CD Home
Report an Error
Short Contents
Entire manual as PDF [10543 KB]
- Chapter: Configuring Remote Access [PDF 621 KB]
- Overview
- Platform Considerations
- References
- Before You Configure B-RAS
- Configuration Tasks
- Configuring a B-RAS License
- Mapping a User Domain Name to a Virtual Router
- Mapping User Requests Without a Valid Domain Name
- Mapping User Requests Without a Configured Domain Name
- Using DNIS
- Redirected Authentication
- IP Hinting
- Setting Up Domain Name and Realm Name Usage
- Using the Realm Name as the Domain Name
- Using Delimiters Other Than @
- Using Either the Domain or the Realm as the Domain Name
- Specifying the Domain Name or Realm Name Parse Direction
- Stripping the Domain Name
- Domain Name and Realm Name Examples
- Specifying a Single Name for Users from a Domain
- Configuring RADIUS Authentication and Accounting Servers
- Server Access
- Server Request Processing Limit
- Authentication and Accounting Methods
- Supporting Exchange of Extensible Authentication Protocol Messages
- Immediate Accounting Updates
- Duplicate and Broadcast Accounting
- Configuring AAA Duplicate Accounting
- Configuring AAA Broadcast Accounting
- Overriding AAA Accounting NAS Information
- UDP Checksums
- Collecting Accounting Statistics
- Configuring RADIUS AAA Servers
- SNMP Traps and System Log Messages
- Configuring SNMP Traps
- Configuring Local Authentication Servers
- Creating the Local Authentication Environment
- Creating Local User Databases
- Adding User Entries to Local User Databases
- Assigning a Local User Database to a Virtual Router
- Enabling Local Authentication on the Virtual Router
- Configuration Commands
- Local Authentication Example
- Configuring Tunnel Subscriber Authentication
- Configuring Name Server Addresses
- Configuring Local Address Servers
- Local Address Pool Ranges
- Local Address Pool Aliases
- Shared Local Address Pools
- SNMP Thresholds
- Configuring a Local Address Server
- Configuring DHCP Features
- Creating an IP Interface
- Configuring AAA Profiles
- Allowing or Denying Domain Names
- Using Domain Name Aliases
- Manually Setting NAS-Port-Type Attribute
- Service-Description Attribute
- Using RADIUS Route-Download Server to Distribute Routes
- Format of Downloaded Routes
- How the Route-Download Server Downloads Routes
- Configuring the Route-Download Server to Download Routes
- Using the AAA Logical Line Identifier to Track Subscribers
- How the Router Obtains and Uses the LLID
- RADIUS Attributes in Preauthentication Request
- Considerations for Using the LLID
- Configuring the Router to Obtain the LLID for a Subscriber
- Troubleshooting Subscriber Preauthentication
- Using VSAs for Dynamic IP Interfaces
- Mapping Application Terminate Reasons to RADIUS Terminate Codes
- Configuring Timeout
- Limiting Active Subscribers
- Notifying RADIUS of AAA Failure
- Configuring the SRC Client
- Chapter: Monitoring and Troubleshooting Remote Access [PDF 416 KB]
- Setting Baselines for Remote Access
- Setting a Baseline for AAA Statistics
- Setting a Baseline for AAA Route Downloads
- Setting a Baseline for COPS Statistics
- Setting a Baseline for Local Address Pool Statistics
- Setting a Baseline for RADIUS Statistics
- Setting the Baseline for SRC Statistics
- Monitoring AAA Accounting Configuration
- Monitoring AAA Accounting Default
- Monitoring Accounting Interval
- Monitoring Specific Virtual Router Groups
- Monitoring the Default AAA Authentication Method List
- Monitoring Domain and Realm Name Delimiters
- Monitoring Mapping Between User Domains and Virtual Routers
- Monitoring Tunnel Subscriber Authentication
- Monitoring Routing Table Address Lookup
- Monitoring the AAA Model
- Monitoring IP Addresses of Primary and Secondary DNS and WINS Name Servers
- Monitoring AAA Profile Configuration
