JUNOSe 10.0.x Broadband Access Configuration Guide Home Techpubs Home Report an Error Collapse TOC List of Figures List of Tables Index Entire manual as PDF		About the Documentation E-series and JUNOSe Documentation and Release Notes Audience E-series and JUNOSe Text and Syntax Conventions Related E-series and JUNOSe Documentation Obtaining Documentation Documentation Feedback Requesting Technical Support Configuring Remote Access Remote Access Overview B-RAS Data Flow Configuring IP Addresses for Remote Clients AAA Overview Remote Access Platform Considerations B-RAS Protocol Support Remote Access References Before You Configure B-RAS Remote Access Configuration Tasks Configuring a B-RAS License Mapping a User Domain Name to a Virtual Router Mapping User Requests Without a Valid Domain Name Mapping User Requests Without a Configured Domain Name Using DNIS Redirected Authentication IP Hinting Setting Up Domain Name and Realm Name Usage Using the Realm Name as the Domain Name Using Delimiters Other Than @ Using Either the Domain or the Realm as the Domain Name Specifying the Domain Name or Realm Name Parse Direction Stripping the Domain Name Domain Name and Realm Name Examples Specifying a Single Name for Users from a Domain Configuring RADIUS Authentication and Accounting Servers Server Access Server Request Processing Limit Authentication and Accounting Methods Supporting Exchange of Extensible Authentication Protocol Messages Immediate Accounting Updates Duplicate and Broadcast Accounting Configuring AAA Duplicate Accounting Configuring AAA Broadcast Accounting Overriding AAA Accounting NAS Information UDP Checksums Collecting Accounting Statistics Configuring RADIUS AAA Servers SNMP Traps and System Log Messages SNMP Traps System Log Messages Configuring SNMP Traps Configuring Local Authentication Servers Creating the Local Authentication Environment Creating Local User Databases Adding User Entries to Local User Databases Using the username Command Using the aaa local username Command Assigning a Local User Database to a Virtual Router Enabling Local Authentication on the Virtual Router Configuration Commands Local Authentication Example Configuring Tunnel Subscriber Authentication Configuring Name Server Addresses Configuration Tasks DNS Primary and Secondary NMS Configuration WINS Primary and Secondary NMS Configuration Configuring Local Address Servers Local Address Pool Ranges Local Address Pool Aliases Shared Local Address Pools SNMP Thresholds Configuring a Local Address Server Configuring DHCP Features Creating an IP Interface Single Clients per ATM Subinterface Multiple Clients per ATM Subinterface Configuring AAA Profiles Allowing or Denying Domain Names Configuration Example Using Domain Name Aliases Manually Setting NAS-Port-Type Attribute Service-Description Attribute Using RADIUS Route-Download Server to Distribute Routes Format of Downloaded Routes Framed-Route (RADIUS attribute 22) Cisco-AVPair (Cisco VSA 26-1) How the Route-Download Server Downloads Routes Configuring the Route-Download Server to Download Routes Using the AAA Logical Line Identifier to Track Subscribers How the Router Obtains and Uses the LLID RADIUS Attributes in Preauthentication Request Considerations for Using the LLID Configuring the Router to Obtain the LLID for a Subscriber Troubleshooting Subscriber Preauthentication Using VSAs for Dynamic IP Interfaces Traffic Shaping for PPP over ATM Interfaces Mapping Application Terminate Reasons to RADIUS Terminate Codes Configuration Example Configuring Timeout Limiting Active Subscribers Notifying RADIUS of AAA Failure Configuring the SRC Client Monitoring and Troubleshooting Remote Access Setting Baselines for Remote Access Setting a Baseline for AAA Statistics Setting a Baseline for AAA Route Downloads Setting a Baseline for COPS Statistics Setting a Baseline for Local Address Pool Statistics Setting a Baseline for RADIUS Statistics Setting the Baseline for SRC Statistics How to Monitor PPP Interfaces Monitoring AAA Accounting Configuration Monitoring AAA Accounting Default Monitoring Accounting Interval Monitoring Specific Virtual Router Groups Monitoring