JUNOSe 9.1.x Broadband Access Configuration Guide > Table of Contents

Table of Contents

About This Guide
Objectives
Audience
E-series Routers
Documentation Conventions
Related E-series and JUNOSe Documentation
E-series and JUNOSe Documents
JUNOSe Configuration Guides
Obtaining Documentation
Documentation Feedback
Requesting Technical Support
Configuring Remote Access
Overview
B-RAS Data Flow
Configuring IP Addresses for Remote Clients
AAA Overview
Platform Considerations
B-RAS Protocol Support
References
Before You Configure B-RAS
Configuration Tasks
Configuring a B-RAS License
Mapping a User Domain Name to a Virtual Router
Mapping User Requests Without a Valid Domain Name
Mapping User Requests Without a Configured Domain Name
Using DNIS
Redirected Authentication
IP Hinting
Setting Up Domain Name and Realm Name Usage
Using the Realm Name as the Domain Name
Using Delimiters Other Than @
Using Either the Domain or the Realm as the Domain Name
Specifying the Domain Name or Realm Name Parse Direction
Stripping the Domain Name
Domain Name and Realm Name Examples
Specifying a Single Name for Users from a Domain
Configuring RADIUS Authentication and Accounting Servers
Server Access
Server Request Processing Limit
Authentication and Accounting Methods
Supporting Exchange of Extensible Authentication Protocol Messages
Immediate Accounting Updates
Duplicate and Broadcast Accounting
Configuring AAA Duplicate Accounting
Configuring AAA Broadcast Accounting
Overriding AAA Accounting NAS Information
UDP Checksums
Collecting Accounting Statistics
Configuring RADIUS AAA Servers
SNMP Traps and System Log Messages
SNMP Traps
System Log Messages
Configuring SNMP Traps
Configuring Local Authentication Servers
Creating the Local Authentication Environment
Creating Local User Databases
Adding User Entries to Local User Databases
Using the username Command
Using the aaa local username Command
Assigning a Local User Database to a Virtual Router
Enabling Local Authentication on the Virtual Router
Configuration Commands
Local Authentication Example
Configuring Tunnel Subscriber Authentication
Configuring Name Server Addresses
Configuration Tasks
DNS Primary and Secondary NMS Configuration
WINS Primary and Secondary NMS Configuration
Configuring Local Address Servers
Local Address Pool Ranges
Local Address Pool Aliases
Shared Local Address Pools
SNMP Thresholds
Configuring a Local Address Server
Configuring DHCP Features
Creating an IP Interface
Single Clients per ATM Subinterface
Multiple Clients per ATM Subinterface
Configuring AAA Profiles
Allowing or Denying Domain Names
Configuration Example
Using Domain Name Aliases
Manually Setting NAS-Port-Type Attribute
Service-Description Attribute
Using RADIUS Route-Download Server to Distribute Routes
Format of Downloaded Routes
Framed-Route (RADIUS attribute 22)
Cisco-AVPair (Cisco VSA 26-1)
How the Route-Download Server Downloads Routes
Configuring the Route-Download Server to Download Routes
Using the AAA Logical Line Identifier to Track Subscribers
How the Router Obtains and Uses the LLID
RADIUS Attributes in Preauthentication Request
Considerations for Using the LLID
Configuring the Router to Obtain the LLID for a Subscriber
Troubleshooting Subscriber Preauthentication
Using VSAs for Dynamic IP Interfaces
Traffic Shaping for PPP over ATM Interfaces
Mapping Application Terminate Reasons to RADIUS Terminate Codes
Configuration Example
Configuring Timeout
Limiting Active Subscribers
Notifying RADIUS of AAA Failure
Configuring the SRC Client
Monitoring and Troubleshooting Remote Access
Setting Baselines for Remote Access
Setting a Baseline for AAA Statistics
Setting a Baseline for AAA Route Downloads
Setting a Baseline for COPS Statistics
Setting a Baseline for Local Address Pool Statistics
Setting a Baseline for RADIUS Statistics
Setting the Baseline for SRC Statistics
Monitoring AAA Accounting Configuration