- Monitoring Statistics about the RADIUS Route-Download Server
- Monitoring Routes Downloaded by the RADIUS Route-Download Server
- Monitoring Chassis-Wide Routes Downloaded by RADIUS Route-Download Servers
- Monitoring Authentication, Authorization, and Accounting Statistics
- Monitoring the Number of Active Subscribers Per Port
- Monitoring the Maximum Number of Active Subscribers Per Virtual Router
- Monitoring Session Timeouts
- Monitoring Interim Accounting for Users on the Virtual Router
- Monitoring Virtual Router Groups Configured for AAA Broadcast Accounting
- Monitoring Configuration Information for AAA Local Authentication
- Monitoring AAA Server Attributes
- Monitoring the COPS Layer Over SRC Connection
- Monitoring Statistics About the COPS Layer
- Monitoring Local Address Pool Aliases
- Monitoring Local Address Pools
- Monitoring Local Address Pool Statistics
- Monitoring Shared Local Address Pools
- Monitoring the Routing Table
- Monitoring the B-RAS License
- Monitoring the RADIUS Server Algorithm
- Monitoring RADIUS Override Settings
- Monitoring the RADIUS Rollover Configuration
- Monitoring RADIUS Server Information
- Monitoring RADIUS Services Statistics
- Monitoring RADIUS SNMP Traps
- Monitoring RADIUS Accounting for L2TP Tunnels
- Monitoring RADIUS UDP Checksums
- Monitoring RADIUS Server IP Addresses
- Monitoring SRC Client Connection Status
- Monitoring SRC Client Connection Statistics
- Monitoring the SRC Client Version Number
- Monitoring Subscriber Information
- Monitoring Application Terminate Reason Mappings
- Chapter: Configuring RADIUS Attributes [PDF 597 KB]
- Overview
- Platform Considerations
- References
- Subscriber AAA Access Messages
- Subscriber AAA Accounting Messages
- DSL Forum VSAs in AAA Access and Accounting Messages
- CLI AAA Messages
- CLI Commands Used to Modify RADIUS Attributes
- RADIUS IETF Attributes
- [4] NAS-IP-Address
- [5] NAS-Port
- [8] Framed-IP-Address
- [9] Framed-Ip-Netmask
- [13] Framed-Compression
- [25] Class
- [30] Called-Station-Id
- [31] Calling-Station-Id
- [32] NAS-Identifier
- [41] Acct-Delay-Time
- [44] Acct-Session-Id
- [45] Acct-Authentic
- [49] Acct-Terminate-Cause
- [50] Acct-Multi-Session-Id
- [51] Acct-Link-Count
- [52] Acct-Input-Gigawords
- [53] Output-Gigawords
- [55] Event-Timestamp
- [61] NAS-Port-Type
- [64] Tunnel-Type
- [65] Tunnel-Medium-Type
- [66] Tunnel-Client-Endpoint
- [67] Tunnel-Server-Endpoint
- [68] Acct-Tunnel-Connection
- [77] Connect-Info
- [82] Tunnel-Assignment-Id
- [83] Tunnel-Preference
- [87] NAS-Port-Id
- [90] Tunnel-Client-Auth-Id
- [91] Tunnel-Server-Auth-Id
- [96] Framed-Interface-Id
- [97] Framed-Ipv6-Prefix
- [188] Ascend-Num-In-Multilink
- All Tunnel Server Attributes
- Juniper Networks Vendor-Specific Attributes
- [26-1] Virtual-Router
- [26-10] Ingress-Policy-Name
- [26-11] Egress-Policy-Name
- [26-14] Service-Category
- [26-15] PCR
- [26-16] SCR
- [26-17] MBS
- [26-24] Pppoe-Description
- [26-35] Acct-Input-Gigapackets
- [26-36] Acct-Output-Gigapackets
- [26-44] Tunnel-Interface-Id
- [26-51] Disconnect-Cause
- [26-53] Service-Description
- [26-55] DHCP-Options
- [26-56] DHCP-MAC-Address
- [26-57] DHCP-GI-Address
- [26-62] MLPPP-Bundle-Name
- [26-63] Interface-Desc
- [26-81] L2C-Information
- [26-92] L2C-Up-Stream-Data
- [26-93] L2C-Down-Stream-Data
- [26-141] Downstream-Calculated-Qos-Rate
- [26-142] Upstream-Calculated-Qos-Rate
- ANCP-Related Juniper Networks VSAs
- DSL Forum Vendor-Specific Attributes
- Including or Excluding Attributes in RADIUS Messages
- Ignoring Attributes When Receiving Access-Accept Messages
- Chapter: Configuring RADIUS Dynamic-Request Server [PDF 117 KB]
- Overview
- Platform Considerations
- References
- How RADIUS Dynamic-Request Server Works
- RADIUS-Initiated Disconnect
