Baseline for AAA Statistics
Setting a Baseline for AAA Route Downloads
Setting a Baseline for COPS Statistics
Setting a Baseline for Local Address Pool Statistics
Setting a Baseline for RADIUS Statistics
Setting the Baseline for SRC Statistics
How to Monitor PPP Interfaces
Monitoring AAA Accounting Configuration
Monitoring AAA Configuration to Send the Acct-Start Message After NCP Negotiation Is Completed
Monitoring AAA Configuration to Send the Acct-Update Message After NCP Negotiation Is Completed
Monitoring AAA Accounting Default
Monitoring the AAA Accounting Interval
Monitoring AAA-Specific Virtual Router Groups
Monitoring the Default AAA Authentication Method List
Monitoring AAA Domain Name Stripping for a Domain Per Virtual Router
Monitoring Mapping Between User Domains and Virtual Routers
Monitoring Tunnel Subscriber Authentication
Monitoring Routing Table Address Lookup
Monitoring the AAA Model
Monitoring IP Addresses of Primary and Secondary DNS and WINS Name Servers
Monitoring AAA Profile Configuration
Monitoring Statistics about the RADIUS Route-Download Server
Monitoring Routes Downloaded by the RADIUS Route-Download Server
Monitoring Chassis-Wide Routes Downloaded by the RADIUS Route-Download Server
Monitoring AAA Statistics
Monitoring the Number of Active Subscribers Per Port
Monitoring the Maximum Number of Active Subscribers Per-Virtual Router
Monitoring Session Timeouts
Monitoring Interim Accounting for Users on the Virtual Router
Monitoring Virtual Router Groups Configured for AAA Broadcast Accounting
Monitoring Configuration Information for AAA Local Authentication
Monitoring AAA Server Attributes
Monitoring the COPS Layer Over SRC Connection
Monitoring Statistics About the COPS Layer
Monitoring Local Address Pool Aliases
Monitoring Local Address Pools
Monitoring Local Address Pool Statistics
Monitoring Shared Local Address Pools
Monitoring the Routing Table
Monitoring the B-RAS License
Monitoring the RADIUS Server Algorithm
Monitoring RADIUS Override Settings
Monitoring the RADIUS Rollover Configuration
Monitoring RADIUS Server Information
Monitoring RADIUS Services Statistics
Monitoring RADIUS SNMP Traps
Monitoring RADIUS Accounting for L2TP Tunnels
Monitoring RADIUS UDP Checksums
Monitoring RADIUS Server IP Addresses
Monitoring the RADIUS Attribute Used for IPv6 Neighbor Discovery Router Advertisements
Monitoring the RADIUS Attribute Used for DHCPv6 Prefix Delegation
Monitoring Duplicate IPv6 Prefixes
Monitoring Duplicate IPv6 Prefixes in the AAA User Profile Database
Monitoring the SRC Client Connection Status
Monitoring SRC Client Connection Statistics
Monitoring the SRC Client Version Number
Monitoring the SRC Option
Monitoring Subscriber Information
Monitoring Application Terminate Reason Mappings
Monitoring IPv6 Local Pools for DHCP Prefix Delegation By All Configured Pools
Monitoring IPv6 Local Pools for DHCP Prefix Delegation By Pool Name
Monitoring IPv6 Local Pool Statistics for DHCP Prefix Delegation
Monitoring IPv6 Local Pools for Neighbor Discovery Router Advertisements for all Configured Pools
Monitoring IPv6 Local Pools for Neighbor Discovery Router Advertisements by Pool Name
Monitoring IPv6 Local Pool Statistics for Neighbor Discovery Router Advertisements Allocation of Prefixes
Monitoring the Status of the Override Feature to Initiate IPCP and IPv6CP Negotiations Based on RADIUS-Returned Attributes
Managing RADIUS and TACACS+
Configuring RADIUS Attributes
RADIUS Overview
RADIUS Services
RADIUS Attributes
RADIUS Platform Considerations
RADIUS References
Subscriber AAA Access Messages Overview
RADIUS IETF Attributes Supported for Subscriber AAA Access Messages
Juniper Networks VSAs Supported for Subscriber AAA Access Messages
Processing DNS Addresses from Microsoft RADIUS VSAs for PPP Clients During IPCP
Subscriber AAA Accounting Messages Overview