Monitoring AAA Accounting Default
Monitoring Accounting Interval
Monitoring Specific Virtual Router Groups
Monitoring the Default AAA Authentication Method List
Monitoring Domain and Realm Name Delimiters
Monitoring Mapping Between User Domains and Virtual Routers
Monitoring Tunnel Subscriber Authentication
Monitoring Routing Table Address Lookup
Monitoring the AAA Model
Monitoring IP Addresses of Primary and Secondary DNS and WINS Name Servers
Monitoring AAA Profile Configuration
Monitoring Statistics about the RADIUS Route-Download Server
Monitoring Routes Downloaded by the RADIUS Route-Download Server
Monitoring Chassis-Wide Routes Downloaded by RADIUS Route-Download Servers
Monitoring Authentication, Authorization, and Accounting Statistics
Monitoring the Number of Active Subscribers Per Port
Monitoring the Maximum Number of Active Subscribers Per Virtual Router
Monitoring Session Timeouts
Monitoring Interim Accounting for Users on the Virtual Router
Monitoring Virtual Router Groups Configured for AAA Broadcast Accounting
Monitoring Configuration Information for AAA Local Authentication
Monitoring AAA Server Attributes
Monitoring the COPS Layer Over SRC Connection
Monitoring Statistics About the COPS Layer
Monitoring Local Address Pool Aliases
Monitoring Local Address Pools
Monitoring Local Address Pool Statistics
Monitoring Shared Local Address Pools
Monitoring the Routing Table
Monitoring the B-RAS License
Monitoring the RADIUS Server Algorithm
Monitoring RADIUS Override Settings
Monitoring the RADIUS Rollover Configuration
Monitoring RADIUS Server Information
Monitoring RADIUS Services Statistics
Monitoring RADIUS SNMP Traps
Monitoring RADIUS Accounting for L2TP Tunnels
Monitoring RADIUS UDP Checksums
Monitoring RADIUS Server IP Addresses
Monitoring SRC Client Connection Status
Monitoring SRC Client Connection Statistics
Monitoring the SRC Client Version Number
Monitoring Subscriber Information
Monitoring Application Terminate Reason Mappings
Configuring RADIUS Attributes
Overview
RADIUS Services
RADIUS Attributes
Platform Considerations
References
Subscriber AAA Access Messages
Supported RADIUS IETF Attributes
Supported Juniper Networks VSAs
Subscriber AAA Accounting Messages
Supported RADIUS IETF Attributes
Supported Juniper Networks VSAs
Tunnel Accounting Messages
DSL Forum VSAs in AAA Access and Accounting Messages
CLI AAA Messages
CLI Commands Used to Modify RADIUS Attributes
RADIUS IETF Attributes
[4] NAS-IP-Address
[5] NAS-Port
[8] Framed-IP-Address
[9] Framed-Ip-Netmask
[13] Framed-Compression
[25] Class
[30] Called-Station-Id
[31] Calling-Station-Id
[32] NAS-Identifier
[41] Acct-Delay-Time
[44] Acct-Session-Id
[45] Acct-Authentic
[49] Acct-Terminate-Cause
[50] Acct-Multi-Session-Id
[51] Acct-Link-Count
[52] Acct-Input-Gigawords
[53] Output-Gigawords
[55] Event-Timestamp
[61] NAS-Port-Type
[64] Tunnel-Type
[65] Tunnel-Medium-Type
[66] Tunnel-Client-Endpoint
[67] Tunnel-Server-Endpoint
[68] Acct-Tunnel-Connection
[77] Connect-Info
[82] Tunnel-Assignment-Id
[83] Tunnel-Preference
[87] NAS-Port-Id
[90] Tunnel-Client-Auth-Id
[91] Tunnel-Server-Auth-Id
[96] Framed-Interface-Id
[97] Framed-Ipv6-Prefix
[188] Ascend-Num-In-Multilink
All Tunnel Server Attributes
Juniper Networks Vendor-Specific Attributes
[26-1] Virtual-Router
[26-10] Ingress-Policy-Name
[26-11] Egress-Policy-Name
[26-14] Service-Category
[26-15] PCR
[26-16] SCR
[26-17] MBS
[26-24] Pppoe-Description
[26-35] Acct-Input-Gigapackets
[26-36] Acct-Output-Gigapackets
[26-44] Tunnel-Interface-Id
[26-51] Disconnect-Cause
[26-53] Service-Description
[26-55] DHCP-Options
[26-56] DHCP-MAC-Address
[26-57] DHCP-GI-Address
[26-62] MLPPP-Bundle-Name
[26-63] Interface-Desc
[26-81] L2C-Information
[26-92] L2C-Up-Stream-Data
[26-93] L2C-Down-Stream-Data
[26-141] Downstream-Calculated-Qos-Rate
[26-142] Upstream-Calculated-Qos-Rate
ANCP-Related Juniper Networks VSAs
DSL Forum Vendor-Specific Attributes