the Default AAA Authentication Method List Monitoring Domain and Realm Name Delimiters Monitoring Mapping Between User Domains and Virtual Routers Monitoring Tunnel Subscriber Authentication Monitoring Routing Table Address Lookup Monitoring the AAA Model Monitoring IP Addresses of Primary and Secondary DNS and WINS Name Servers Monitoring AAA Profile Configuration Monitoring Statistics about the RADIUS Route-Download Server Monitoring Routes Downloaded by the RADIUS Route-Download Server Monitoring Chassis-Wide Routes Downloaded by RADIUS Route-Download Servers Monitoring Authentication, Authorization, and Accounting Statistics Monitoring the Number of Active Subscribers Per Port Monitoring the Maximum Number of Active Subscribers Per Virtual Router Monitoring Session Timeouts Monitoring Interim Accounting for Users on the Virtual Router Monitoring Virtual Router Groups Configured for AAA Broadcast Accounting Monitoring Configuration Information for AAA Local Authentication Monitoring AAA Server Attributes Monitoring the COPS Layer Over SRC Connection Monitoring Statistics About the COPS Layer Monitoring Local Address Pool Aliases Monitoring Local Address Pools Monitoring Local Address Pool Statistics Monitoring Shared Local Address Pools Monitoring the Routing Table Monitoring the B-RAS License Monitoring the RADIUS Server Algorithm Monitoring RADIUS Override Settings Monitoring the RADIUS Rollover Configuration Monitoring RADIUS Server Information Monitoring RADIUS Services Statistics Monitoring RADIUS SNMP Traps Monitoring RADIUS Accounting for L2TP Tunnels Monitoring RADIUS UDP Checksums Monitoring RADIUS Server IP Addresses Monitoring SRC Client Connection Status Monitoring SRC Client Connection Statistics Monitoring the SRC Client Version Number Monitoring Subscriber Information Monitoring Application Terminate Reason Mappings Configuring RADIUS Attributes RADIUS Overview RADIUS Services RADIUS Attributes RADIUS Platform Considerations RADIUS References Subscriber AAA Access Messages Supported RADIUS IETF Attributes Supported Juniper Networks VSAs Subscriber AAA Accounting Messages Supported RADIUS IETF Attributes Supported Juniper Networks VSAs Tunnel Accounting Messages DSL Forum VSAs in AAA Access and Accounting Messages CLI AAA Messages CLI Commands Used to Modify RADIUS Attributes RADIUS IETF Attributes [4] NAS-IP-Address [5] NAS-Port [8] Framed-IP-Address [9] Framed-Ip-Netmask [13] Framed-Compression [25] Class [30] Called-Station-Id [31] Calling-Station-Id [32] NAS-Identifier [41] Acct-Delay-Time [44] Acct-Session-Id [45] Acct-Authentic [49] Acct-Terminate-Cause [50] Acct-Multi-Session-Id [51] Acct-Link-Count [52] Acct-Input-Gigawords [53] Output-Gigawords [55] Event-Timestamp [61] NAS-Port-Type [64] Tunnel-Type [65] Tunnel-Medium-Type [66] Tunnel-Client-Endpoint [67] Tunnel-Server-Endpoint [68] Acct-Tunnel-Connection [77] Connect-Info [82] Tunnel-Assignment-Id [83] Tunnel-Preference [87] NAS-Port-Id [90] Tunnel-Client-Auth-Id [91] Tunnel-Server-Auth-Id [96] Framed-Interface-Id [97] Framed-Ipv6-Prefix [188] Ascend-Num-In-Multilink All Tunnel Server Attributes Juniper Networks Vendor-Specific Attributes [26-1] Virtual-Router [26-10] Ingress-Policy-Name [26-11] Egress-Policy-Name [26-14] Service-Category [26-15] PCR [26-16] SCR [26-17] MBS [26-24] Pppoe-Description [26-35] Acct-Input-Gigapackets [26-36] Acct-Output-Gigapackets [26-44] Tunnel-Interface-Id [26-51] Disconnect-Cause [26-53] Service-Description [26-55] DHCP-Options [26-56] DHCP-MAC-Address [26-57] DHCP-GI-Address [26-62] MLPPP-Bundle-Name [26-63] Interface-Desc [26-81] L2C-Information [26-92] L2C-Up-Stream-Data [26-93] L2C-Down-Stream-Data [26-141] Downstream-Calculated-Qos-Rate [26-142] Upstream-Calculated-Qos-Rate [26-143] Max-Clients-Per-Interface ANCP-Related Juniper Networks VSAs DSL Forum Vendor-Specific Attributes Including or Excluding Attributes in RADIUS Messages Ignoring Attributes When Receiving Access-Accept Messages Configuring RADIUS Dynamic-Request Server RADIUS Dynamic-Request Server Overview RADIUS Dynamic-Request Server Platform Considerations RADIUS Dynamic-Request Server References How RADIUS