RADIUS IETF Attributes Supported for Subscriber AAA Accounting Messages
Juniper Networks VSAs Supported for Subscriber AAA Accounting Messages
RADIUS IETF Attributes Supported for AAA Tunnel Accounting Messages
AAA Access Messages During IPCP Negotiations for Dual-Stack Subscribers
Access-Request Messages When an IPv4 Address is Renegotiated
Access-Accept Messages When an IPv4 Address is Assigned
AAA Accounting Messages During IPCP Negotiations for Dual-Stack Subscribers
Interim-Acct Messages When an IPv4 Address is Assigned
Interim-Acct Messages When an IPv4 Address is Not Assigned
Interim-Acct Messages During a Successful IPCP Renegotiation for IPv4 Addresses
Interim-Acct Messages During a Failed IPCP Renegotiation for IPv4 Addresses
Interim-Acct Messages When an IPv4 Address is Released
DSL Forum VSAs in AAA Access and Accounting Messages Overview
DSL Forum VSAs Supported for AAA Access and Accounting Messages
RADIUS Attributes Supported for CLI AAA Messages
CLI Commands Used to Modify RADIUS Attributes
CLI Commands Used to Configure RADIUS IETF Attributes
CLI Commands Used to Configure Juniper Networks VSAs
CLI Commands Used to Include ANCP-Related Juniper Networks VSAs in Access and Accounting Messages
CLI Commands Used to Include DSL Forum VSAs in Access and Accounting Messages
CLI Commands Used to Include or Exclude Attributes in RADIUS Messages
CLI Commands Used to Ignore Attributes when Receiving Access-Accept Messages
RADIUS Per-Profile Attribute List Configuration Overview
Example: Configuring RADIUS-Specific Attributes
Configuring RADIUS Dynamic-Request Server
RADIUS Dynamic-Request Server Overview
RADIUS Dynamic-Request Server Platform Considerations
RADIUS Dynamic-Request Server References
Understanding RADIUS-Initiated Disconnect
Disconnect Messages
Message Exchange
Supported Error-Cause Codes (RADIUS Attribute 101)
Qualifications for Disconnect
Security/Authentication
Configuring RADIUS-Initiated Disconnect
Understanding RADIUS-Initiated Change of Authorization
Change-of-Authorization Messages
Message Exchange
Supported Error-Cause Codes (RADIUS Attribute 101)
Qualifications for Change of Authorization
Security/Authentication
Configuring RADIUS-Initiated Change of Authorization
Configuring RADIUS Relay Server
Understanding the RADIUS Relay Server
How RADIUS Relay Server Works
Authentication and Addressing
Accounting
Terminating the Wireless Subscriber’s Connection
RADIUS Relay Server Platform Considerations
RADIUS Relay Server References
RADIUS Relay Server and the SRC Software
Using the SRC Software for Addressing
Using the SRC Software for Accounting
Configuring RADIUS Relay Server Support
RADIUS Attribute Descriptions
RADIUS IETF Attributes
Juniper Networks VSAs
DSL Forum VSAs
Pass Through RADIUS Attributes
RADIUS Attributes References
Application Terminate Reasons
AAA Terminate Reasons
L2TP Terminate Reasons
PPP Terminate Reasons
RADIUS Client Terminate Reasons
Monitoring RADIUS
Monitoring Override Settings of RADIUS IETF Attributes
Monitoring the NAS-Port-Format RADIUS Attribute
Monitoring the Calling-Station-Id RADIUS Attribute
Monitoring the NAS-Identifier RADIUS Attribute
Monitoring the Format of the Remote-Circuit-ID for RADIUS
Monitoring the Delimiter Character in the Remote-Circuit-ID for RADIUS
Monitoring the Acct-Session-Id RADIUS Attribute
Monitoring the DSL-Port-Type RADIUS Attribute
Monitoring the Connect-Info RADIUS Attribute
Monitoring the NAS-Port-ID RADIUS Attribute
Monitoring Included RADIUS Attributes
Monitoring Ignored RADIUS Attributes
Setting the Baseline for RADIUS Dynamic-Request Server Statistics
Monitoring RADIUS Dynamic-Request Server Statistics
Monitoring the Configuration of the RADIUS Dynamic-Request Server
Setting a Baseline for RADIUS Relay Statistics
Monitoring RADIUS Relay Server Statistics
Monitoring the Configuration of the RADIUS Relay Server