- Message Exchange
- Supported Error-Cause Codes (RADIUS Attribute 101)
- Qualifications for Disconnect
- Security/Authentication
- Configuring RADIUS-Initiated Disconnect
- RADIUS-Initiated Change of Authorization
- Change-of-Authorization Messages
- Message Exchange
- Supported Error-Cause Codes (RADIUS Attribute 101)
- Qualifications for Change of Authorization
- Security/Authentication
- Configuring RADIUS-Initiated Change of Authorization
- RADIUS Dynamic-Request Server Commands
- Monitoring RADIUS Dynamic-Request Servers
- Chapter: Configuring RADIUS Relay Server [PDF 107 KB]
- Chapter: RADIUS Attribute Descriptions [PDF 225 KB]
- Chapter: Application Terminate Reasons [PDF 235 KB]
- Chapter: Monitoring RADIUS [PDF 152 KB]
- Monitoring Override Settings of RADIUS IETF Attributes
- Monitoring the NAS-Port-Format RADIUS Attribute
- Monitoring the Calling-Station-Id RADIUS Attribute
- Monitoring the NAS-Identifier RADIUS Attribute
- Monitoring the Format of the Remote-Circuit-ID for RADIUS
- Monitoring the Delimiter Character in the Remote-Circuit-ID for RADIUS
- Monitoring the Acct-Session-Id RADIUS Attribute
- Monitoring the DSL-Port-Type RADIUS Attribute
- Monitoring the Connect-Info RADIUS Attribute
- Monitoring the NAS-Port-ID RADIUS Attribute
- Monitoring Included RADIUS Attributes
- Monitoring Ignored RADIUS Attributes
- Setting the Baseline for RADIUS Dynamic-Request Server Statistics
- Monitoring RADIUS Dynamic-Request Server Statistics
- Monitoring the Configuration of the RADIUS Dynamic-Request Server
- Setting a Baseline for RADIUS Relay Statistics
- Monitoring RADIUS Relay Server Statistics
- Monitoring the Configuration of the RADIUS Relay Server
- Monitoring the Status of RADIUS Relay UDP Checksums
- Chapter: Configuring TACACS+ [PDF 118 KB]
- Chapter: Monitoring TACACS+ [PDF 65 KB]
- Chapter: L2TP Overview [PDF 114 KB]
- Chapter: Configuring an L2TP LAC [PDF 239 KB]
- LAC Configuration Prerequisites
- Modifying L2TP LAC Default Settings for Managing Destinations, Tunnels, and Sessions
- Generating UDP Checksums in Packets to L2TP Peers
- Specifying a Destruct Timeout for L2TP Tunnels and Sessions
- Preventing Creation of New Destinations, Tunnels, and Sessions
- Preventing Creation of New Destinations, Tunnels, and Sessions on the Router
- Preventing Creation of New Tunnels and Sessions at a Destination
- Preventing Creation of New Sessions for a Tunnel
- Preventing Creation of New Sessions for a Tunnel
- Shutting Down Destinations, Tunnels, and Sessions
- Closing Existing and Preventing New Destinations, Tunnels, and Sessions on the Router
- Closing Existing and Preventing New Tunnels and Sessions for a Destination
- Closing Existing and Preventing New Sessions in a Specific Tunnel
- Closing a Specific Session
- Specifying the Number of Retransmission Attempts
- Configuring Calling Number AVP Formats
- Configuration Tasks
- Configuring the Fallback Format
- Disabling the Calling Number AVP
- Configuration Examples
- Mapping a User Domain Name to an L2TP Tunnel Overview
- Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
- Mapping User Domain Names to L2TP Tunnels from Tunnel Group Tunnel Mode
- Configuring the RX Speed on the LAC
- Managing the L2TP Destination Lockout Process
- Modifying the Lockout Procedure
- Verifying that a Locked-Out Destination is Available
- Configuring a Lockout Timeout
- Unlocking a Destination that is Currently Locked Out
- Starting an Immediate Lockout Test
- Managing Address Changes Received from Remote Endpoints
- Configuring LAC Tunnel Selection Parameters
- Chapter: Configuring an L2TP LNS [PDF 298 KB]
- LNS Configuration Prerequisites
- Configuring an LNS
- Creating an L2TP Destination Profile
- Creating an L2TP Host Profile
- Configuring the Maximum Number of LNS Sessions