Dynamic-Request Server Works RADIUS-Initiated Disconnect Disconnect Messages Message Exchange Supported Error-Cause Codes (RADIUS Attribute 101) Qualifications for Disconnect Security/Authentication Configuring RADIUS-Initiated Disconnect RADIUS-Initiated Change of Authorization Change-of-Authorization Messages Message Exchange Supported Error-Cause Codes (RADIUS Attribute 101) Qualifications for Change of Authorization Security/Authentication Configuring RADIUS-Initiated Change of Authorization RADIUS Dynamic-Request Server Commands Monitoring RADIUS Dynamic-Request Servers Configuring RADIUS Relay Server RADIUS Relay Server Overview RADIUS Relay Server Platform Considerations RADIUS Relay Server References How RADIUS Relay Server Works Authentication and Addressing Accounting Terminating the Wireless Subscriber’s Connection RADIUS Relay Server and the SRC Software Using the SRC Software for Addressing Using the SRC Application for Accounting Configuring RADIUS Relay Server Support Monitoring RADIUS Relay Server RADIUS Attribute Descriptions RADIUS IETF Attributes Juniper Networks VSAs DSL Forum VSAs Pass Through RADIUS Attributes RADIUS Attributes References Application Terminate Reasons AAA Terminate Reasons L2TP Terminate Reasons PPP Terminate Reasons RADIUS Client Terminate Reasons Monitoring RADIUS Monitoring Override Settings of RADIUS IETF Attributes Monitoring the NAS-Port-Format RADIUS Attribute Monitoring the Calling-Station-Id RADIUS Attribute Monitoring the NAS-Identifier RADIUS Attribute Monitoring the Format of the Remote-Circuit-ID for RADIUS Monitoring the Delimiter Character in the Remote-Circuit-ID for RADIUS Monitoring the Acct-Session-Id RADIUS Attribute Monitoring the DSL-Port-Type RADIUS Attribute Monitoring the Connect-Info RADIUS Attribute Monitoring the NAS-Port-ID RADIUS Attribute Monitoring Included RADIUS Attributes Monitoring Ignored RADIUS Attributes Setting the Baseline for RADIUS Dynamic-Request Server Statistics Monitoring RADIUS Dynamic-Request Server Statistics Monitoring the Configuration of the RADIUS Dynamic-Request Server Setting a Baseline for RADIUS Relay Statistics Monitoring RADIUS Relay Server Statistics Monitoring the Configuration of the RADIUS Relay Server Monitoring the Status of RADIUS Relay UDP Checksums Configuring TACACS+ TACACS+ Overview AAA Overview Administrative Login Authentication Privilege Authentication Login Authorization Accounting TACACS+ Platform Considerations TACACS+ References Before You Configure TACACS+ Configuring TACACS+ Support Configuring Authentication Configuring Accounting Monitoring TACACS+ Setting Baseline TACACS+ Statistics Monitoring TACACS+ Statistics Monitoring TACACS+ Information L2TP Overview L2TP Overview L2TP Terminology Implementing L2TP Sequence of Events on the LAC Sequence of Events on the LNS Packet Fragmentation L2TP Platform Considerations L2TP Module Requirements ERX-7xx Models, ERX-14xx Models, and the ERX-310 Router E120 Router and E320 Router Sessions and Tunnels Supported L2TP References Configuring an L2TP LAC LAC Configuration Prerequisites Modifying L2TP LAC Default Settings for Managing Destinations, Tunnels, and Sessions Generating UDP Checksums in Packets to L2TP Peers Specifying a Destruct Timeout for L2TP Tunnels and Sessions Preventing Creation of New Destinations, Tunnels, and Sessions Preventing Creation of New Destinations, Tunnels, and Sessions on the Router Preventing Creation of New Tunnels and Sessions at a Destination Preventing Creation of New Sessions for a Tunnel Specifying a Drain Timeout for a Disconnected Tunnel Shutting Down Destinations, Tunnels, and Sessions Closing Existing and Preventing New Destinations, Tunnels, and Sessions on the Router Closing Existing and Preventing New Tunnels and Sessions for a Destination Closing Existing and Preventing New Sessions in a Specific Tunnel Closing a Specific Session Specifying the Number of Retransmission Attempts Configuring Calling Number AVP Formats Calling Number AVP 22 Configuration Tasks Configuring the Fallback Format Disabling the Calling Number AVP Mapping a User Domain Name to an L2TP Tunnel