Monitoring the Status of RADIUS Relay UDP Checksums
Monitoring the Status of ICR Partition Accounting
Configuring TACACS+
Understanding TACACS+
AAA Overview
Administrative Login Authentication
Privilege Authentication
Login Authorization
Accounting
TACACS+ Platform Considerations
TACACS+ References
Retry Attempts for Successful TCP Connection Overview
Configuring TACACS+
Configuring TACACS+ Support
Configuring Authentication
Configuring Accounting
Monitoring TACACS+
Setting Baseline TACACS+ Statistics
Monitoring TACACS+ Statistics
Monitoring TACACS+ Information
Managing L2TP
L2TP Overview
L2TP Overview
L2TP Terminology
Implementing L2TP
Sequence of Events on the LAC
Sequence of Events on the LNS
Packet Fragmentation
L2TP Platform Considerations
L2TP Module Requirements
ERX7xx Models, ERX14xx Models, and the ERX310 Router
E120 Router and E320 Router
Sessions and Tunnels Supported
L2TP References
Configuring an L2TP LAC
LAC Configuration Prerequisites
Modifying L2TP LAC Default Settings for Managing Destinations, Tunnels, and Sessions
Generating UDP Checksums in Packets to L2TP Peers
Specifying a Destruct Timeout for L2TP Tunnels and Sessions
Preventing Creation of New Destinations, Tunnels, and Sessions
Preventing Creation of New Destinations, Tunnels, and Sessions on the Router
Preventing Creation of New Tunnels and Sessions at a Destination
Preventing Creation of New Sessions for a Tunnel
Specifying a Drain Timeout for a Disconnected Tunnel
Shutting Down Destinations, Tunnels, and Sessions
Closing and Preventing Existing and New Destinations, Tunnels, and Sessions on the Router
Closing and Preventing Existing and New Tunnels and Sessions for a Destination
Closing and Preventing Existing and New Sessions in a Specific Tunnel
Closing a Specific Session
Specifying the Number of Retransmission Attempts
Controlling the Transmission of L2TP Hello Messages to L2TP Peers in Control Channels
Configuring Calling Number AVP Formats
Calling Number AVP 22 Configuration Tasks
Configuring the Fallback Format
Disabling the Calling Number AVP
Mapping a User Domain Name to an L2TP Tunnel Overview
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
Mapping User Domain Names to L2TP Tunnels from Tunnel Group Tunnel Mode
Transmission of the Subscriber Access Interface Speed to LNS Using the RX Connect-Speed AVP
Configuring the RX Speed on the LAC
Managing the L2TP Destination Lockout Process
Modifying the Lockout Procedure
Verifying That a Locked-Out Destination Is Available
Configuring a Lockout Timeout
Unlocking a Destination that is Currently Locked Out
Starting an Immediate Lockout Test
Managing Address Changes Received from Remote Endpoints
Configuring LAC Tunnel Selection Parameters
Configuring the Failover Between Preference Levels Method
Configuring the Failover Within a Preference Level Method
Configuring the Maximum Sessions per Tunnel
Configuring the Weighted Load Balancing Method
Configuring an L2TP LNS
LNS Configuration Prerequisites
Configuring an LNS
Creating an L2TP Destination Profile
Creating an L2TP Host Profile
Configuring the Maximum Number of LNS Sessions
Configuring Groups for LNS Sessions
Configuring the RADIUS Connect-Info Attribute on the LNS
Overriding LNS Out-of-Resource Result Codes 4 and 5
Overriding the Result Codes
Displaying the Current Override Setting
Selecting Service Modules for LNS Sessions Using MLPPP
Assigning Bundled Group Identifiers
Overriding All Endpoint Discriminators
Enabling Tunnel Switching
Creating Persistent Tunnels
Testing Tunnel Configuration
Managing L2TP Destinations, Tunnels, and Sessions
Configuring Disconnect Cause Information
Generating the Disconnect Cause AVP Globally
Generating the Disconnect Cause AVP with a Host Profile
Enabling RADIUS Accounting for Disconnect Cause
Displaying Disconnect Cause Statistics
Configuring the Receive Window Size
Configuring the Default Receive Window Size
