Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Subscriber Management Configuration Examples

    This section contains examples of creating dynamic usernames and shows the usernames that are generated. The examples all use the following IP policy, interface profile, and route map:

    • An IP policy that restricts access.
      host1(config)#ip policy-list restrictAccess host1(config-policy-list)#classifier-group * host1(config-policy-list-classifier-group)#filter host1(config-policy-list-classifier-group)#exit host1(config-policy-list)#exit host1(config)#
    • An interface profile that references the restrictAccess policy.
      host1(config)#profile atlInterfaceProfile host1(config-profile)#ip policy input restrictAccess host1(config-profile)#ip policy output restrictAccess host1(config-profile)#exit host1(config)#
    • A route map that references the interface profile and the atlServiceProfile service profile.
      host1(config)#route-map atlRouteMap host1(config-route-map)#set interface-profile atlInterfaceProfile host1(config-route-map)#set ip service-profile atlServiceProfile host1(config-route-map)#exit host1(config)#

    The following examples show the configuration of a service profile that enables RADIUS authentication:

    Username with ATM Circuit Identifier and No Circuit Type

    This example shows the steps to configure a service profile for a username that includes the ATM circuit identifier, but does not include the circuit type.

    host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier atm host1(config-service-profile)#exit host1(config)#

    The example generates the following username:

    The circuit identifier indicates a user at slot 2, port 3, with a virtual path identifier (VPI) of 32 and a virtual channel identifier (VCP) of 100.

    Username with VLAN Circuit Identifier and Circuit Type

    This example shows the steps to configure a service profile for a username that includes a VLAN circuit identifier and the circuit type.

    host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier vlan prepend-circuit-type host1(config-service-profile)#exit

    The example generates the following username:

    The circuit identifier indicates a user on slot 1, port 0, no stacked vlan, and a vlan ID of 45.

    Username with MAC Address

    Step-by-Step Procedure

    This example shows the steps to configure a service profile that generates a username that includes a MAC address.

    Note: Including a MAC address in a username works only for DHCP users. It does not work for IP subscribers that have statically configured IP addresses.

    host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier vlan host1(config-service-profile)#include mac-address host1(config-service-profile)#include dhcp-option 82 agent-circuit-id host1(config-service-profile)#exit host1(config)#

    The example generates the following username, which includes the MAC address:

    Published: 2014-08-20