Overview Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode Mapping User Domain Names to L2TP Tunnels from Tunnel Group Tunnel Mode Configuring the RX Speed on the LAC Managing the L2TP Destination Lockout Process Modifying the Lockout Procedure Verifying that a Locked-Out Destination is Available Configuring a Lockout Timeout Unlocking a Destination that is Currently Locked Out Starting an Immediate Lockout Test Managing Address Changes Received from Remote Endpoints Configuring LAC Tunnel Selection Parameters Configuring the Failover Between Preference Levels Method Configuring the Failover Within a Preference Level Method Configuring the Maximum Sessions per Tunnel Configuring the Weighted Load Balancing Method Configuring an L2TP LNS LNS Configuration Prerequisites Configuring an LNS Creating an L2TP Destination Profile Creating an L2TP Host Profile Configuring the Maximum Number of LNS Sessions Configuring the RADIUS Connect-Info Attribute on the LNS Overriding LNS Out-of-Resource Result Codes 4 and 5 Overriding the Result Codes Displaying the Current Override Setting Selecting Tunnel-Service Modules for LNS Sessions Using MLPPP Assigning Bundled Group Identifiers Overriding All Endpoint Discriminators Enabling Tunnel Switching Creating Persistent Tunnels Testing Tunnel Configuration Managing L2TP Destinations, Tunnels, and Sessions Configuring Disconnect Cause Information Generating the Disconnect Cause AVP Globally Generating the Disconnect Cause AVP with a Host Profile Enabling RADIUS Accounting for Disconnect Cause Displaying Disconnect Cause Statistics Configuring the Receive Window Size Configuring the Default Receive Window Size Configuring the Receive Window Size on the LAC Configuring the Receive Window Size on the LNS Configuring Peer Resynchronization Configuring Peer Resynchronization for L2TP Host Profiles and AAA Domain Map Tunnels Configuring the Global L2TP Peer Resynchronization Method Using RADIUS to Configure Peer Resynchronization Configuring L2TP Tunnel Switch Profiles Applying the L2TP Tunnel Switch Profile Configuration Guidelines Configuring L2TP AVPs for Relay Configuration Tasks Enabling Tunnel Switching on the Router Configuring L2TP Tunnel Switch Profiles Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups Applying Default L2TP Tunnel Switch Profiles Applying L2TP Tunnel Switch Profiles by Using RADIUS Configuring the Transmit Connect Speed Calculation Method Transmit Connect Speed Calculation Methods Static Layer 2 Dynamic Layer 2 QoS Actual Transmit Connect Speed Calculation Examples Example 1: L2TP Session over ATM 1483 Interface Example 2: L2TP Session over Ethernet VLAN Interface Transmit Connect Speed Reporting Considerations Session Termination for Dynamic Speed Timeout Advisory Speed Precedence for VLANs over Bridged Ethernet Using AAA Domain Maps to Configure the Transmit Connect Speed Calculation Method Using AAA Tunnel Groups to Configure the Transmit Connect Speed Calculation Method Using AAA Default Tunnel Parameters to Configure the Transmit Connect Speed Calculation Method Using RADIUS to Configure the Transmit Connect Speed Calculation Method PPP Accounting Statistics Configuring L2TP Dial-Out L2TP Dial-Out Overview Terms Network Model for Dial-Out Dial-Out Process Dial-Out Operational States Chassis Virtual Router Targets Sessions Outgoing Call Setup Details Access-Request Message Access-Accept Message Outgoing Call Mutual Authentication Route Installation L2TP Dial-Out Platform Considerations L2TP Dial-Out References Before You Configure L2TP Dial-Out Configuring L2TP Dial-Out Monitoring L2TP Dial-Out L2TP Disconnect Cause Codes L2TP Disconnect Cause Codes Monitoring L2TP and L2TP Dial-Out Monitoring the Mapping for User Domains and Virtual Routers with AAA Monitoring Configured Tunnel Groups with AAA Monitoring Configuration of Tunnel Parameters with AAA Monitoring Global Configuration Status on E-series Routers Monitoring Detailed Configuration Information for Specified Destinations Monitoring Locked Out Destinations Monitoring Configured Destination Profiles or Host Profiles Monitoring Configured and Operational Status of all Destinations Monitoring