Including or Excluding Attributes in RADIUS Messages
Ignoring Attributes When Receiving Access-Accept Messages
Configuring RADIUS Dynamic-Request Server
Overview
Platform Considerations
References
How RADIUS Dynamic-Request Server Works
RADIUS-Initiated Disconnect
Disconnect Messages
Message Exchange
Supported Error-Cause Codes (RADIUS Attribute 101)
Qualifications for Disconnect
Security/Authentication
Configuring RADIUS-Initiated Disconnect
RADIUS-Initiated Change of Authorization
Change-of-Authorization Messages
Message Exchange
Supported Error-Cause Codes (RADIUS Attribute 101)
Qualifications for Change of Authorization
Security/Authentication
Configuring RADIUS-Initiated Change of Authorization
RADIUS Dynamic-Request Server Commands
Monitoring RADIUS Dynamic-Request Servers
Configuring RADIUS Relay Server
Overview
Platform Considerations
References
How RADIUS Relay Server Works
Authentication and Addressing
Accounting
Terminating the Wireless Subscriber's Connection
RADIUS Relay Server and the SRC Software
Using the SRC Software for Addressing
Using the SRC Application for Accounting
Configuring RADIUS Relay Server Support
Monitoring RADIUS Relay Server
RADIUS Attribute Descriptions
RADIUS IETF Attributes
Juniper Networks VSAs
DSL Forum VSAs
Pass Through RADIUS Attributes
References
Application Terminate Reasons
AAA Terminate Reasons
L2TP Terminate Reasons
PPP Terminate Reasons
RADIUS Client Terminate Reasons
Monitoring RADIUS
Monitoring Override Settings of RADIUS IETF Attributes
Monitoring the NAS-Port-Format RADIUS Attribute
Monitoring the Calling-Station-Id RADIUS Attribute
Monitoring the NAS-Identifier RADIUS Attribute
Monitoring the Format of the Remote-Circuit-ID for RADIUS
Monitoring the Delimiter Character in the Remote-Circuit-ID for RADIUS
Monitoring the Acct-Session-Id RADIUS Attribute
Monitoring the DSL-Port-Type RADIUS Attribute
Monitoring the Connect-Info RADIUS Attribute
Monitoring the NAS-Port-ID RADIUS Attribute
Monitoring Included RADIUS Attributes
Monitoring Ignored RADIUS Attributes
Setting the Baseline for RADIUS Dynamic-Request Server Statistics
Monitoring RADIUS Dynamic-Request Server Statistics
Monitoring the Configuration of the RADIUS Dynamic-Request Server
Setting a Baseline for RADIUS Relay Statistics
Monitoring RADIUS Relay Server Statistics
Monitoring the Configuration of the RADIUS Relay Server
Monitoring the Status of RADIUS Relay UDP Checksums
Configuring TACACS+
Overview
AAA Overview
Administrative Login Authentication
Privilege Authentication
Login Authorization
Accounting
Platform Considerations
References
Before You Configure TACACS+
Configuring TACACS+ Support
Configuring Authentication
Configuring Accounting
Monitoring TACACS+
Setting Baseline TACACS+ Statistics
Monitoring TACACS+ Statistics
Monitoring TACACS+ Information
L2TP Overview
Overview
L2TP Terminology
Implementing L2TP
Sequence of Events on the LAC
Sequence of Events on the LNS
Packet Fragmentation
Platform Considerations
Module Requirements
ERX-7xx Models, ERX-14xx Models, and the ERX-310 Router
E120 Router and E320 Router
Sessions and Tunnels Supported
References
Configuring an L2TP LAC
LAC Configuration Prerequisites
Modifying L2TP LAC Default Settings for Managing Destinations, Tunnels, and Sessions
Generating UDP Checksums in Packets to L2TP Peers
Specifying a Destruct Timeout for L2TP Tunnels and Sessions
Preventing Creation of New Destinations, Tunnels, and Sessions
Preventing Creation of New Destinations, Tunnels, and Sessions on the Router
Preventing Creation of New Tunnels and Sessions at a Destination
Preventing Creation of New Sessions for a Tunnel
Preventing Creation of New Sessions for a Tunnel
Shutting Down Destinations, Tunnels, and Sessions
Closing Existing and Preventing New Destinations, Tunnels, and Sessions on the Router
Closing Existing and Preventing New Tunnels and Sessions for a Destination