- Configuring the RADIUS Connect-Info Attribute on the LNS
- Selecting Tunnel-Service Modules for LNS Sessions Using MLPPP
- Enabling Tunnel Switching
- Creating Persistent Tunnels
- Testing Tunnel Configuration
- Managing L2TP Destinations, Tunnels, and Sessions
- Configuring Disconnect Cause Information
- Generating the Disconnect Cause AVP Globally
- Generating the Disconnect Cause AVP with a Host Profile
- Enabling RADIUS Accounting for Disconnect Cause
- Displaying Disconnect Cause Statistics
- Configuring the Receive Window Size
- Configuring the Default Receive Window Size
- Configuring the Receive Window Size on the LAC
- Configuring the Receive Window Size on the LNS
- Configuring Peer Resynchronization
- Configuring Peer Resynchronization for L2TP Host Profiles and AAA Domain Map Tunnels
- Configuring the Global L2TP Peer Resynchronization Method
- Using RADIUS to Configure Peer Resynchronization
- Configuring L2TP Tunnel Switch Profiles
- Applying the L2TP Tunnel Switch Profile
- Configuration Guidelines
- Configuring L2TP AVPs for Relay
- Configuration Tasks
- Enabling Tunnel Switching on the Router
- Configuring L2TP Tunnel Switch Profiles
- Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps
- Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups
- Applying Default L2TP Tunnel Switch Profiles
- Applying L2TP Tunnel Switch Profiles by Using RADIUS
- Configuring the Transmit Connect Speed Calculation Method
- Transmit Connect Speed Calculation Methods
- Transmit Connect Speed Calculation Examples
- Example 1: L2TP Session over ATM 1483 Interface
- Example 2: L2TP Session over Ethernet VLAN Interface
- Transmit Connect Speed Reporting Considerations
- Session Termination for Dynamic Speed Timeout
- Advisory Speed Precedence for VLANs over Bridged Ethernet
- Using AAA Domain Maps to Configure the Transmit Connect Speed Calculation Method
- Using AAA Tunnel Groups to Configure the Transmit Connect Speed Calculation Method
- Using AAA Default Tunnel Parameters to Configure the Transmit Connect Speed Calculation Method
- Using RADIUS to Configure the Transmit Connect Speed Calculation Method
- PPP Accounting Statistics
- Chapter: Configuring L2TP Dial-Out [PDF 133 KB]
- Chapter: L2TP Disconnect Cause Codes [PDF 51 KB]
- Chapter: Monitoring L2TP and L2TP Dial-Out [PDF 264 KB]
- Monitoring the Mapping for User Domains and Virtual Routers with AAA
- Monitoring Configured Tunnel Groups with AAA
- Monitoring Configuration of Tunnel Parameters with AAA
- Monitoring Global Configuration Status on E-series Routers
- Monitoring Detailed Configuration Information for Specified Destinations
- Monitoring Locked Out Destinations
- Monitoring Configured Destination Profiles or Host Profiles
- Monitoring Configured and Operational Status of all Destinations
- Monitoring Statistics on the Cause of a Session Disconnection
- Monitoring Detailed Configuration Information about Specified Sessions
- Monitoring Configured and Operational Summary Status
- Monitoring Configured Switch Profiles on Router
- Monitoring Detailed Configuration Information about Specified Tunnels
- Monitoring Configured and Operational Status of All Tunnels
- Monitoring Chassis-wide Configuration for L2TP Dial-out
- Monitoring Status of Dial-out Sessions
- Monitoring Dial-out Targets within the Current VR Context
- Monitoring Operational Status within the Current VR Context
- Chapter: DHCP Overview [PDF 83 KB]
- Chapter: DHCP Local Server Overview [PDF 93 KB]
- Chapter: Configuring DHCP Local Server [PDF 185 KB]
- Configuring the DHCP Local Server
- Limiting the Number of IP Addresses Supplied by DHCP Local Server
- Excluding IP Addresses from Address Pools
- Configuring DHCP Local Server to Support Creation of Dynamic Subscriber Interfaces