Configuring the Receive Window Size on the LAC
Configuring the Receive Window Size on the LNS
Configuring Peer Resynchronization
Configuring Peer Resynchronization for L2TP Host Profiles and AAA Domain Map Tunnels
Configuring the Global L2TP Peer Resynchronization Method
Using RADIUS to Configure Peer Resynchronization
Configuring L2TP Tunnel Switch Profiles
Applying the L2TP Tunnel Switch Profile
Configuration Guidelines
Configuring L2TP AVPs for Relay
Configuration Tasks
Enabling Tunnel Switching on the Router
Configuring L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps
Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups
Applying Default L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using RADIUS
Configuring the Transmit Connect Speed Calculation Method
Transmit Connect Speed Calculation Methods
Static Layer 2
Dynamic Layer 2
QoS
Actual
Transmit Connect Speed Calculation Examples
Example 1: L2TP Session over ATM 1483 Interface
Example 2: L2TP Session over Ethernet VLAN Interface
Transmit Connect Speed Reporting Considerations
Session Termination for Dynamic Speed Timeout
Advisory Speed Precedence for VLANs over Bridged Ethernet
Using AAA Domain Maps to Configure the Transmit Connect Speed Calculation Method
Using AAA Tunnel Groups to Configure the Transmit Connect Speed Calculation Method
Using AAA Default Tunnel Parameters to Configure the Transmit Connect Speed Calculation Method
Using RADIUS to Configure the Transmit Connect Speed Calculation Method
Controlling the Handling of L2TP Hello Packets in Fast Path
PPP Accounting Statistics
Stateful Line Module Switchover for LNS Sessions
Configuring L2TP Dial-Out
L2TP Dial-Out Overview
L2TP Dial-Out Terms
L2TP Dial-Out Platform Considerations
L2TP Dial-Out References
L2TP Dial-Out Network Model
L2TP Dial-Out Process
L2TP Dial-Out Operational States
Chassis
Virtual Router
Targets
Sessions
L2TP Dial-Out Outgoing Call Setup Details
Access-Request Message
Access-Accept Message
Outgoing Call
Mutual Authentication
Route Installation
Creating a Profile Before Configuring L2TP Dial-Out
Configuring L2TP Dial-Out
Creating an L2TP Dial-Out Session
Specifying the Maximum Timeout Period for Establishing an L2TP Dial-Out Session
Specifying the Duration for an L2TP Dial-Out Session to Remain in Dormant State
Specifying the Maximum Triggers to Buffer for an L2TP Dial-Out Session
Deleting an L2TP Dial-Out Session
Resetting an L2TP Dial-Out Session
L2TP Disconnect Cause Codes
L2TP Disconnect Cause Codes
Monitoring L2TP and L2TP Dial-Out
Monitoring the Mapping for User Domains and Virtual Routers with AAA
Monitoring Configured Tunnel Groups with AAA
Monitoring Configuration of Tunnel Parameters with AAA
Monitoring Global Configuration Status on E Series Routers
Monitoring Detailed Configuration Information for Specified Destinations
Monitoring Locked Out Destinations
Monitoring Configured L2TP Destination Profiles or Host Profiles
Monitoring Configured and Operational Status of all Destinations
Monitoring Statistics on the Cause of a Session Disconnection
Monitoring Detailed Configuration Information about Specified Sessions
Monitoring Configured and Operational Summary Status
Monitoring Configured Switch Profiles on Router
Monitoring Detailed Configuration Information about Specified Tunnels
Monitoring Configured and Operational Status of All Tunnels
Monitoring Chassis-wide Configuration for L2TP Dial-out
Monitoring Status of Dial-out Sessions
Monitoring Dial-out Targets within the Current VR Context
Monitoring Operational Status within the Current VR Context
Managing DHCP
DHCP Overview
DHCP Overview Information
Session and Resource Control Software
DHCP Platform Considerations
DHCP References
Configuring the DHCP Access Model
Configuring DHCP Proxy Clients
Logging DHCP Packet Information
Viewing and Deleting DHCP Client Bindings