Closing Existing and Preventing New Sessions in a Specific Tunnel
Closing a Specific Session
Specifying the Number of Retransmission Attempts
Configuring Calling Number AVP Formats
Configuration Tasks
Configuring the Fallback Format
Disabling the Calling Number AVP
Configuration Examples
Mapping a User Domain Name to an L2TP Tunnel Overview
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
Mapping User Domain Names to L2TP Tunnels from Tunnel Group Tunnel Mode
Configuring the RX Speed on the LAC
Managing the L2TP Destination Lockout Process
Modifying the Lockout Procedure
Verifying that a Locked-Out Destination is Available
Configuring a Lockout Timeout
Unlocking a Destination that is Currently Locked Out
Starting an Immediate Lockout Test
Managing Address Changes Received from Remote Endpoints
Configuring LAC Tunnel Selection Parameters
Configuring the Failover Between Preference Levels Method
Configuring the Failover Within a Preference Level Method
Configuring the Maximum Sessions per Tunnel
Configuring the Weighted Load Balancing Method
Configuring an L2TP LNS
LNS Configuration Prerequisites
Configuring an LNS
Creating an L2TP Destination Profile
Creating an L2TP Host Profile
Configuring the Maximum Number of LNS Sessions
Configuring the RADIUS Connect-Info Attribute on the LNS
Selecting Tunnel-Service Modules for LNS Sessions Using MLPPP
Assigning Bundled Group Identifiers
Overriding All Endpoint Discriminators
Enabling Tunnel Switching
Creating Persistent Tunnels
Testing Tunnel Configuration
Managing L2TP Destinations, Tunnels, and Sessions
Configuring Disconnect Cause Information
Generating the Disconnect Cause AVP Globally
Generating the Disconnect Cause AVP with a Host Profile
Enabling RADIUS Accounting for Disconnect Cause
Displaying Disconnect Cause Statistics
Configuring the Receive Window Size
Configuring the Default Receive Window Size
Configuring the Receive Window Size on the LAC
Configuring the Receive Window Size on the LNS
Configuring Peer Resynchronization
Configuring Peer Resynchronization for L2TP Host Profiles and AAA Domain Map Tunnels
Configuring the Global L2TP Peer Resynchronization Method
Using RADIUS to Configure Peer Resynchronization
Configuring L2TP Tunnel Switch Profiles
Applying the L2TP Tunnel Switch Profile
Configuration Guidelines
Configuring L2TP AVPs for Relay
Configuration Tasks
Enabling Tunnel Switching on the Router
Configuring L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps
Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups
Applying Default L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using RADIUS
Configuring the Transmit Connect Speed Calculation Method
Transmit Connect Speed Calculation Methods
Static Layer 2
Dynamic Layer 2
QoS
Actual
Transmit Connect Speed Calculation Examples
Example 1: L2TP Session over ATM 1483 Interface
Example 2: L2TP Session over Ethernet VLAN Interface
Transmit Connect Speed Reporting Considerations
Session Termination for Dynamic Speed Timeout
Advisory Speed Precedence for VLANs over Bridged Ethernet
Using AAA Domain Maps to Configure the Transmit Connect Speed Calculation Method
Using AAA Tunnel Groups to Configure the Transmit Connect Speed Calculation Method
Using AAA Default Tunnel Parameters to Configure the Transmit Connect Speed Calculation Method
Using RADIUS to Configure the Transmit Connect Speed Calculation Method
PPP Accounting Statistics
Configuring L2TP Dial-Out
Overview
Terms
Network Model for Dial-Out
Dial-Out Process
Dial-Out Operational States
Chassis
Virtual Router
Targets
Sessions
Outgoing Call Setup Details
Access-Request Message
Access-Accept Message
Outgoing Call
Mutual Authentication
Route Installation
Platform Considerations
References
Before You Configure L2TP Dial-Out
Configuring L2TP Dial-Out
Monitoring L2TP Dial-Out
L2TP Disconnect Cause Codes
Monitoring L2TP and L2TP Dial-Out
Monitoring the Mapping for User Domains and Virtual Routers with AAA
