Subscriber Management Configuration Examples

This section contains examples of creating dynamic usernames and shows the usernames that are generated. The examples all use the following IP policy, interface profile, and route map:

• An IP policy that restricts access.

  host1(config)#ip policy-list restrictAccess

  host1(config-policy-list)#classifier-group *

  host1(config-policy-list-classifier-group)#filter

  host1(config-policy-list-classifier-group)#exit

  host1(config-policy-list)#exit

  host1(config)#

• An interface profile that references the restrictAccess policy.

  host1(config)#profile atlInterfaceProfile

  host1(config-profile)#ip policy input restrictAccess

  host1(config-profile)#ip policy output restrictAccess

  host1(config-profile)#exit

  host1(config)#

• A route map that references the interface profile and the atlServiceProfile service profile.

  host1(config)#route-map atlRouteMap

  host1(config-route-map)#set interface-profile atlInterfaceProfile

  host1(config-route-map)#set ip service-profile atlServiceProfile

  host1(config-route-map)#exit

  host1(config)#

Each example shows the configuration of a service profile that enables RADIUS authentication.

Username with ATM Circuit Identifier and No Circuit Type

This example shows the steps to configure a service profile for a username that includes the ATM circuit identifier, but does not include the circuit type.

The example generates the following username:

The circuit identifier indicates a user at slot 2, port 3, with a virtual path identifier (VPI) of 32 and a virtual channel identifier (VCP) of 100.

Username with VLAN Circuit Identifier and Circuit Type

This example shows the steps to configure a service profile for a username that includes a VLAN circuit identifier and the circuit type.

The example generates the following username:

The circuit identifier indicates a user on slot 1, port 0, no stacked vlan, and a vlan ID of 45.

Username with MAC Address

This example shows the steps to configure a service profile that generates a username that includes a MAC address.

Note: Including a MAC address in a username works only for DHCP users. It does not work for IP subscribers that have statically configured IP addresses.

The example generates the following username, which includes the MAC address:

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.