Statistics on the Cause of a Session Disconnection Monitoring Detailed Configuration Information about Specified Sessions Monitoring Configured and Operational Summary Status Monitoring Configured Switch Profiles on Router Monitoring Detailed Configuration Information about Specified Tunnels Monitoring Configured and Operational Status of All Tunnels Monitoring Chassis-wide Configuration for L2TP Dial-out Monitoring Status of Dial-out Sessions Monitoring Dial-out Targets within the Current VR Context Monitoring Operational Status within the Current VR Context DHCP Overview DHCP Overview Information Session and Resource Control Software DHCP Platform Considerations DHCP References Configuring the DHCP Access Model Configuring DHCP Proxy Clients Logging DHCP Packet Information Viewing and Deleting DHCP Client Bindings DHCP Local Server Overview Embedded DHCP Local Server Overview DHCP Local Server and Client Configuration Equal-Access Mode Overview Local Pool Selection and Address Allocation The Connection Process Standalone Mode Overview Local Pool Selection and Address Allocation Server Management Table DHCP Local Server Prerequisites DHCP Local Server Configuration Tasks Configuring DHCP Local Server Configuring the DHCP Local Server Basic Configuration of DHCP Local Server Limiting the Number of IP Addresses Supplied by DHCP Local Server Excluding IP Addresses from Address Pools Configuring DHCP Local Server to Support Creation of Dynamic Subscriber Interfaces Differentiating Between Clients with the Same Client ID or Hardware Address Logging Out DHCP Local Server Subscribers Clearing an IP DHCP Local Server Binding Using SNMP Traps to Monitor DHCP Local Server Events Using DHCP Local Server Event Logs Configuring DHCP Local Address Pools Basic Configuration of DHCP Local Address Pools Linking Local Address Pools Setting Grace Periods for Address Leases Configuring AAA Authentication for DHCP Local Server Standalone Mode Configuring the DHCPv6 Local Server Configuring the Router to Work with the SRC Software Configuring DHCP Relay Configuring DHCP Relay and BOOTP Relay Enabling DHCP Relay Removing Access Routes from Routing Tables and NVS Treating All Packets as Originating at Trusted Sources Assigning the Giaddr to Source IP Address Protecting Against Spoofed Giaddr and Relay Agent Option Values Using the Broadcast Flag Setting to Control Transmission of DHCP Reply Packets Interaction with Layer 2 Unicast Transmission Method Preventing DHCP Relay from Installing Host Routes by Default Configuration Example—Preventing Installation of Host Routes Including Relay Agent Option Values in the PPPoE Remote Circuit ID Using the Giaddr to Identify the Primary Interface for Dynamic Subscriber Interfaces Configuring Layer 2 Unicast Transmission Method for Reply Packets to DHCP Clients Using Option 60 Strings to Forward Client Traffic to Specific DHCP Servers Configuration Example—Using DHCP Relay Option 60 to Specify Traffic Forwarding Relaying DHCP Packets that Originate from a Cable Modem Configuring Relay Agent Option 82 Information Preventing Option 82 Information from Being Stripped from Trusted Client Packets Configuring Relay Agent Information Option (Option 82) Suboption Values Format of the JUNOSe Data Field in the Vendor-Specific Suboption for Option 82 Using the set dhcp relay agent sub-option Command to Enable Option 82 Suboption Support Configuration Example—Using DHCP Relay Option 82 to Pass IEEE 802.1p Values to DHCP Servers Using the set dhcp relay agent Command to Enable Option 82 Suboption Support Configuring DHCP Relay Proxy Enabling DHCP Relay Proxy Use the First Offer from a DHCP Server Set a Timeout for DHCP Client Renewal Messages Managing Host Routes Selecting the DHCP Server Response Behavior for Bound Clients and Address Renewals Configuring the DHCP External Server Application DHCP External Server Overview Preservation of Dynamic Subscriber Interfaces with DHCP External Server Overview DHCP External Server Identification of Clients with Duplicate MAC Addresses Overview Configuration Guidelines for Using Duplicate MAC Mode Restrictions for Using Duplicate MAC Mode to Manage