JUNOSe 9.1.x Broadband Access Configuration Guide > Configuring Subscriber Management > Configuration Examples

Configuration Examples

This section contains examples of creating dynamic usernames and shows the usernames that are generated. The examples all use the following IP policy, interface profile, and route map:

• An IP policy that restricts access.

host1(config)#ip policy-list restrictAccess

host1(config-policy-list)#classifier-group *

host1(config-policy-list-classifier-group)#filter

host1(config-policy-list-classifier-group)#exit

host1(config-policy-list)#exit

host1(config)# 

• An interface profile that references the restrictAccess policy.

host1(config)#profile atlInterfaceProfile

host1(config-profile)#ip policy input restrictAccess

host1(config-profile)#ip policy output restrictAccess

host1(config-profile)#exit

host1(config)# 

• A route map that references the interface profile and the atlServiceProfile service profile.

host1(config)#route-map atlRouteMap

host1(config-route-map)#set interface-profile atlInterfaceProfile

host1(config-route-map)#set ip service-profile atlServiceProfile

host1(config-route-map)#exit

host1(config)# 

Each example shows the configuration of a service profile that enables RADIUS authentication.

Username with ATM Circuit Identifier and No Circuit Type

This example shows the steps to configure a service profile for a username that includes the ATM circuit identifier, but does not include the circuit type.

host1(config)#ip service-profile atlServiceProfile

host1(config-service-profile)#user-prefix xyzcorp.atl

host1(config-service-profile)#domain eastcoast

host1(config-service-profile)#include hostname

host1(config-service-profile)#include circuit-identifier atm

host1(config-service-profile)#exit

host1(config)# 

The example generates the following username:

The circuit identifier indicates a user at slot 2, port 3, with a virtual path identifier 
(VPI) of 32 and a virtual channel identifier (VCP) of 100.

Username with VLAN Circuit Identifier and Circuit Type

This example shows the steps to configure a service profile for a username that includes a VLAN circuit identifier and the circuit type.

host1(config)#ip service-profile atlServiceProfile

host1(config-service-profile)#user-prefix xyzcorp.atl

host1(config-service-profile)#domain eastcoast

host1(config-service-profile)#include hostname

host1(config-service-profile)#include circuit-identifier vlan prepend-circuit-type

host1(config-service-profile)#exit 

The example generates the following username:

The circuit identifier indicates a user on slot 1, port 0, no stacked vlan, and a vlan ID of 45.

Username with MAC Address

This example shows the steps to configure a service profile that generates a username that includes a MAC address.

NOTE: Including a MAC address in a username works only for DHCP users. It does not work for IP subscribers that have statically configured IP addresses.

host1(config)#ip service-profile atlServiceProfile

host1(config-service-profile)#user-prefix xyzcorp.atl

host1(config-service-profile)#domain eastcoast

host1(config-service-profile)#include hostname

host1(config-service-profile)#include circuit-identifier vlan 

host1(config-service-profile)#include mac-address

host1(config-service-profile)#include dhcp-option 82 agent-circuit-id

host1(config-service-profile)#exit

host1(config)#      

The example generates the following username, which includes the MAC address: