[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Bridged Ethernet Dynamic Interfaces

A bridged Ethernet interface is IP over bridged Ethernet over ATM 1483 over ATM AAL5 over ATM.

When bridged Ethernet packets are received over ATM circuits, the bridged Ethernet and IP interfaces are dynamically constructed over the corresponding ATM 1483 interfaces and use the configuration data received from the RADIUS server, a profile, or both.

Figure 47 shows the protocol layers that represent the bridged Ethernet interface columns, and the layers within the interface columns that are static and dynamic.

Figure 47: Dynamic Bridged Ethernet over Static ATM 1483 Interface Columns

Image g013105.gif

Configuring a Dynamic Bridged Ethernet Interface

When you configure dynamic bridged Ethernet interfaces, you must assign a profile. You may optionally assign a subscriber identification.

To configure dynamic bridged Ethernet interfaces:

Configure a physical interface.host1(config)#interface atm 5/0
Configure an ATM subinterface.host1(config-if)#interface atm 2/0.1
Configure a PVC by specifying the VCD, the VPI, the VCI, and the encapsulation type.
If you want the router to autodetect the encapsulation type, use the aal5autoconfig option.
host1(config-subif)#atm pvc 10 100 22 aal5snap host1(config-subif)#atm pvc 10 100 22 aal5autoconfig
Do either of the following:
- Configure the subinterface to detect and accept the dynamic bridged Ethernet encapsulation type with the default lockout time range, 1–300 seconds.host1(config-subif)#auto-configure bridgedEthernet
- Configure the subinterface to detect and accept the dynamic bridged Ethernet encapsulation type with a nondefault lockout time range. For example, the following command configures 3600 seconds (1 hour) as the minimum lockout time and 7200 seconds (2 hours) as the maximum lockout time.host1(config-subif)#auto-configure bridgedEthernet lockout-time 3600 7200
Assign a profile to match the encapsulation type of bridged Ethernet.host1(config-subif)#profile bridgedEthernet foo
(Optional) Assign subscriber identification.host1(config-subif)#subscriber bridgedEthernet user charlie domain myisp password lucy
(Optional) Verify your configuration.host1#show atm subinterface atm 2/0.1

atm pvc

Use to configure a PVC on an ATM interface. Select one of the following encapsulation types:
- aal5autoconfig—Enables autodetection of the 1483 encapsulation (LLC/SNAP or VC multiplexed).
- aal5snap—Specifies a LLC encapsulated circuit; the LLC/SNAP header precedes the protocol datagram.
- aal5mux ip—Specifies a VC multiplexed circuit. This option is used for IP only.
Example host1(config-subif)#atm pvc 6 0 11 aal5autoconfig
Use the no version to remove the specified PVC.
See atm pvc.

auto-configure

Use to configure an ATM subinterface to support a dynamic interface. Specifies the types of dynamic encapsulation that the ATM 1483 subinterface detects and accepts.
For detailed information about how to use this command, see auto-configure.
Example 1—Enables autodetection for the bridged Ethernet encapsulation type using the default lockout time range, 1–300 seconds host1(config-subif)#auto-configure bridgedEthernet
Example 2—Enables autodetection for the bridged Ethernet encapsulation type using a nondefault lockout time range of 3600–21600 seconds (1–6 hours)host1(config-subif)#auto-configure bridgedEthernet lockout-time 3600 21600
Example 3—Disables encapsulation type lockout for the bridged Ethernet encapsulation typehost1(config-subif)#auto-configure bridgedEthernet lockout-time none
Example 4—Either command reenables encapsulation type lockout for the bridged Ethernet encapsulation type using the default lockout time rangehost1(config-subif)#auto-configure bridgedEthernet host1(config-subif)#no auto-configure bridgedEthernet lockout-time
Example 5—Permanently locks out the bridged Ethernet encapsulation type until the auto-configure bridgedEthernet command is issuedhost1(config-subif)#no auto-configure bridgedEthernet
Use the no version to terminate detection of the specified encapsulation type or, if the lockout-time keyword is specified, to restore the lockout time range to its default value, 1–300 seconds.
See auto-configure.

interface atm

Use to select an ATM interface or ATM 1483 subinterface.
For information about specifying the ATM interface or subinterface, see interface atm.
Exampleshost1(config)#interface atm 5/0.1 host1(config)#interface atm 4/0/2
Use the no version to remove the interface or subinterface.
See interface atm.

profile

Use to assign a profile.
You must specify the encapsulation type to which the profile applies: bridgedEthernet, ip, ppp, pppoe , or any.
Specify a profile name with up to 80 alphanumeric characters.
Example host1(config-subif)#profile bridgedEthernet foo
Use the no version to remove a profile assignment.
See profile.

subscriber

Use to configure a local subscriber on the E-series router to support authentication and configuration from RADIUS for a dynamic bridged Ethernet or IPoA interface.
For detailed information about how to use this command, see subscriber.
Examplehost1(config-subif)#subscriber bridgedEthernet user-prefix charlie domain myisp password-prefix lucy
Use the no version to remove the subscriber.
See subscriber.

Configuring Subscriber Management for IP Subscribers on Dynamic Bridged Ethernet Interfaces

You can use the JUNOSe subscriber management application to configure and manage IP subscribers associated with a dynamic bridged Ethernet over static ATM 1483 interface column, as described in Authenticating Subscribers on Dynamic Bridged Ethernet over Static ATM Interfaces.

