Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Subscriber Authentication on Dynamic Bridged Ethernet over Dynamic ATM Interfaces

    You can use either of the following methods to configure and manage RADIUS authentication for IP subscribers on dynamic bridged Ethernet over dynamic ATM 1483 subinterfaces:

    • The atm atm1483 subscriber command
    • The subscriber management application

    The atm atm1483 subscriber command does not support running stateful SRP switchover (high availability) on the router. Therefore, the configuration method you choose depends on whether stateful SRP switchover is or is not running on your router.

    This section describes the following:

    Configuration Method Using atm atm1483 subscriber Command

    When you use the atm atm1483 subscriber command, as described in Configuring a Local Subscriber for a Dynamic Upper-Interface Encapsulation Type Configured over a Dynamic ATM 1483 Subinterface, to configure IP subscribers on dynamic bridged Ethernet over dynamic ATM 1483 subinterface columns to support RADIUS authentication, the atm atm1483 subscriber command provides the subscriber’s authentication parameters. The dynamic ATM 1483 subinterface acts as the authenticating layer that establishes a session with RADIUS and passes the subscriber’s locally configured username and password information to the RADIUS server.

    However, if your router is running stateful SRP switchover (high availability), the use of the atm atm1483 subscriber command in this configuration might suspend stateful SRP switchover on the router or prevent stateful SRP switchover from becoming active. To bypass this limitation, you can use the subscriber management application to configure IP subscribers on dynamic bridged Ethernet interfaces.

    Configuration Method Using Subscriber Management Application

    You can use the JunosE subscriber management application to configure and manage IP subscribers associated with a dynamic bridged Ethernet interface column. The subscriber management application uses an IP service profile to manage and authenticate IP subscribers with RADIUS. An IP service profile contains user and password information, and is used in a route map for subscriber management and to authenticate subscribers with RADIUS.

    In this configuration, the IP service profile provides the subscriber’s authentication parameters, and the subscriber management application acts as the authenticating layer to obtain information from RADIUS for configuration of dynamic IP subscribers. To assign the IP service profile to the interface profile from which the dynamic bridged Ethernet interface is created, you use the bridge1483 service-profile command in Profile Configuration mode.

    If stateful SRP switchover is disabled or not running on your router, you can continue to use the atm atm1483 subscriber command to configure IP subscribers on dynamic bridged Ethernet interfaces to support RADIUS authentication.

    Alternatively, you can use the subscriber management application to create and configure dynamic IP interfaces regardless of whether stateful SRP switchover is running on the router. In addition, using subscriber management enables you to take advantage of several useful features such as the IP inactivity timer.

    In the event that an interface profile for a dynamic bridged Ethernet interface includes the atm atm1483 subscriber command to configure a local subscriber as well as the bridge1483 service-profile command to reference an IP service profile, the values specified with the atm atm1483 subscriber command take precedence. The router ignores the values in the IP service profile in this case.

    For details about using the subscriber management application to configure RADIUS authentication for IP subscribers on dynamic bridged Ethernet interfaces, see Subscriber Authentication on Dynamic Bridged Ethernet over Static ATM Interfaces and Configuring Subscriber Management for IP Subscribers on Dynamic Bridged Ethernet Interfaces. The information in these sections, which explains how to use subscriber management to achieve the same functionality as the subscriber command without adversely affecting stateful SRP switchover, applies equally to the atm atm1483 subscriber command.

    For more information about using the subscriber management application, see JunosE Broadband Access Configuration Guide.

    Published: 2014-08-14