SRC 3.0.x Getting Started Guide

SRC 3.0.x Getting Started Guide

CD-ROM Home

Report an Error

Collapse TOC

List of Figures
List of Tables

Index

Entire manual as PDF

About This Guide

SRC Guides and Release Notes

Audience

Documentation Conventions

Related Juniper Networks Documentation

Obtaining Documentation

Documentation Feedback

Requesting Technical Support

SRC Product Overview

SRC Product Description
SRC Product Features and Benefits

SRC Components

SRC Component Overview

SRC Server Components

Service Activation Engine

Policy and Service Management
Accounting Support
SAE Extensions

Juniper Policy Server

Network Information Collector

Redirect Server

SRC Repository for Data

Juniper Networks Database as a Data Repository on C-series Controllers
Directory as Repository for Subscriber Data

SRC Configuration and Management Tools

SRC CLI
C-Web Interface
Policy and Management
SDX SNMP Agent

SRC Service Management Applications

SRC SOAP Gateway

Deep Packet Inspection Integration Application

Benefits of the DPI Integration

Threat Mitigation Portal

SRC Programming Interfaces

NETCONF API
CORBA Plug-In SPI
CORBA Remote API
NIC Access API
SAE Core API
Script Services

SRC Authentication and Accounting Applications

AAA RADIUS Servers

SRC Admission Control Plug-In

Flat-File Accounting

SRC Volume Tracking Application

Managing Subscriber Accounts with Web Portals

SRC Demonstration Applications

Enterprise Audit Plug-In
Enterprise Manager Portal
IDP Integration Applications
IVE Host Checker Integration Application
Monitoring Agent Application
Prepaid Account Administration Application
Prepaid Service Application
Sample Enterprise Service Portal
Residential Service Selection Portals
Traffic-Mirroring Administration Application
Traffic-Mirroring Application

SRC Auxiliary Applications

Application Server

Other Applications

Planning a Deployment of C-series Controllers

Components in an SRC Deployment
Considerations When Planning a Deployment of C-series Controllers
Deployment Scenario

Configuring a C-series Controller

Before You Begin Configuring the SRC Software on a C-series Controller
Configuring the SRC Software
Configuring SRC Components

Accessing and Starting the SRC CLI

Overview of Configuration for the SRC CLI

Configuration Statements for SRC CLI Directory Access

Changing Access to the Directory that Stores SRC Configuration Data

Verifying the Configuration for SRC Directory Access

Starting the SRC CLI

Policies, Services, and Subscribers CLI

Overview of the Policies, Services, and Subscribers CLI
Configuring Access to the Policies, Services, and Subscribers CLI
Starting the Policies, Services, and Subscribers CLI

Accessing and Using the C-Web Interface

C-Web Interface Overview

Navigating the C-Web Interface

Layout of the C-Web Interface

Elements of the C-Web Interface

Top Pane Elements
Main Pane Elements
Side Pane Elements

Accessing the C-Web Interface

Enabling the C-Web Interface

Starting the C-Web Interface

Policies, Services, and Subscribers Subtasks in the C-Web Interface

Overview of the Policies, Services, and Subscribers Management Subtasks in the C-Web Interface
Configuring Access to Policies, Services, and Subscribers (C-Web Interface)
Starting Policies, Services, and Subscribers

Getting Help in the C-Web Interface

Enabling Help
Disabling Help

Changing a Username or Password for the C-Web Interface

Enabling Remote Users to Access the C-Web Interface

Accessing the C-Web Interface Through Secure HTTP
Accessing the C-Web Interface Through HTTP

Modifying the Editing Level in the C-Web Interface

Displaying Icons for Objects in the C-Web Interface

Enabling Icons for Objects
Disabling Icons for Objects

Editing SRC Configurations (C-Web Interface)

Loading Configuration Values in the C-Web Interface
Committing a Configuration
Reverting to a Previous Configuration
Updating the Configuration Data

Modifying Objects in the C-Web Interface

Copying a Configuration for an Object (C-Web Interface)
Renaming an Object
Moving an Object
Deleting an Object

Configuring Logging Properties in the C-Web Interface

Configuring File Properties

Configuring Syslog Properties

Configuration Statements for Logging for the C-Web Interface

Logging Out of the C-Web Interface

Configuring Remote Access to a C-series Controller (SRC CLI)

Configuring External Interfaces on a C-series Controller

Configuring Gigabit Ethernet Interfaces for IPv4 (SRC CLI)

Configuring Gigabit Ethernet Interfaces for IPv6 (SRC CLI)

Configuring Tunnel Interfaces (SRC CLI)

Configuring Ethernet Redundancy (SRC CLI)