Clients DHCP External Server Configuration Requirements Enabling and Disabling the DHCP External Server Application Monitoring DHCP Traffic Between Remote Clients and DHCP Servers Synchronizing the DHCP External Application and the Router Configuring Interoperation with Ethernet DSLAMs Configuring the DHCP External Server to Support the Creation of Dynamic Subscriber Interfaces Configuring DHCP External Server to Control Preservation of Dynamic Subscriber Interfaces Configuring Dynamic Subscriber Interfaces for Interoperation with DHCP Relay and DHCP Relay Proxy Deleting Clients from a Virtual Router’s DHCP Binding Table Configuring DHCP External Server to Uniquely Identify Clients with Duplicate MAC Addresses Configuring DHCP External Server to Re-Authenticate Auto-Detected Dynamic Subscriber Interfaces Monitoring and Troubleshooting DHCP Setting Baselines for DHCP Statistics Setting a Baseline for DHCP Relay and Relay Proxy Setting a Baseline for DHCP Proxy Server Statistics Setting a Baseline for DHCP External Server Statistics Setting a Baseline for DHCP Local Server Statistics Monitoring Addresses Excluded from DHCP Local Server Use Monitoring DHCP Bindings Monitoring DHCP Binding Information Monitoring DHCP Binding Count Information Monitoring DHCP Binding Host Information Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address Bindings) Monitoring DHCP Bindings (Displaying DHCP Bindings Based on Binding ID) Monitoring DHCP Bindings (Local Server Binding Information) Monitoring DHCP External Server Configuration Information Monitoring DHCP External Server Statistics Monitoring DHCP External Server Duplicate MAC Address Setting Monitoring DHCP Local Address Pools Monitoring DHCP Local Server Authentication Information Monitoring DHCP Local Server Configuration Monitoring DHCP Local Server Leases Monitoring DHCP Local Server Statistics Monitoring DHCP Option 60 Information Monitoring DHCP Packet Capture Settings Monitoring DHCP Relay Configuration Information Monitoring DHCP Relay Proxy Statistics Monitoring DHCP Relay Statistics Monitoring DHCP Server and DHCP Relay Agent Statistics Monitoring DHCP Server and Proxy Client Information Monitoring DHCPv6 Local Server Binding Information Monitoring DHCPv6 Local Server DNS Search Lists Monitoring DHCPv6 Local Server DNS Servers Monitoring DHCPv6 Local Server Prefix Lifetime Monitoring DHCPv6 Local Server Statistics Monitoring Duplicate MAC Addresses Use By DHCP Local Server Clients Monitoring the Maximum Number of Available Leases Monitoring Static IP Address and MAC Address Pairs Supplied by DHCP Local Server Monitoring Status of DHCP Applications Configuring Subscriber Management Subscriber Management Overview Subscriber Management Platform Considerations Subscriber Management Attributes Dynamic IP Subscriber Interfaces Subscriber Management Procedure Configuring Subscriber Management with an External DHCP Server Subscriber Management Commands Subscriber Management Configuration Examples Username with ATM Circuit Identifier and No Circuit Type Username with VLAN Circuit Identifier and Circuit Type Username with MAC Address Monitoring Subscriber Management Monitoring IP Service Profiles Monitoring Active IP Subscribers Created by Subscriber Management Configuring Subscriber Interfaces Subscriber Interfaces Overview Relationship to Shared IP Interfaces Relationship to Primary IP Interfaces Ethernet Interfaces and VLANs Moving Interfaces Preventing IP Spoofing Routing Protocols Policies and QoS Applications Directing Traffic Toward Special Local Content Differentiating Traffic for VPNs Subscriber Interfaces Platform Considerations Interface Specifiers Subscriber Interfaces References Dynamic Creation of Subscriber Interfaces DHCP Servers DHCP Local Server and Address Allocation DHCP External Server and Address Allocation DHCP Relay Configuration Supported Configurations Packet Detection Designating Traffic for the Primary IP Interface Using Framed Routes Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces How MAC Address Validation State Inheritance Works Configuration of MAC Address Validation State Inheritance Verification of MAC Address