JUNOSe 9.1.x Broadband Access Configuration Guide > Configuring Subscriber Management > Subscriber Management Commands

Subscriber Management Commands

This section describes the commands that you use to configure subscriber management. For commands related to a specific component, see the appropriate documentation.

• DHCP—Chapter 17, DHCP Overview
• Policies—JUNOSe Policy Management Configuration Guide
• QoS—JUNOSe Quality of Service Configuration Guide
• Route maps—JUNOSe IP Services Configuration Guide, Chapter 1, Configuring Routing Policy
• SRC software—SRC software documentation set

clear ip demux

• Use to clear all dynamically created demultiplexer table entries associated with the route-map processing of the set ip source-prefix command.

• deny—Drop addresses that appear in the source address range
• primary—Associate the source prefix with the primary IP interface

• Example

host1(config-if)#clear ip demux

• There is no no version.

domain

• Use to specify a domain for an IP service profile.
• The domain is included in a username that is dynamically created by JUNOSe subscriber management.
• The specify a domain name with up to 32 ASCII characters.
• Example

host1(config-service-profile)#domain eastcoast 

• Use the no version to remove the domain from the IP service profile.

include circuit-identifier

• Use to include the circuit identifier in the username that is dynamically created by JUNOSe subscriber management.
• Specify one of the following circuit types: atm or vlan.
• Use the optional prepend-circuit-type keyword to specify that the circuit type is prepended to the circuit identifier in the username.
• Example

host1(config-service-profile)#include circuit-identifier atm prepend-circuit-type

• Use the no version to disable inclusion of the circuit identifier in the username.

include dhcp-option 82

• Use to include a suboption of the DHCP relay agent information option (option 82) in the username that is dynamically created by JUNOSe subscriber management.
• Specify one of the following suboptions: agent-circuit-id or agent-remote-id.
• Example

host1(config-service-profile)#include dhcp-option 82 agent-circuit-id

• Use the no version to disable inclusion of the suboption in the username.

include hostname

• Use to include the router hostname in the username that is dynamically created by JUNOSe subscriber management.
• Example

host1(config-service-profile)#include hostname

• Use the no version to disable inclusion of the router hostname in the username.

include ip-address

• Use to include the IP address in the username that is dynamically created by JUNOSe subscriber management.
• Example

host1(config-service-profile)#include ip-address

• Use the no version to disable inclusion of the IP address in the username.

include mac-address

• Use to include the MAC address identifier in the username that is dynamically created by JUNOSe subscriber management.
• Example

host1(config-service-profile)#include mac-address

• Use the no version to disable inclusion of the MAC address in the username.

include virtual-router-name

• Use to include the virtual router name in the username that is dynamically created by JUNOSe subscriber management.
• Example

host1(config-service-profile)#include virtual-router-name

• Use the no version to disable inclusion of the virtual router name in the username.

ip auto-configure ip-subscriber

• Use to configure an IP interface to support creation of dynamic subscriber interfaces. The specified IP interface is considered the primary interface.
• The router creates the required dynamic subscriber interfaces when the IP address is assigned to the associated subscriber. The address might be assigned by an external DHCP server, the DHCP local server, or the packet detect feature.
• Use the include-primary keyword to specify that the primary interface can be assigned to a subscriber. Use the exclude-primary keyword to specify that the primary interface cannot be used for subscribers. The primary interface is not assigned to a subscriber by default.
• You can issue this command from Interface Configuration mode, Subinterface Configuration mode, or Profile Configuration mode.
• Example

host1(config-if)#ip auto-configure ip-subscriber include-primary

• Use the no version to disable creation of dynamic subscriber interfaces associated with this primary IP interface. Use the no version with the include-primary keyword to specify that the primary interface is not assigned to a subscriber. Use the no version with the exclude-primary keyword to specify that the primary interface is assigned to a subscriber.

ip auto-detect ip-subscriber

• Use to set the router packet detect feature and specify that IP automatically detect packets that do not match any entries in the demultiplexer table. When an unmatched packet is detected, an event is generated that determines whether to create a dynamic subscriber interface or configure an existing interface.
• You can issue this command from Interface Configuration mode or Profile Configuration mode.
• Example

host1(config-if)#ip auto-detect ip-subscriber

• Use the no version to restore the default, in which packet detection is disabled.

ip destination-prefix

• Use to specify a destination address for a subscriber interface or for a primary IP interface.
• Use the deny keyword to drop all packets that match the command.
• On the ERX-1440 router or the E320 router, you can configure up to 1024 subnets for static subscriber interfaces per primary IP interface when each subnet has a variable network mask that is less than /32. The number of subnets identifying a single route (/32) is still limited by the global maximum of 16,000 hosts per line module.
• Example

host1(config-if)#ip destination-prefix 10.0.0.0 255.0.0.0

• Use the no version to remove the association between the interface and the specified IP destination address and mask.

