Subscriber Management Configuration Examples

This section contains examples of creating dynamic usernames and shows the usernames that are generated. The examples all use the following IP policy, interface profile, and route map:

• An IP policy that restricts access.
  host1(config)#ip policy-list restrictAccess host1(config-policy-list)#classifier-group * host1(config-policy-list-classifier-group)#filter host1(config-policy-list-classifier-group)#exit host1(config-policy-list)#exit host1(config)#
• An interface profile that references the restrictAccess policy.
  host1(config)#profile atlInterfaceProfile host1(config-profile)#ip policy input restrictAccess host1(config-profile)#ip policy output restrictAccess host1(config-profile)#exit host1(config)#
• A route map that references the interface profile and the atlServiceProfile service profile.
  host1(config)#route-map atlRouteMap host1(config-route-map)#set interface-profile atlInterfaceProfile host1(config-route-map)#set ip service-profile atlServiceProfile host1(config-route-map)#exit host1(config)#

The following examples show the configuration of a service profile that enables RADIUS authentication:

• Username with ATM Circuit Identifier and No Circuit Type
• Username with VLAN Circuit Identifier and Circuit Type
• Username with MAC Address

Username with ATM Circuit Identifier and No Circuit Type

This example shows the steps to configure a service profile for a username that includes the ATM circuit identifier, but does not include the circuit type.

The example generates the following username:

The circuit identifier indicates a user at slot 2, port 3, with a virtual path identifier (VPI) of 32 and a virtual channel identifier (VCP) of 100.

Username with VLAN Circuit Identifier and Circuit Type

This example shows the steps to configure a service profile for a username that includes a VLAN circuit identifier and the circuit type.

The example generates the following username:

The circuit identifier indicates a user on slot 1, port 0, no stacked vlan, and a vlan ID of 45.

Username with MAC Address

Step-by-Step Procedure

This example shows the steps to configure a service profile that generates a username that includes a MAC address.

Note: Including a MAC address in a username works only for DHCP users. It does not work for IP subscribers that have statically configured IP addresses.

host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier vlan host1(config-service-profile)#include mac-address host1(config-service-profile)#include dhcp-option 82 agent-circuit-id host1(config-service-profile)#exit host1(config)#

The example generates the following username, which includes the MAC address:

Related Documentation

• Understanding Subscriber Management
• Subscriber Management Procedure Overview
• Configuring Subscriber Management with an External DHCP Server
• include circuit-identifier
• include dhcp-option 82
• include hostname
• include ip-address
• include mac-address
• ip policy
• ip policy-list
• ip service-profile
• profile
• route-map
• set ip interface-profile
• set ip service-profile
• user-prefix