Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Example: Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface Using the subscriber Command

    This example shows you how to use the subscriber command to configure RADIUS authentication for IP subscribers on a dynamic bridged Ethernet interface. This configuration method does not support running stateful SRP switchover on the router.

    Requirements

    This example uses the following software and hardware components:

    • JunosE Release 7.1.0 or higher-numbered releases
    • E Series router (ERX7xx models, ERX14xx models, the ERX310 router, the E120 router, or the E320 router)
    • ASIC-based line modules that support Fast Ethernet or Gigabit Ethernet

    Overview

    You can use the subscriber command to configure RADIUS authentication for IP subscribers on a dynamic bridged Ethernet interface. Assume that you have issued the following commands to configure IP subscribers on a dynamic bridged Ethernet interface for RADIUS authentication. In this configuration, the subscriber command provides the subscriber’s authentication parameters, and the static ATM 1483 subinterface is the authenticating layer. Keep in mind that the subscriber command does not support running stateful SRP switchover on the router.

    Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface

    Step-by-Step Procedure

    To configure IP subscribers on a dynamic bridged Ethernet interface:

    1. Configure the interface profile from which to create a dynamic bridged Ethernet interface. For more information, see Dynamic Interface Configuration Using a Profile.
      host1(config)#profile east
    2. Include the desired attributes for the profile (in this case, IGMP). For more information, see Configuring IPv4 Characteristics for a Profile.
      host1(config-profile)#ip igmp host1(config-profile)#ip igmp immediate-leave host1(config-profile)#ip igmp group limit 6
    3. (Optional) Configure the name of the route map used to configure the IP subscriber interface.
      host1(config-profile)#ip route-map ip-subscriber eastRouteMap host1(config-profile)#exit
    4. Configure the static ATM 1483 subinterface to assign the east profile.
      host1(config)#interface atm 2/1.100 point-to-point host1(config-subif)#profile bridgedEthernet east
    5. Configure a local subscriber for the static ATM 1483 subinterface to support RADIUS authentication. For more information, see Configuring a Local Subscriber for a Dynamic IPoA or Bridged Ethernet Interface.
      host1(config-subif)#subscriber bridgedEthernet user westford001 domain xyzcorp.east password abc123
    6. Enable autodetection of the bridged Ethernet upper-layer encapsulation type. For more information, see Configuring a Dynamic Interface over an ATM 1483 Subinterface.
      host1(config-subif)#auto-configure bridgedEthernet
    7. Define the ATM PVC. For more information, see Creating a PVC on an ATM 1483 Subinterface.
      host1(config-subif)#atm pvc 100 10 101 aal5snap 6400 0 0 host1(config-subif)#exit

    Published: 2014-08-14