DHCP Client Bindings and Duplicate MAC Addresses for Subinterfaces Overview
DHCP Local Server Overview
Embedded DHCP Local Server Overview
DHCP Local Server and Client Configuration
Equal-Access Mode Overview
Local Pool Selection and Address Allocation
The Connection Process
Standalone Mode Overview
Local Pool Selection and Address Allocation
Server Management Table
DHCP Local Server Prerequisites
DHCP Local Server Configuration Tasks
DHCP Unique ID for Clients and Servers Overview
Authentication and Accounting of IPv6 Subscribers Using the DHCPv6 Local Server Overview
Accounting for IPv6 Subscribers with DHCPv6 Local Server Standalone Mode
Interoperation of Authentication of IPv6 Clients and Display of Active Subscriber Information
Limiting the Maximum Number of IPv6 Prefixes Delegated Per Interface by the DHCPv6 Local Server Overview
Configuring DHCP Local Server
Configuring the DHCP Local Server
Basic Configuration of DHCP Local Server
Limiting the Number of IP Addresses Supplied by DHCP Local Server
Excluding IP Addresses from Address Pools
Configuring DHCP Local Server to Support Creation of Dynamic Subscriber Interfaces
Differentiating Between Clients with the Same Client ID or Hardware Address
Logging Out DHCP Local Server Subscribers
Clearing an IP DHCP Local Server Binding
Using SNMP Traps to Monitor DHCP Local Server Events
Using DHCP Local Server Event Logs
Configuring DHCP Local Address Pools
Basic Configuration of DHCP Local Address Pools
Linking Local Address Pools
Setting Grace Periods for Address Leases
Sending RADIUS Attributes to DHCP Subscribers Overview
Dual-Stack Lite Tunnel Name Configuration with RADIUS and DHCPv6
PCP Server Name Configuration with RADIUS and DHCP or DHCPv6
Configuring AAA Authentication for DHCP Local Server Standalone Mode
Configuring AAA Authentication for DHCPv6 Local Server Standalone Mode
Configuring the DHCPv6 Local Server
Configuring the Type of DHCP Unique ID for DHCPv6 Local Servers
Deleting DHCPv6 Client Bindings
Configuring the Router to Work with the SRC Software
Configuring DHCP Relay
DHCP Relay and BOOTP Relay Overview
Configuring DHCP Relay Settings
Enabling DHCP Relay
Removing Access Routes from Routing Tables and NVS
Treating All Packets as Originating at Trusted Sources
Assigning the Giaddr to Source IP Address
Protecting Against Spoofed Giaddr and Relay Agent Option Values
Using the Giaddr to Identify the Primary Interface for Dynamic Subscriber Interfaces
Using the Broadcast Flag Setting to Control Transmission of DHCP Reply Packets
Interaction of DHCP Relay Broadcast Flag with the Layer 2 Unicast Transmission Method
Preventing DHCP Relay from Installing Host Routes by Default
Example: Preventing Installation of Host Routes
Including Relay Agent Option Values in the PPPoE Remote Circuit ID
Configuring the Layer 2 Unicast Transmission Method for Reply Packets to DHCP Clients
Using Option 60 Strings to Forward Client Traffic to Specific DHCP Servers
Configuring the DHCP Relay Option 60 Attribute for Traffic Forwarding
Relaying DHCP Packets That Originate from a Cable Modem
DHCP Relay Agent Information Option (Option 82) Suboption Values Overview
Format of the JunosE Data Field in the Vendor-Specific Suboption for Option 82
Configuring the DHCP Relay Agent Option 82 Settings
Configuring Relay Agent Option 82 Information
Preventing Option 82 Information from Being Stripped from Trusted Client Packets
Configuring Relay Agent Information Option (Option 82) Suboption Values
Using the set dhcp relay agent sub-option Command to Enable Option 82 Suboption Support
Using the set dhcp relay agent Command to Enable Option 82 Suboption Support
Example: Using DHCP Relay Option 82 to Pass IEEE 802.1p Values to DHCP Servers
Rate of DHCP Client Packets Processed by DHCP Relay Overview
Manually Configuring the Maximum Rate of Client Packets Processed Per Second by DHCP Relay