Configuring Group Interfaces (SRC CLI)
Configuring the MII Monitor (SRC CLI)
Configuring the ARP Monitor (SRC CLI)

Configuring the Virtual IP Address (SRC CLI)

Configuring a Static Route to Devices on Other Networks (SRC CLI)

Securing Connections Between a C-series Controller and Remote Hosts

Configuring a C-series Controller to Accept SSH Connections (SRC CLI)

Configuring a C-series Controller to Accept Telnet Connections (SRC CLI)

Configuring a C-series Controller to Accept NETCONF Connections (SRC CLI)

Port Settings for SRC Components

Overview of SRC Licenses

Types of SRC Licenses

Obtaining an SRC License

Pilot License
Server License

Overview of the SRC License Server

Server License

License Server Errors

License Requests

Example: License Allocation
Example: License Release Example

Lease Renewal

Directory Location and Access

Unsuccessful Connections from the SAE to the SRC License Server

SRC License Server Redundancy

Installing Licenses for C-series Controllers

Installing a Pilot License from the SRC CLI
Installing Server Licenses for C-series Controllers
Configuring License Manager for an SAE on a C-series Controller

Configuring System Time on C-Series Controllers (SRC CLI)

Setting the Time Zone (SRC CLI)
Setting the System Date (SRC CLI)

Configuring NTP for C-Series Controllers

NTP Support on C-series Controllers
Configuring NTP on a C-series Controller

Configuring NTP on C-Series Controllers (SRC CLI)

Configuration Statements for NTP on C-series Controllers
Specifying Which NTP Server a C-series Controller Contacts on Startup
Configuring NTP Client Mode for a C-series Controller (SRC CLI)
Configuring an NTP Peer on a C-series Controller (SRC CLI)
Configuring NTP Broadcast Mode on a C-series Controller (SRC CLI)
Configuring NTP Authentication on a C-series Controller (SRC CLI)
Configuring NTP as a Broadcast Client on a C-series Controller (SRC CLI)
Configuring NTP as a Multicast Client on a C-series Controller (SRC CLI)
Verifying NTP Configuration on a C-series Controller

Configuring System Logging for a C-series Controller (SRC CLI)

Overview of the C-series Controller Log Server

Message Groups
Severity Levels

Before You Configure System Logging (SRC CLI)

Configuration Statements for System Logging on a C-series Controller

Saving System Log Messages to a File (SRC CLI)

Sending System Log Messages to Other Servers (SRC CLI)

Sending Notifications for System Log Messages to Users (SRC CLI)

Configuring Static Host Mapping (SRC CLI)

Overview of Static Host Mapping
Configuring Static Host Mapping (SRC CLI)

Overview of the Juniper Networks Database

Redundancy for a Juniper Networks Database
Security for a Juniper Networks Database

Managing the Juniper Networks Database (SRC CLI)

Configuration Statements for the Juniper Networks Database (SRC CLI)
Enabling the Juniper Networks Database to Run in Standalone Mode (SRC CLI)
Enabling the Juniper Networks Database to Run in Community Mode (SRC CLI)
Securing the Juniper Networks Database (SRC CLI)
Changing the Mode of a Juniper Networks Database (SRC CLI)
Adding a Juniper Networks Database to an Established Community(SRC CLI)
Promoting a Secondary Database to a Primary Role in a Configuration with One Primary Database (SRC CLI)
Updating Data on a Juniper Networks Database (SRC CLI)
Synchronizing Data on a Juniper Networks Database (SRC CLI)
Loading Sample Data in to a Juniper Networks Database (SRC CLI)
Securing Communications Between the Juniper Networks Database and SRC Components (SRC CLI)
Verifying Configuration for a Juniper Networks Database with the SRC CLI
Getting Information About Operations in a Juniper Networks Database (SRC CLI)
Example: Configuration for a Database Community
Troubleshooting Data Synchronization for Juniper Networks Databases (SRC CLI)
Recovering Data in a Community with One Primary Database and One Secondary Database (SRC CLI)

Setting Up an SAE (SRC CLI)

Initially Configuring the SAE

Grouped Configurations for the SAE

Creating Grouped Configurations for the SAE (SRC CLI)
Configuring an SAE Group

Configuring Local Properties for the SAE (SRC CLI)

Configuring the RADIUS Local IP Address and NAS ID (SRC CLI)

Starting the SAE (SRC CLI)

Stopping the SAE (SRC CLI)

Managing System Software on a C-series Controller

Overview of Software Management on a C-series Controller
Before You Upgrade the Software on a C-series Controller
Creating a Snapshot of Files on a C-series Controller
Upgrading the System Software on a C-series Controller
Upgrading SRC Software for a Component
Installing SRC Software for a Component
Removing an Installed Component
Restoring the Files in a Snapshot