Validation State Inheritance Configuring Static Subscriber Interfaces Using a Destination Address to Demultiplex Traffic Using a Source Address to Demultiplex Traffic Configuring Dynamic Subscriber Interfaces Configuring Dynamic Subscriber Interfaces over Ethernet Configuring Dynamic Subscriber Interfaces over VLANs Configuring Dynamic Subscriber Interfaces over Bridged Ethernet Configuring Dynamic Subscriber Interfaces over GRE Tunnels Dynamic Subscriber Interface Configuration Example Monitoring Subscriber Interfaces Monitoring Subscriber Interfaces Overview Monitoring Subscriber Interfaces Monitoring Active IP Subscribers Created by Subscriber Management Configuring Service Manager Service Manager Overview Service Manager Terms and Acronyms Service Manager Platform Considerations Service Manager References Service Manager Configuration Tasks Service Definitions Creating Service Definitions Managing Your Service Definitions Referencing Policies in Service Definitions Referencing QoS Configurations in Service Definitions Specifying QoS Profiles in a Service Definition Configuring a QoS Profile for Service Manager Specifying QoS Profiles in a Service Definition Specifying QoS Parameter Instances in a Service Definition Creating a Parameter Instance in a Profile Specifying QoS Parameter Instances in a Service Definition Specifying the Add and Initial-Value Keywords Modifying QoS Configurations with Service Manager Modifying Parameter Instances Modifying QoS Configurations in a Single Service Manager Event Modifying QoS Configurations Using Other Sources Service Manager RADIUS SNMP, the SRC Software, and the CLI Removing QoS Configurations Referenced by Service Manager QoS for Service Manager Considerations RADIUS or Service Manager Interoperability with Other Service Components QoS Statistics Ranges Configuring the Service Manager License Managing and Activating Service Sessions Using RADIUS to Manage Subscriber Service Sessions Using RADIUS to Activate Subscriber Service Sessions Service Manager RADIUS Attributes Using Tags with RADIUS Attributes Using RADIUS to Deactivate Service Sessions Setting Thresholds Using the Deactivate-Service Attribute Using Mutex Groups to Activate and Deactivate Subscriber Services Activating and Deactivating Multiple Services Configuring a Mutex Service Configuring RADIUS Accounting for Service Manager Configuring Service Interim Accounting Using the CLI to Manage Subscriber Service Sessions Using the CLI to Activate Subscriber Service Sessions Preprovisioning Services Using Service Session Profiles Using the CLI to Deactivate Subscriber Service Sessions Gracefully Deactivating Subscriber Service Sessions Forcing Immediate Deactivation of Subscriber Service Sessions Using Service Session Profiles to Deactivate Service Sessions Configuring Service Manager Statistics Setting Up the Service Definition File for Statistics Collection Enabling Statistics Collection with RADIUS Enabling Statistics Collection with the CLI Service Manager Performance Considerations Service Definition Examples Tiered Service Example Video-on-Demand Service Definition Example Voice-over-IP Service Definition Example Guided Entrance Service Example Guided Entrance Service Definition Example Using CoA Messages with Guided Entrance Services Configuring the HTTP Local Server to Support Guided Entrance HTTP Local Server Commands Monitoring Service Manager Setting a Baseline for HTTP Local Server Statistics Monitoring the Connections to the HTTP Local Server Monitoring the Configuration of the HTTP Local Server Monitoring Statistics for Connections to the HTTP Local Server Monitoring Profiles for the HTTP Local Server Monitoring the Default Interval for Interim Accounting of Services Monitoring the Status of the Service Manager License Monitoring Profiles for Service Manager Monitoring QoS Parameters for Service Manager Monitoring Service Definitions Monitoring Service Session Profiles Monitoring Active Owner Sessions with Service Manager Monitoring Active Subscriber Sessions with Service Manager Monitoring the Number of Active Subscriber and Service Sessions with Service Manager Index Index