Configuring the Rate of Client Packets Processed by DHCP Relay
Configuring DHCP Relay Proxy
Enabling DHCP Relay Proxy
Use the First Offer from a DHCP Server
Set a Timeout for DHCP Client Renewal Messages
Managing Host Routes Using DHCP Relay Proxy
Selecting the DHCP Server Response
Behavior for Bound Clients and Address Renewals
Configuring the DHCP External Server Application
DHCP External Server Overview
Preservation of Dynamic Subscriber Interfaces with DHCP External Server Overview
DHCP External Server Identification of Clients with Duplicate MAC Addresses Overview
Configuration Guidelines for Using Duplicate MAC Mode
Restrictions for Using Duplicate MAC Mode to Manage Clients
DHCP External Server Configuration Requirements
Enabling and Disabling the DHCP External Server Application
Monitoring DHCP Traffic Between Remote Clients and DHCP Servers
Synchronizing the DHCP External Application and the Router
Configuring Interoperation with Ethernet DSLAMs
Configuring the DHCP External Server to Support the Creation of Dynamic Subscriber Interfaces
Configuring DHCP External Server to Control Preservation of Dynamic Subscriber Interfaces
Configuring Dynamic Subscriber Interfaces for Interoperation with DHCP Relay and DHCP Relay Proxy
Deleting Clients from a Virtual Router’s DHCP Binding Table
Configuring DHCP External Server to Uniquely Identify Clients with Duplicate MAC Addresses
Configuring DHCP External Server to Re-Authenticate Auto-Detected Dynamic Subscriber Interfaces
Monitoring and Troubleshooting DHCP
Setting Baselines for DHCP Statistics
Setting a Baseline for DHCP Relay and Relay Proxy
Setting a Baseline for DHCP Proxy Server Statistics
Setting a Baseline for DHCP External Server Statistics
Setting a Baseline for DHCP Local Server Statistics
Monitoring Addresses Excluded from DHCP Local Server Use
Monitoring DHCP Bindings
Monitoring DHCP Binding Information
Monitoring DHCP Binding Count Information
Monitoring DHCP Binding Host Information
Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address Bindings)
Monitoring DHCP Bindings (Displaying DHCP Bindings Based on Binding ID)
Monitoring DHCP Bindings (Local Server Binding Information)
Monitoring DHCP External Server Configuration Information
Monitoring DHCP External Server Statistics
Monitoring DHCP External Server Duplicate MAC Address Setting
Monitoring DHCP Local Address Pools
Monitoring DHCP Local Server Authentication Information
Monitoring DHCP Local Server Configuration
Monitoring DHCP Local Server Leases
Monitoring DHCP Local Server Statistics
Monitoring DHCP Option 60 Information
Monitoring DHCP Packet Capture Settings
Monitoring DHCP Relay Configuration Information
Monitoring DHCP Relay Proxy Statistics
Monitoring DHCP Relay Statistics
Monitoring DHCP Server and DHCP Relay Agent Statistics
Monitoring DHCP Server and Proxy Client Information
Monitoring DHCPv6 Local Server Binding Information
Monitoring DHCPv6 Local Server DNS Search Lists
Monitoring DHCPv6 Local Server DNS Servers
Monitoring DHCPv6 Local Server Prefix Lifetime
Monitoring DHCPv6 Local Server Statistics
Monitoring DHCPv6 Local Server Authentication Information
Monitoring the Maximum Number of Available Leases
Monitoring Static IP Address and MAC Address Pairs Supplied by DHCP Local Server
Monitoring Status of DHCP Applications
Monitoring DHCP Proxy Client Bindings
Monitoring the Maximum Number of IPv6 Prefixes Delegated Per Interface by the DHCPv6 Local Server
Monitoring the DHCPv6 Local Server to Send Delegated-IPv6-Prefix to SRC Client
Managing the Subscriber Environment
Configuring Subscriber Management
Understanding Subscriber Management
Subscriber Management Platform Considerations
Subscriber Management Attributes
Dynamic IP Subscriber Interfaces
Subscriber Management Procedure Overview
Configuring Subscriber Management with an External DHCP Server