Using the Web Application Server on a C-series Controller

Overview of the Web Application Server on C-series Controllers

Configuration Statements for the Web Application Server

Configuring the Web Application Server (SRC CLI)

Configuring Local Properties for Web Application Server (SRC CLI)

Configuring Remote Access to the Application Server (SRC CLI)

Configuring Access to the Application Server Through Secure HTTP
Configuring Access to the Application Server Through HTTP

Configuring Virtual Hosts for the Web Applications (SRC CLI)

Configuring User Accounts for Web Applications (SRC CLI)

Installing Web Applications in the Application Server

Removing Web Applications From the Application Server

Starting the Web Application Server on a C-series Controller

Restarting the Web Application Server on a C-series Controller

Stopping the Web Application Server on a C-series Controller

Viewing Statistics for the Web Application Server (SRC CLI)

Viewing Statistics for the Web Application Server (C-Web Interface)

Integrating Steel-Belted Radius/SPE Server

Integrating Steel-Belted Radius/SPE Server

Configuring User Access (SRC CLI)

Overview of SRC User Accounts

Login Classes for SRC User Accounts

Login Class Permission Options for the SRC Software

Predefined Login Classes for the SRC Software

Access to Individual Commands and Configuration Statements (SRC CLI)

Regular Expressions for Allow and Deny Statements
Guidelines for Using Regular Expressions
Timeout Value for Idle Login Sessions

Before You Configure Login Classes (SRC CLI)

Configuring an SRC Login Class

User Accounts for the SRC Software

Configuration Statements for SRC User Accounts
Configuring an SRC User Account

Types of Authentication for SRC User Accounts

Configuring Authentication for SRC User Accounts

Configuring a Plain Text Password
Configuring SSH Authentication

Example: SRC User Accounts

Changing the root Password for the SRC Software

Configuring a System Login Announcement (SRC CLI)

Authenticating Users on a C-series Controller (SRC CLI)

Configuring RADIUS and TACACS+ Authentication on a C-series Controller

Configuring RADIUS Authentication (SRC CLI)

Configuring TACACS+ Authentication (C-Web Interface)

A C-series Controller as a RADIUS Client and TACACS+ Client

Configuring More Than One Authentication Method (SRC CLI)

Configuring Authentication Order
Configuring TACACS+ or RADIUS Authentication
Configuring TACACS+ and RADIUS Authentication

Removing an SRC Authentication Method from the Authentication Order

SRC Template Accounts for RADIUS and TACACS+ Authentication

Named Template Accounts
Using Remote SRC Template Accounts

Configuring a Local SRC User Template

Example: Configuring SRC Authentication

Managing Security Digital Certificates

Overview of Digital Certificates
Before You Use Digital Certificates
Commands to Manage Digital Certificates
Manually Obtaining Digital Certificates
Obtaining Digital Certificates through SCEP
Removing a Certificate Request
Removing a Certificate

Connecting to Remote Hosts from the SRC Software

Connecting to a Remote Host Through SSH
Connecting to a Remote Host Through Telnet

Configuring and Starting the SNMP Agent (SRC CLI)

Configuration Statements for the SDX SNMP Agent
Configuring the SDX SNMP Agent
Configuring General Properties for the SDX SNMP Agent
Configuring Initial Properties for the SDX SNMP Agent
Configuring Directory Connection Properties for the SDX SNMP Agent
Configuring Directory Monitoring Properties for the SDX SNMP Agent
Configuring Logging Destinations for the SDX SNMP Agent
Configuring JRE Properties
Configuration Statements for the SNMP Agent
Configuring the SNMP Agent
Configuring System Information for the SNMP Agent
Configuring Access Control for SNMPv3 Users
Configuring Authentication
Configuring Encryption
Configuring Access Control for Communities
Configuring Access Control for the VACM
Associating Security Names with a Community
Defining Named Views
Defining Access Privileges for an SNMP Group
Assigning Security Names to Groups
Configuring Notification Targets
Operating the SNMP Agent
Starting the SDX SNMP Agent
Stopping the SDX SNMP Agent
Monitoring the SDX SNMP Agent

Distributing Directory Changes to SRC Components

Overview of the Directory Eventing System
Managing Directory Communication

Configuring Local Properties (SRC CLI)

Local Properties for SRC Components
Configuration Statements for Local Configuration
Configuring Basic Local Properties
Changing the Location of Data in the Directory
Configuring Directory Connection Properties
Configuring Initial Directory Eventing Properties for SRC Components
Verifying the Local Configuration for a Component

SRC-Related Abbreviations

SRC-Related References

RFCs
Draft RFCs
Other Software Standards
URLs

Index

Index