[Contents] [Prev] [Next] [Index] [Report an Error]

# Subscriber Interfaces Overview

You can configure E-series routers to create subscriber interfaces statically or dynamically.

The following list shows the underlying (layer 2) interfaces on which you can currently configure each type of subscriber interface.

- Static subscriber interfaces
  - Bridged Ethernet over ATM (with and without VLANs)
  - Fast Ethernet (with and without VLANs)
  - Gigabit Ethernet (with and without VLANs)
  - 10-Gigabit Ethernet (with and without VLANs)
  - IP over ATM
  - POS
  - Generic Routing Encapsulation (GRE) tunnels
- Dynamic subscriber interfaces
  - Bridged Ethernet over ATM (with and without VLANs)
  - Fast Ethernet (with and without VLANs)
  - Gigabit Ethernet (with and without VLANs)
  - 10-Gigabit Ethernet (with and without VLANs)
  - GRE tunnels

For information about platform support for subscriber interfaces, see Subscriber Interfaces Platform Considerations.

## Relationship to Shared IP Interfaces

A subscriber interface is an extension of a shared IP interface. A shared IP interface is one of a group of IP interfaces that use the same layer 2 interface.

Shared IP interfaces are unidirectional—they can transmit but not receive traffic. In contrast, subscriber interfaces are bidirectional—they can both receive and transmit traffic.

For details about shared IP interfaces, see the Shared IP Interfaces section in JUNOSe IP, IPv6, and IGP Configuration Guide .

## Relationship to Primary IP Interfaces

A subscriber interface operates only with a primary IP interface—a normal IP interface on a supported layer 2 interface, such as Ethernet. You create a primary interface by assigning an IP address to the Ethernet interface. Although you can configure a subscriber interface directly on an Ethernet interface, the subscriber interface does not operate until you assign an IP address to the Ethernet interface.

To configure a subscriber interface you must associate either a source address or a destination address with the interface. The router receives packets on a subscriber interface after demultiplexing the packet according to the specified source address or destination address. You can associate multiple source addresses or multiple destination addresses with a subscriber interface. However, a single primary interface and its associated subscriber interfaces can only demultiplex source addresses or destination addresses at any given time.

For example, Figure 16 illustrates the relationship between subscriber interfaces, an associated primary IP interface, and an associated Ethernet interface.

Figure 16: Subscriber Interfaces over Ethernet

When the router receives traffic on a primary interface, the primary interface performs a lookup in its demultiplexing table. If the result of the lookup is a subscriber interface, the traffic is received on the associated subscriber interface.

| Note: You can use the set dhcp relay giaddr-selects-interface command to specify that the primary interface is identified by information in the giaddr field of DHCP ACK messages. By default, the router identifies the primary interface based on the interface used by the DHCP-destined packets. See Using the Giaddr to Identify the Primary Interface for Dynamic Subscriber Interfaces .

## Ethernet Interfaces and VLANs

In the absence of VLANs, Ethernet does not have a demultiplexing layer. A subscriber interface adds a demultiplexing layer for an Ethernet interface that is configured without VLANs. Using subscriber interfaces, the router can demultiplex or separate the traffic associated with different subscribers.

You can configure subscriber interfaces with VLANs. If you do so, the E-series router demultiplexes packets by using first the VLAN and then the subscriber interface.

## Moving Interfaces

A shared IP interface that has associated subscriber demultiplexing attributes retains these attributes when it moves.

For details about moving shared IP interfaces, see the Moving IP Interfaces section in JUNOSe IP, IPv6, and IGP Configuration Guide .

## Preventing IP Spoofing

You can prevent IP spoofing on subscriber interfaces by using media access control (MAC) address validation.

For information about configuring MAC address validation, see the MAC Address Validation section in JUNOSe IP, IPv6, and IGP Configuration Guide.

For information about the relationship between the MAC address validation state and dynamically created subscriber interfaces, see Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces.

## Routing Protocols

You configure unicast routing protocols on subscriber interfaces in the same way that you configure routing protocols on primary IP interfaces, provided that you configure them to use unicast addressing when communicating with a peer. You can also enable multicast routing protocols such as IGMP on subscriber interfaces; however, we do not recommend this type of configuration.

## Policies and QoS

You can configure policies, such as rate limiting and filtering, and quality of service (QoS) for subscriber interfaces in the same way that you do for primary IP interfaces. For more information, see the JUNOSe Policy Management Configuration Guide and the JUNOSe Quality of Service Configuration Guide.

## Applications

In a cable modem network, service providers can use subscriber interfaces to:

- Direct traffic toward special local content in the network
- Differentiate traffic for virtual private networks (VPNs)

### Directing Traffic Toward Special Local Content

Figure 17 shows an example of a cable modem network. Multiple cable modem termination systems (CMTSs) connect to multiple shared media access LANs. Many subscribers connect to each LAN.

In this example, the service provider uses subscriber interfaces to direct traffic toward special local content on the network: a voice over Internet Protocol (VoIP) service on network 10.11.0.0/16, or a local gaming service on network 10.12.0.0/16. Rate limits and policies on the subscriber interface customize the service level for the associated service. In this application, the E-series router is the first-hop router for the subscribers, and the subscriber interfaces demultiplex traffic based on the destination address.

Figure 17: Subscriber Interfaces in a Cable Modem Network

For instructions on configuring the application shown in Figure 17, see Using a Destination Address to Demultiplex Traffic.

### Differentiating Traffic for VPNs

Similarly, service providers can use subscriber interfaces to differentiate traffic for VPNs. Figure 18 shows an example of this application.

Customers on subnet A need to connect to VPN A, and customers on subnet B need to connect to VPN B. The E-series router connects to VPN A through virtual router A and to VPN B though virtual router B. Using two subscriber interfaces on the same primary interface (one on virtual router B and one on virtual router A), the E-series router can separate the traffic from subnets A and B. Because the E-series router is forwarding traffic in this application, the shared IP interface should demultiplex the traffic by using a source address.

Figure 18: Associating Subnets with a VPN Using Subscriber Interfaces

For instructions on configuring the application shown in Figure 18, see Using a Source Address to Demultiplex Traffic.

[Contents] [Prev] [Next] [Index] [Report an Error]