Subscriber Management Configuration Examples
Monitoring Subscriber Management
Monitoring IP Service Profiles
Monitoring Active IP Subscribers Created by Subscriber Management
Configuring Subscriber Interfaces
Subscriber Interfaces Overview
Dynamic Interfaces and Dynamic Subscriber Interfaces Overview
Subscriber Interfaces Platform Considerations
Interface Specifiers
Subscriber Interfaces References
Characteristics of Subscriber Interfaces
Relationship to Shared IP Interfaces
Relationship to Primary IP Interfaces
Ethernet Interfaces and VLANs
Moving Interfaces
Preventing IP Spoofing
Routing Protocols
Policies and QoS
Applications for Subscriber Interfaces
Directing Traffic Toward Special Local Content
Differentiating Traffic for VPNs
Dynamic Creation of Subscriber Interfaces Overview
Dynamic Subscriber Interfaces Using DHCP Events Overview
DHCP Local Server and Address Allocation
DHCP External Server and Address Allocation
DHCP Relay Configuration
Supported Configurations
Dynamic Subscriber Interfaces Using Packet Detection Overview
Designating Traffic for the Primary IP Interface
Using Framed Routes
Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces Overview
How MAC Address Validation State Inheritance Works
Configuration of MAC Address Validation State Inheritance
Verification of MAC Address Validation State Inheritance
Example: Configuring Static Subscriber Interfaces
Example: Using a Destination Address to Demultiplex Traffic
Example: Using a Source Address to Demultiplex Traffic
Example: Configuring Dynamic Subscriber Interfaces
Example: Configuring Dynamic Subscriber Interfaces over Ethernet
Example: Configuring Dynamic Subscriber Interfaces over VLANs
Example: Configuring Dynamic Subscriber Interfaces over Bridged Ethernet
Example: Configuring Dynamic Subscriber Interfaces over GRE Tunnels
Example: Configuring Dynamic Subscriber Interfaces Using Loopback Interfaces
Monitoring Subscriber Interfaces
Monitoring Subscriber Interfaces Overview
Monitoring Subscriber Interfaces
Monitoring Active IP Subscribers Created by Subscriber Management
Managing Subscriber Services
Configuring Service Manager
Service Manager Overview
Service Manager Terms and Acronyms
Service Manager Platform Considerations
Service Manager References
Configuring Service Manager
Service Definitions Overview
Creating Service Definitions
Managing Your Service Definitions
Copying a Service Definition Macro File
Installing a Service Definition File
Uninstalling a Service Definition File
Updating an Existing Service Definition File
Referencing Policies in Service Definitions Overview
Referencing QoS Configurations in Service Definitions
Specifying QoS Profiles in Service Definitions
Configuring a QoS Profile for Service Manager
Specifying QoS Profiles in a Service Definition
Specifying QoS Parameter Instances in a Service Definition
Creating a Parameter Instance in a Profile
Specifying QoS Parameter Instances in a Service Definition
Modifying QoS Configurations with Service Manager
Modifying Parameter Instances
Modifying QoS Configurations in a Single Service Manager Event
Modifying QoS Configurations by Using Other Sources
Removing QoS Configurations Referenced by Service Manager
QoS for Service Manager Considerations
RADIUS or Service Manager
Interoperability with Other Service Components
QoS Statistics
Ranges
Configuring the Service Manager License
Managing and Activating Service Sessions Overview
Managing Subscriber Service Sessions by Using RADIUS Overview
Activating Subscriber Service Sessions Using RADIUS
Understanding Service Manager RADIUS Attributes
Using Tags with RADIUS Attributes
Deactivating Service Sessions Using RADIUS
Setting Time or Volume Thresholds for a Service
Using the Deactivate-Service Attribute
Activating and Deactivating Subscriber Services by Using Mutex Groups Overview