- Differentiating Between Clients with the Same Client ID or Hardware Address
- Logging Out DHCP Local Server Subscribers
- Clearing an IP DHCP Local Server Binding
- Using SNMP Traps to Monitor DHCP Local Server Events
- Using DHCP Local Server Event Logs
- Configuring DHCP Local Address Pools
- Configuring AAA Authentication for DHCP Local Server Standalone Mode
- Configuring the DHCPv6 Local Server
- Configuring the Router to Work with the SRC Software
- Chapter: Configuring DHCP Relay [PDF 241 KB]
- Configuring DHCP Relay and BOOTP Relay
- Enabling DHCP Relay
- Removing Access Routes from Routing Tables and NVS
- Treating All Packets as Originating at Trusted Sources
- Assigning the Giaddr to Source IP Address
- Protecting Against Spoofed Giaddr and Relay Agent Option Values
- Using the Broadcast Flag Setting to Control Transmission of DHCP Reply Packets
- Preventing DHCP Relay from Installing Host Routes by Default
- Including Relay Agent Option Values in the PPPoE Remote Circuit ID
- Using the Giaddr to Identify the Primary Interface for Dynamic Subscriber Interfaces
- Configuring Layer 2 Unicast Transmission Method for Reply Packets to DHCP Clients
- Using Option 60 Strings to Forward Client Traffic to Specific DHCP Servers
- Relaying DHCP Packets that Originate from a Cable Modem
- Configuring Relay Agent Option 82 Information
- Preventing Option 82 Information from Being Stripped from Trusted Client Packets
- Configuring Relay Agent Information Option (Option 82) Suboption Values
- Format of the JUNOSe Data Field in the Vendor-Specific Suboption for Option 82
- Using the set dhcp relay agent sub-option Command to Enable Option 82 Suboption Support
- Configuration Example—Using DHCP Relay Option 82 to Pass IEEE 802.1p Values to DHCP Servers
- Using the set dhcp relay agent Command to Enable Option 82 Suboption Support
- Configuring DHCP Relay Proxy
- Chapter: Configuring the DHCP External Server Application [PDF 135 KB]
- DHCP External Server Overview
- DHCP External Server Configuration Requirements
- Enabling and Disabling the DHCP External Server Application
- Monitoring DHCP Traffic Between Remote Clients and DHCP Servers
- Synchronizing the DHCP External Application and the Router
- Configuring Interoperation with Ethernet DSLAMs
- Configuring the DHCP External Server to Support the Creation of Dynamic Subscriber Interfaces
- Deleting Clients from a Virtual Router's DHCP Binding Table
- Chapter: Monitoring and Troubleshooting DHCP [PDF 315 KB]
- Setting Baselines for DHCP Statistics
- Setting a Baseline for DHCP Relay and Relay Proxy
- Setting a Baseline for DHCP Proxy Server Statistics
- Setting a Baseline for DHCP External Server Statistics
- Setting a Baseline for DHCP Local Server Statistics
- Monitoring Addresses Excluded from DHCP Local Server Use
- Monitoring DHCP Bindings
- Monitoring DHCP Binding Information
- Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address Bindings)
- Monitoring DHCP Bindings (Displaying DHCP Bindings Based on Binding ID)
- Monitoring DHCP Bindings (Local Server Binding Information)
- Monitoring DHCP External Server Configuration Information
- Monitoring DHCP External Server Statistics
- Monitoring DHCP Local Address Pools
- Monitoring DHCP Local Server Authentication Information
- Monitoring DHCP Local Server Configuration
- Monitoring DHCP Local Server Leases
- Monitoring DHCP Local Server Statistics
- Monitoring DHCP Option 60 Information
- Monitoring DHCP Packet Capture Settings
- Monitoring DHCP Relay Configuration Information
- Monitoring DHCP Relay Proxy Statistics
- Monitoring DHCP Relay Statistics
- Monitoring DHCP Server and DHCP Relay Agent Statistics
- Monitoring DHCP Server and Proxy Client Information
- Monitoring DHCPv6 Local Server Binding Information
- Monitoring DHCPv6 Local Server DNS Search Lists