To use the subscriber management application to configure IP subscribers on a dynamic bridged Ethernet interface for RADIUS authentication:

Define an IP service profile that contains the subscriber’s RADIUS authentication parameters including the username, domain, and password.
Configure the interface profile from which the router creates a dynamic bridged Ethernet interface column.
1. Include the desired characteristics for the upper-layer encapsulation types.
2. (Optional) Specify the name of the route map used to configure the IP subscriber interface.
3. Use the bridge1483 service-profile command to assign the specified IP service profile to the interface profile. The IP service profile contains the RADIUS authentication parameters for subscribers on the dynamic bridged Ethernet interface.
Define the underlying static or dynamic ATM 1483 subinterface on which the dynamic bridged Ethernet interface column is built.
1. Assign the specified interface profile to the ATM 1483 subinterface.
2. Enable autodetection (autoconfiguration) of the bridged Ethernet upper-layer encapsulation type.
3. Define the ATM PVC over which data is transmitted.
(Optional) Use the show profile command to verify assignment of the IP service profile to the interface profile.
For information, see show profile.

Configuration Example Using subscriber Command

The following configuration example illustrates the preceding procedure. The example has two parts:

The first part of the example shows how to use the subscriber command to configure RADIUS authentication for IP subscribers on a dynamic bridged Ethernet interface. This configuration method does not support running stateful SRP switchover on the router.
The second part of the example shows the commands required to re-create this configuration using the IP subscriber management application. This configuration method uses the bridge1483 service-profile command to assign the specified IP service profile to the interface profile, and does support running stateful SRP switchover on the router.

Assume that you have issued the following commands to configure IP subscribers on a dynamic bridged Ethernet interface for RADIUS authentication. In this configuration, the subscriber command provides the subscriber’s authentication parameters, and the static ATM 1483 subinterface is the authenticating layer. Keep in mind that the subscriber command does not support running stateful SRP switchover on the router.



! Configure the interface profile from which to create
a dynamic bridged Ethernet 
! interface. Include the desired attributes (in this case,
IGMP) and, optionally, the 
! name of the route map used to configure the IP subscriber
interface.
host1(config)#profile east 

host1(config-profile)#ip igmp 

host1(config-profile)#ip igmp immediate-leave 

host1(config-profile)#ip igmp group limit
6 

host1(config-profile)#ip route-map ip-subscriber
eastRouteMap 

host1(config-profile)#exit 

! Configure the static ATM 1483 subinterface to assign
the east profile, support 
! RADIUS authentication, enable autodetection of the bridged
Ethernet upper-layer 
! encapsulation type, and define the ATM PVC.
host1(config)#interface atm 2/1.100 point-to-point 

host1(config-subif)#profile bridgedEthernet
east 

host1(config-subif)#subscriber bridgedEthernet
user westford001 

 domain
xyzcorp.east password abc123 

host1(config-subif)#auto-configure bridgedEthernet 

host1(config-subif)#atm pvc 100 10 101 aal5snap
6400 0 0 

host1(config-subif)#exit

Equivalent Configuration Example Using IP Subscriber Management

To achieve the same functionality without adversely affecting stateful SRP switchover if it is running on the router, you can issue the following commands to use the subscriber management feature to configure IP subscribers on a dynamic bridged Ethernet interface using RADIUS. In this configuration, the IP service profile provides the subscriber’s authentication parameters, and the subscriber management application is the authenticating layer. To assign the IP service profile to the interface profile, use the bridge1483 service-profile command.



! Define an IP service profile containing the subscriber’s
username, domain, 
and password.
host1(config)#ip service-profile eastServiceProfile 

host1(config-service-profile)#user-name westford001 

host1(config-service-profile)#domain xyzcorp.east 

host1(config-service-profile)#password abc123 

host1(config-service-profile)#exit 

! Configure the interface profile from which to create
a dynamic bridged Ethernet 
! interface. Include the desired attributes (in this case,
IGMP), the name of the 
! route map used to configure the IP subscriber interface
(optional), and the name 
! of the IP service profile containing the authentication
parameters for the dynamic 
! bridged Ethernet interface.
host1(config)#profile east 

host1(config-profile)#ip igmp 

host1(config-profile)#ip igmp immediate-leave 

host1(config-profile)#ip igmp group limit
6 

host1(config-profile)#ip route-map ip-subscriber
eastRouteMap 

host1(config-profile)#bridge1483 service-profile
eastServiceProfile 

host1(config-profile)#exit 

! Configure the static ATM 1483 subinterface to assign
the east profile, 
! enable autodetection of the bridged Ethernet upper-layer
encapsulation type, 
! and define the ATM PVC.
host1(config)#interface atm 2/1.100 point-to-point 

host1(config-subif)#profile bridgedEthernet
east 

host1(config-subif)#auto-configure bridgedEthernet 

host1(config-subif)#atm pvc 100 10 101 aal5snap
6400 0 0 

host1(config-subif)#exit

For more information about using the subscriber management application, see JUNOSe Broadband Access Configuration Guide.

bridge1483 service-profile

Use from Profile Configuration mode to assign the specified IP service profile to the interface profile from which a dynamic bridged Ethernet interface is created.
The IP service profile must be defined in the default virtual router.
Examplehost1(config-profile)#bridge1483 service-profile westServiceProfile
Use the no version to remove the IP service profile assignment from the interface profile.
See bridge1483 service-profile.

[Contents] [Prev] [Next] [Index] [Report an Error]