Activating and Deactivating Multiple Services
Configuring a Mutex Service
Combined and Independent IPv4 and IPv6 Services in a Dual Stack Overview
Activation and Deactivation of IPv4 and IPv6 Services in a Dual Stack
Independent IPv4 and IPv6 Services in a Dual Stack
Combined IPv4 and IPv6 Service in a Dual Stack
Performance Impact on the Router and Compatibility with Previous Releases for an IPv4 and IPv6 Dual Stack
Understanding RADIUS Accounting for Service Manager
Service Interim Accounting Overview
Configuring Service Interim Accounting
Specifying the Service Accounting Interval
Specifying the User Accounting Interval
Configuring Calculation of Service Session Accounting Based on Scheduler Profiles Instead of Rate-Limit Profiles in Hierarchical Parent Groups for Forwarded Packets
Service Interim Accounting for IPv4 and IPv6 Services in a Dual Stack Overview
Collecting IPv6 Service Accounting Statistics Separately for Dual-Stack Subscribers Overview
Managing Subscriber Service Sessions by Using the CLI Overview
Activating Subscriber Service Sessions by Using the CLI Overview
Activating Subscriber Sessions by Using the CLI
Activating a Service for an Existing Subscriber
Creating and Activating a Service for a Subscriber
Preprovisioning Service Sessions
Service Session Profiles Overview
Working with Service Session Profiles
Creating a New Service Session Profile
Specifying Statistics Collection Settings
Specifying the Maximum Bandwidth for a Service Session
Specifying the Interval for the Active State of a Service Session
Deactivating Subscriber Service Sessions by Using the CLI Overview
Gracefully Deactivating Subscriber Service Sessions
Gracefully Deactivating Service Sessions Based on Owner Details
Gracefully Deactivating Service Sessions Based on Subscriber Details
Forcing Immediate Deactivation of Subscriber Service Sessions
Using Service Session Profiles to Deactivate Service Sessions
Configuring Service Manager Statistics
Setting Up the Service Definition File for Statistics Collection
Enabling Statistics Collection with RADIUS
Enabling Statistics Collection with the CLI
Setting Up the External Parent Group Statistics Collection
Service Manager Performance Considerations
Example: Tiered Service Definition
Example: Video-on-Demand Service Definition
Example: Voice-over-IP Service Definition
Guided Entrance Service Overview
Example: Guided Entrance Service Definition
Using COA Messages with Guided Entrance Services
Configuring the HTTP Local Server to Support Guided Entrance
Configuring the HTTP Local Server to Support Guided Entrance for IPv4 Subscribers
Configuring the HTTP Local Server to Support Guided Entrance for IPv6 Subscribers
Redirection of Subscriber Sessions When HTTP Local Server is Disabled or Not Configured
Example: Combined IPv4 and IPv6 Service in a Dual Stack Service Definition
Preservation of the Original URL During Redirection of Subscriber Sessions
Configuring the Preservation of the Original URL During Redirection of Subscriber Sessions
Monitoring Service Manager
Setting a Baseline for HTTP Local Server Statistics
Monitoring the Connections to the HTTP Local Server
Monitoring the Configuration of the HTTP Local Server
Monitoring Statistics for Connections to the HTTP Local Server
Monitoring Profiles for the HTTP Local Server
Monitoring the Default Interval for Interim Accounting of Services
Monitoring the Status of the Service Manager License
Monitoring Profiles for Service Manager
Monitoring IPv4 and IPv6 Interfaces for Service Manager
Monitoring Service Definitions
Monitoring Service Session Profiles
Monitoring Active Owner Sessions with Service Manager
Monitoring Active Subscriber Sessions with Service Manager
Monitoring the Number of Active Subscriber and Service Sessions with Service Manager
Verifying Computation of Service Session Accounting Based on Scheduler Profiles
Index
Index