Monitoring Configured Tunnel Groups with AAA
Monitoring Configuration of Tunnel Parameters with AAA
Monitoring Global Configuration Status on E-series Routers
Monitoring Detailed Configuration Information for Specified Destinations
Monitoring Locked Out Destinations
Monitoring Configured Destination Profiles or Host Profiles
Monitoring Configured and Operational Status of all Destinations
Monitoring Statistics on the Cause of a Session Disconnection
Monitoring Detailed Configuration Information about Specified Sessions
Monitoring Configured and Operational Summary Status
Monitoring Configured Switch Profiles on Router
Monitoring Detailed Configuration Information about Specified Tunnels
Monitoring Configured and Operational Status of All Tunnels
Monitoring Chassis-wide Configuration for L2TP Dial-out
Monitoring Status of Dial-out Sessions
Monitoring Dial-out Targets within the Current VR Context
Monitoring Operational Status within the Current VR Context
DHCP Overview
DHCP Overview Information
Session and Resource Control Software
DHCP Platform Considerations
DHCP References
Configuring the DHCP Access Model
Configuring DHCP Proxy Clients
Logging DHCP Packet Information
Viewing and Deleting DHCP Client Bindings
DHCP Local Server Overview
Embedded DHCP Local Server Overview
DHCP Local Server and Client Configuration
Equal-Access Mode Overview
Local Pool Selection and Address Allocation
The Connection Process
Standalone Mode Overview
Local Pool Selection and Address Allocation
Server Management Table
DHCP Local Server Prerequisites
DHCP Local Server Configuration Tasks
Configuring DHCP Local Server
Configuring the DHCP Local Server
Limiting the Number of IP Addresses Supplied by DHCP Local Server
Excluding IP Addresses from Address Pools
Configuring DHCP Local Server to Support Creation of Dynamic Subscriber Interfaces
Differentiating Between Clients with the Same Client ID or Hardware Address
Logging Out DHCP Local Server Subscribers
Clearing an IP DHCP Local Server Binding
Using SNMP Traps to Monitor DHCP Local Server Events
Using DHCP Local Server Event Logs
Configuring DHCP Local Address Pools
Linking Local Address Pools
Setting Grace Periods for Address Leases
Configuring AAA Authentication for DHCP Local Server Standalone Mode
Configuring the DHCPv6 Local Server
Configuring the Router to Work with the SRC Software
Configuring DHCP Relay
Configuring DHCP Relay and BOOTP Relay
Enabling DHCP Relay
Removing Access Routes from Routing Tables and NVS
Treating All Packets as Originating at Trusted Sources
Assigning the Giaddr to Source IP Address
Protecting Against Spoofed Giaddr and Relay Agent Option Values
Using the Broadcast Flag Setting to Control Transmission of DHCP Reply Packets
Interaction with Layer 2 Unicast Transmission Method
Preventing DHCP Relay from Installing Host Routes by Default
Configuration Example—Preventing Installation of Host Routes
Including Relay Agent Option Values in the PPPoE Remote Circuit ID
Using the Giaddr to Identify the Primary Interface for Dynamic Subscriber Interfaces
Configuring Layer 2 Unicast Transmission Method for Reply Packets to DHCP Clients
Using Option 60 Strings to Forward Client Traffic to Specific DHCP Servers
Configuration Example—Using DHCP Relay Option 60 to Specify Traffic Forwarding
Relaying DHCP Packets that Originate from a Cable Modem
Configuring Relay Agent Option 82 Information
Preventing Option 82 Information from Being Stripped from Trusted Client Packets
Configuring Relay Agent Information Option (Option 82) Suboption Values
Format of the JUNOSe Data Field in the Vendor-Specific Suboption for Option 82
Using the set dhcp relay agent sub-option Command to Enable Option 82 Suboption Support
Configuration Example—Using DHCP Relay Option 82 to Pass IEEE 802.1p Values to DHCP Servers
Using the set dhcp relay agent Command to Enable Option 82 Suboption Support