ip inactivity-timer

• Use to configure the inactivity timer value.
• A dynamically created subscriber interface is deleted if it is inactive for a period longer than the inactivity timer value.
• On static interfaces, the subscriber's access route is removed when the inactivity timer is exceeded. When the subscriber logs back in, the timer is restarted.
• The timer value can in the range 1–65335 minutes.
• A timer value of 0 specifies that dynamically created subscriber interfaces are never deleted by the inactivity timer.
• Example

host1(config-if)#ip inactivity-timer 100

• Use the no version to restore the default, in which inactivity timer feature is disabled.

ip route-map ip-subscriber

• Use to configure an interface to perform route-map processing, and to specify the route map that is applied to the IP interface subscriber. If no route map is specified, then all packets trigger the creation of a dynamic subscriber interface.
• You can issue this command from Interface Configuration mode or Profile Configuration mode.
• Example

host1(config-if)#ip route-map ip-subscriber bostonRouteMap

• Use the no version to delete the route map.

ip service-profile

• Use to specify a service profile name and to enter IP Service Profile Configuration mode. Service profiles contain user and password information, and are used in route maps for subscriber management and to authenticate subscribers with RADIUS.
• You can specify a service profile name with up to 32 ASCII characters.
• To use the subscriber management application to configure IP subscribers on dynamic bridged Ethernet interfaces to support RADIUS authentication, you can create an IP service profile and assign it to a dynamic bridged Ethernet interface profile. If your router is running stateful SRP switchover (high availability), using an IP service profile to configure subscriber authentication is preferable to using either the subscriber command or the atm atm1483 subscriber command because these commands can suspend stateful SRP switchover on the router or prevent it from becoming active.

For more information, see Authenticating Subscribers on Dynamic Bridged Ethernet over Static ATM Interfaces in JUNOSe Link Layer Configuration Guide, Chapter 15, Configuring Dynamic Interfaces, or Authenticating Subscribers on Dynamic Bridged Ethernet over Dynamic ATM Interfaces in JUNOSe Link Layer Configuration Guide, Chapter 16, Configuring Dynamic Interfaces Using Bulk Configuration.

• Example

host1(config)#ip service-profile class1Service

host1(config-service-profile)#

• Use the no version to delete the service profile.

ip source-prefix

• Use to specify a source address for a subscriber interface.
• Use the deny keyword to drop all packets that match the command.
• On the ERX-1440 router or the E320 router, you can configure up to 1024 subnets for static subscriber interfaces per primary IP interface when each subnet has a variable network mask that is less than /32. The number of subnets identifying a single route (/32) is still limited by the global maximum of 16,000 hosts per line module.
• Example

host1(config-if)#ip source-prefix 10.0.0.0 255.0.0.0

• Use the no version to remove the association between the interface and the specified IP source address and mask.

ip use-framed-routes ip-subscriber

• Use to configure a static primary IP interface to use framed routes as source IP addresses when creating dynamic subscriber interfaces. The router uses the Framed-Route RADIUS attribute [22] sent in Access-Accept messages to apply framed routes to subscriber interfaces associated with the primary interface.
• Example

host1(config-if)#ip use-framed-routes ip-subscriber 

• Use the no version to disable the use of framed routes when creating dynamic subscriber interfaces associated with this primary IP interface.

password

• Use to specify the password for an IP service profile. The password is used as the dynamically created password by JUNOSe subscriber management.
• You can specify a password with up to 32 ASCII characters.
• Example

host1(config-service-profile)#password mypassword

• Use the no version to remove the password from the IP service profile.

set ip interface-profile

• Use to specify a dynamic subscriber interface profile that is used in the route map.
• Example

host1(config)#route-map mapForEPort

host1(config-route-map)#set ip interface-profile disableUser

• Use the no version to delete the interface profile from the route map.

set ip service-profile

• Use to specify the name of a subscriber's service profile that is used in the route map.
• You can specify a service profile name with up to 32 ASCII characters.
• Example

host1(config-route-map)#set ip service-profile yourServiceProfile 

• Use the no version to remove the service profile from the route map.

set ip source-prefix

• Use to specify a source address range to be inserted into a specific interface, and the action to take with the range.

• deny—Drop addresses that appear in the source address range
• primary—Associate the source prefix with the primary IP interface

• Example

host1(config-route-map)#set ip source-prefix 10.10.30.0 255.255.255.0 primary

• Use the no version to remove the source address range from the route map.

user-name

• Use to specify the username for an IP service profile. The username is used as the dynamically created username by JUNOSe subscriber management.
• You can specify a username with up to 32 ASCII characters.
• Example

host1(config-service-profile)#user-name westford211 

• Use the no version to remove the user name from the IP service profile.

user-prefix

• Use to specify a user prefix for an IP service profile.
• This command appends the user prefix to the username that is dynamically created by JUNOSe subscriber management.
• Example

host1(config-service-profile)#user-prefix xyz.atl

• Use the no version to remove the user prefix from the IP service profile.

vlan service-profile

• Use to assign an IP service profile to a VLAN subinterface. Service profiles contain user and password information, and are used in route maps for subscriber management and to authenticate subscribers with RADIUS.
• You can specify a service profile name with up to 32 ASCII characters.
• Example

host1(config-profile)#vlan service-profile vlanClass1Service

host1(config-profile)#

• Use the no version to remove the service profile from the VLAN subinterface.