- Monitoring DHCPv6 Local Server DNS Servers
- Monitoring DHCPv6 Local Server Prefix Lifetime
- Monitoring DHCPv6 Local Server Statistics
- Monitoring Duplicate MAC Addresses Use By DHCP Local Server Clients
- Monitoring the Maximum Number of Available Leases
- Monitoring Static IP Address and MAC Address Pairs Supplied by DHCP Local Server
- Monitoring Status of DHCP Applications
- Chapter: Configuring Subscriber Management [PDF 189 KB]
- Chapter: Monitoring Subscriber Management [PDF 67 KB]
- Chapter: Configuring Subscriber Interfaces [PDF 269 KB]
- Overview
- Relationship to Shared IP Interfaces
- Relationship to Primary IP Interfaces
- Ethernet Interfaces and VLANs
- Moving Interfaces
- Preventing IP Spoofing
- Routing Protocols
- Policies and QoS
- Applications
- Platform Considerations
- References
- Dynamic Creation of Subscriber Interfaces
- DHCP Servers
- DHCP Local Server and Address Allocation
- DHCP External Server and Address Allocation
- DHCP Relay Configuration
- Supported Configurations
- Packet Detection
- Designating Traffic for the Primary IP Interface
- Using Framed Routes
- Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces
- Configuring Static Subscriber Interfaces
- Configuring Dynamic Subscriber Interfaces
- Chapter: Monitoring Subscriber Interfaces [PDF 75 KB]
- Chapter: Configuring Service Manager [PDF 414 KB]
- Overview
- Platform Considerations
- References
- Configuration Tasks
- Service Definitions
- Referencing Policies in Service Definitions
- Referencing QoS Configurations in Service Definitions
- Specifying QoS Profiles in a Service Definition
- Specifying QoS Parameter Instances in a Service Definition
- Creating a Parameter Instance in a Profile
- Specifying QoS Parameter Instances in a Service Definition
- Modifying QoS Configurations with Service Manager
- Modifying Parameter Instances
- Modifying QoS Configurations in a Single Service Manager Event
- Modifying QoS Configurations Using Other Sources
- Removing QoS Configurations Referenced by Service Manager
- QoS for Service Manager Considerations
- Configuring the Service Manager License
- Managing and Activating Service Sessions
- Using RADIUS to Manage Subscriber Service Sessions
- Using RADIUS to Activate Subscriber Service Sessions
- Service Manager RADIUS Attributes
- Using RADIUS to Deactivate Service Sessions
- Using Mutex Groups to Activate and Deactivate Subscriber Services
- Configuring RADIUS Accounting for Service Manager
- Using the CLI to Manage Subscriber Service Sessions
- Using the CLI to Activate Subscriber Service Sessions
- Preprovisioning Services
- Using Service Session Profiles
- Using the CLI to Deactivate Subscriber Service Sessions
- Configuring Service Manager Statistics
- Setting Up the Service Definition File for Statistics Collection
- Enabling Statistics Collection with RADIUS
- Enabling Statistics Collection with the CLI
- Service Manager Performance Considerations
- Service Definition Examples
- Chapter: Monitoring Service Manager [PDF 162 KB]
- Setting a Baseline for HTTP Local Server Statistics
- Monitoring the Connections to the HTTP Local Server
- Monitoring the Configuration of the HTTP Local Server
- Monitoring Statistics for Connections to the HTTP Local Server
- Monitoring Profiles for the HTTP Local Server
- Monitoring the Default Interval for Interim Accounting of Services
- Monitoring the Status of the Service Manager License
- Monitoring Profiles for Service Manager
- Monitoring QoS Parameters for Service Manager
- Monitoring Service Definitions
- Monitoring Service Session Profiles
- Monitoring Active Owner Sessions with Service Manager
- Monitoring Active Subscriber Sessions with Service Manager
- Monitoring the Number of Active Subscriber and Service Sessions with Service Manager
- Index