Configuring DHCP Relay Proxy
Enabling DHCP Relay Proxy
Use the First Offer from a DHCP Server
Set a Timeout for DHCP Client Renewal Messages
Managing Host Routes
Selecting the DHCP Server Response
Behavior for Bound Clients and Address Renewals
Configuring the DHCP External Server Application
DHCP External Server Overview
DHCP External Server Configuration Requirements
Enabling and Disabling the DHCP External Server Application
Monitoring DHCP Traffic Between Remote Clients and DHCP Servers
Synchronizing the DHCP External Application and the Router
Configuring Interoperation with Ethernet DSLAMs
Configuring the DHCP External Server to Support the Creation of Dynamic Subscriber Interfaces
Deleting Clients from a Virtual Router's DHCP Binding Table
Monitoring and Troubleshooting DHCP
Setting Baselines for DHCP Statistics
Setting a Baseline for DHCP Relay and Relay Proxy
Setting a Baseline for DHCP Proxy Server Statistics
Setting a Baseline for DHCP External Server Statistics
Setting a Baseline for DHCP Local Server Statistics
Monitoring Addresses Excluded from DHCP Local Server Use
Monitoring DHCP Bindings
Monitoring DHCP Binding Information
Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address Bindings)
Monitoring DHCP Bindings (Displaying DHCP Bindings Based on Binding ID)
Monitoring DHCP Bindings (Local Server Binding Information)
Monitoring DHCP External Server Configuration Information
Monitoring DHCP External Server Statistics
Monitoring DHCP Local Address Pools
Monitoring DHCP Local Server Authentication Information
Monitoring DHCP Local Server Configuration
Monitoring DHCP Local Server Leases
Monitoring DHCP Local Server Statistics
Monitoring DHCP Option 60 Information
Monitoring DHCP Packet Capture Settings
Monitoring DHCP Relay Configuration Information
Monitoring DHCP Relay Proxy Statistics
Monitoring DHCP Relay Statistics
Monitoring DHCP Server and DHCP Relay Agent Statistics
Monitoring DHCP Server and Proxy Client Information
Monitoring DHCPv6 Local Server Binding Information
Monitoring DHCPv6 Local Server DNS Search Lists
Monitoring DHCPv6 Local Server DNS Servers
Monitoring DHCPv6 Local Server Prefix Lifetime
Monitoring DHCPv6 Local Server Statistics
Monitoring Duplicate MAC Addresses Use By DHCP Local Server Clients
Monitoring the Maximum Number of Available Leases
Monitoring Static IP Address and MAC Address Pairs Supplied by DHCP Local Server
Monitoring Status of DHCP Applications
Configuring Subscriber Management
Overview
Platform Considerations
Subscriber Management Attributes
Dynamic IP Subscriber Interfaces
Subscriber Management Procedure
Configuring Subscriber Management with an External DHCP Server
Subscriber Management Commands
Configuration Examples
Username with ATM Circuit Identifier and No Circuit Type
Username with VLAN Circuit Identifier and Circuit Type
Username with MAC Address
Monitoring Subscriber Management
Monitoring IP Service Profiles
Monitoring Active IP Subscribers Created by Subscriber Management
Configuring Subscriber Interfaces
Overview
Relationship to Shared IP Interfaces
Relationship to Primary IP Interfaces
Ethernet Interfaces and VLANs
Moving Interfaces
Preventing IP Spoofing
Routing Protocols
Policies and QoS
Applications
Directing Traffic Toward Special Local Content
Differentiating Traffic for VPNs
Platform Considerations
Interface Specifiers
References
Dynamic Creation of Subscriber Interfaces
DHCP Servers
DHCP Local Server and Address Allocation
DHCP External Server and Address Allocation
DHCP Relay Configuration
Supported Configurations
Packet Detection
Designating Traffic for the Primary IP Interface
Using Framed Routes
Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces
How MAC Address Validation State Inheritance Works
Configuration of MAC Address Validation State Inheritance
Verification of MAC Address Validation State Inheritance
Configuring Static Subscriber Interfaces
Using a Destination Address to Demultiplex Traffic
Using a Source Address to Demultiplex Traffic
Configuring Dynamic Subscriber Interfaces
Configuring Dynamic Subscriber Interfaces over Ethernet
Configuring Dynamic Subscriber Interfaces over VLANs
Configuring Dynamic Subscriber Interfaces over Bridged Ethernet
Configuring Dynamic Subscriber Interfaces over GRE Tunnels
Dynamic Subscriber Interface Configuration Example
Monitoring Subscriber Interfaces
Monitoring Subscriber Interfaces Overview
Monitoring Subscriber Interfaces
Monitoring Active IP Subscribers Created by Subscriber Management
Configuring Service Manager
Overview
Service Manager Terms and Acronyms
Platform Considerations
References
Configuration Tasks
Service Definitions
Creating Service Definitions
Managing Your Service Definitions
Referencing Policies in Service Definitions
Referencing QoS Configurations in Service Definitions
Specifying QoS Profiles in a Service Definition
Configuring a QoS Profile for Service Manager
Specifying QoS Profiles in a Service Definition
Specifying QoS Parameter Instances in a Service Definition
Creating a Parameter Instance in a Profile
Specifying QoS Parameter Instances in a Service Definition
Modifying QoS Configurations with Service Manager
Modifying Parameter Instances
Modifying QoS Configurations in a Single Service Manager Event
Modifying QoS Configurations Using Other Sources
Removing QoS Configurations Referenced by Service Manager
QoS for Service Manager Considerations
RADIUS or Service Manager
Interoperability with Other Service Components
QoS Statistics
Ranges
Configuring the Service Manager License
Managing and Activating Service Sessions
Using RADIUS to Manage Subscriber Service Sessions
Using RADIUS to Activate Subscriber Service Sessions
Service Manager RADIUS Attributes
Using Tags with RADIUS Attributes
Using RADIUS to Deactivate Service Sessions
Setting Thresholds
Using the Deactivate-Service Attribute
Using Mutex Groups to Activate and Deactivate Subscriber Services
Activating and Deactivating Multiple Services
Configuring a Mutex Service
Configuring RADIUS Accounting for Service Manager
Configuring Service Interim Accounting
Using the CLI to Manage Subscriber Service Sessions
Using the CLI to Activate Subscriber Service Sessions
Preprovisioning Services
Using Service Session Profiles
Using the CLI to Deactivate Subscriber Service Sessions
Gracefully Deactivating Subscriber Service Sessions
Forcing Immediate Deactivation of Subscriber Service Sessions
Using Service Session Profiles to Deactivate Service Sessions
Configuring Service Manager Statistics
Setting Up the Service Definition File for Statistics Collection
Enabling Statistics Collection with RADIUS
Enabling Statistics Collection with the CLI
Service Manager Performance Considerations
Service Definition Examples
Tiered Service Example
Video-on-Demand Service Definition Example
Voice-over-IP Service Definition Example
Guided Entrance Service Example
Guided Entrance Service Definition Example
Using CoA Messages with Guided Entrance Services
Configuring the HTTP Local Server to Support Guided Entrance
Monitoring Service Manager
Setting a Baseline for HTTP Local Server Statistics
Monitoring the Connections to the HTTP Local Server
Monitoring the Configuration of the HTTP Local Server
Monitoring Statistics for Connections to the HTTP Local Server
Monitoring Profiles for the HTTP Local Server
Monitoring the Default Interval for Interim Accounting of Services
Monitoring the Status of the Service Manager License
Monitoring Profiles for Service Manager
Monitoring QoS Parameters for Service Manager
Monitoring Service Definitions
Monitoring Service Session Profiles
Monitoring Active Owner Sessions with Service Manager
Monitoring Active Subscriber Sessions with Service Manager
Monitoring the Number of Active Subscriber and Service Sessions with Service Manager
Index