SRC 3.0.x Subscribers and Subscriptions Guide CD-ROM Home Report an Error Collapse TOC List of Figures List of Tables Index Entire manual as PDF		About This Guide SRC Guides and Release Notes Audience Documentation Conventions Related Juniper Networks Documentation Obtaining Documentation Documentation Feedback Requesting Technical Support Overview of Subscribers and Subscriptions on a C-series Controller Overview of Subscribers Overview of Subscriptions Enterprise Subscriber and Subscription Hierarchy Enterprise Subscription Hierarchy Overview of Managers Read Privileges Management Privileges Managers That Control All Retailers Subscriber Logins and Service Activation Login Events and Processes for the SRC Software Overview of Login Events and Processes Login Events Summary of the Login Process Residential Subscriber Login and Processes PPP Subscriber Login and Service Activation Web Login for PPP Subscribers PPP Login Interactions PPP Logout Interactions DHCP Subscriber Login and Service Activation Interface Startup Initial Login Initial DHCP Login Interactions DHCP Login to Subscriber Account Interactions Persistent DHCP Subscriber Login Interactions DHCP Subscriber Logout Interactions Static IP Subscribers Single PC, IP Address Known Subscriber IP Address Not Known Enterprise Subscriber Login Process Interface Startup Subscriptions and Activations Subscription Activation Interactions Subscription Deactivation Interactions Automatic Activation at Login Enterprise-Specific Remote Session Activation Configuring Subscriber–Related Properties on the SAE (SRC CLI) Configuring the Length of Time MAC Addresses Remain in SAE Cache Identifying a Profile for Unauthenticated Subscribers Configuring Interim Accounting for Services and Subscribers Avoiding Overcharges for Sessions That Time Out Allowing Multiple Logins from the Same IP Address Authenticating Registered Username/Password Pairs Configuring Timers for Session Reactivation Classifying Interfaces and Subscribers (SRC CLI) Overview of Classification Scripts How Classification Scripts Work Interface Classification Scripts Subscriber Classification Scripts DHCP Classification Scripts Overview of Configuring Classification Scripts Subscriber Classifiers DHCP Classifiers Interface Classifiers Classification Targets Target Expressions Classification Conditions Glob Matching Regular Expression Matching Classifying Interfaces (SRC CLI) Example: Managing Interfaces for Premium and Basic PPP and DHCP Subscribers Example: Managing Specific Interfaces Example: Managing Interfaces by Using the Interface Description Classifying Subscribers (SRC CLI) Sending DHCP Options to the JUNOSe Router Subscriber Classification Targets Example: Subscriber Classification Scripts for Static IP Subscriber Example: Subscriber Classification Scripts Using a Subscriber Group Example: Subscriber Classification Scripts for Enterprise Subscribers Matching on the Interface Name Matching on the Interface Alias Example: Creating Router Interface Subscriber Session Example: Activating Services for a Group of Subscriber Sessions Classifying DHCP Subscribers (SRC CLI) Syntax for DHCP Classification Targets Selecting DHCP Parameters DHCP Options Supported on the SAE Creating DHCP Profiles (SRC CLI) Overview of Plug-Ins Included with the SAE How Internal Plug-Ins Work Plug-In Pool Event Publishers Types of Internal Plug-Ins Authorization Plug-Ins Tracking Plug-Ins Customizing RADIUS Packets with Plug-Ins Assigning DHCP Addresses to Subscribers Creating and Tracking Subscriber Sessions Activating and Tracking Service Sessions Configuring Internal, External, and Synchronization Plug-Ins (SRC CLI) Configuring Internal Plug-Ins Configuring the SAE for External Plug-Ins Configuring the State Synchronization Plug-In Interface Configuring Accounting and Authentication Plug-Ins (SRC CLI) Creating RADIUS Peers Types of Tracking Plug-Ins Configuring Tracking Plug-Ins Configuring Flat File Accounting Plug-Ins Configuring Headers for Flat File Accounting Plug-Ins Configuring Basic RADIUS Accounting Plug-Ins Configuring Flexible RADIUS Accounting Plug-Ins Configuring Custom RADIUS Accounting-Plug-Ins Types of Authentication Plug-Ins Configuring Authentication Plug-Ins Limiting Subscribers on Router Interfaces Configuring Basic RADIUS Authentication Plug-Ins Configuring Flexible RADIUS Authentication Plug-Ins Configuring Custom RADIUS Authentication Plug-Ins Configuring LDAP Authentication Plug-Ins Configuring UDP Ports for RADIUS Plug-Ins Defining RADIUS Packets for Flexible RADIUS Plug-Ins Overview of Flexible RADIUS Plug-Ins Using Default RADIUS Templates Naming RADIUS Attribute Instances Defining RADIUS Attributes Standard RADIUS Attributes Juniper Networks VSAs Defining the Values of RADIUS Attributes Configuring a RADIUS Packet Template Using Flexible RADIUS Packet Definitions Setting Values in Authentication Response Packets Selecting IP Address Pools Using DHCP Response Packets Configuring Event Publishers Special Types of Event Publishers Configuring Service-Specific Event Publishers Configuring Retailer-Specific Event Publishers Configuring Virtual Router–Specific Event Publishers Configuring Global and Default Retailer Event Publishers Configuring Subscribers and Subscriptions (SRC CLI) Overview of Configuring Subscribers and Subscriptions Specifying the Activation Order for Subscriptions Inheritance of Properties and Subscriptions Enabling the Subscriber and Subscription Configuration on the SRC CLI Adding Subscribers (SRC CLI) Adding Retailers (SRC CLI) Configuring Administrative Information for Retailers (SRC CLI) Adding Subscriber Folders (SRC CLI) Adding Residential Subscribers (SRC CLI) Configuring Administrative Information for Residential Subscribers (SRC CLI) Adding Enterprises (SRC CLI) Configuring Administrative Information for Enterprise Subscribers (SRC CLI) Adding Sites (SRC CLI) Adding Devices as Subscribers (SRC CLI) Adding Managers (SRC CLI) Configuring Subscriptions (SRC CLI) Configuring Accesses (SRC CLI) Redirecting Subscriber Traffic Overview of Traffic Redirection Proxy Request Management HTTP Proxy and DNS Protection Against Denial-of-Service Attacks Redirect Server Redundancy Configuring Traffic Redirection (SRC CLI) Configuration Statements for the Redirect Server (SRC CLI) Before You Configure the Redirect Server on a C-Series Controller Configuring the Redirect Server (SRC CLI) Configuring General Properties for the Redirect Server (SRC CLI) Configuring a Connection Between the Redirect Server and the Directory (SRC CLI) Defining Traffic to Transmit to the Redirect Server (SRC CLI) Changing the Number of Requests That the Redirect Server Accepts (SRC CLI) Specifying Extensions for Files That the Redirect Server Accepts (SRC CLI) Verifying Configuration for the Redirect Server (SRC CLI) Enabling the Redirect Server Configuring the DNS Server for the Redirect Server (SRC CLI) Configuring the Redirect Server to Support HTTP Proxies (SRC CLI) Before You Configure Redundancy for a Redirect Server Configuring a Redundant Redirect Server (SRC CLI) Configuring Logging for the Redirect Server Changing the Configuration for the Redirect Server Assessing Load for Redirect Server (C-Web Interface) Reviewing and Configuring Policies and Services for Enterprise Manager Portal Overview of Services for Enterprise Manager Portal Directory Structure Priorities for Subscriptions Before You Configure Services for Enterprise Manager Portal Configuring Firewall Policies and Services for Enterprise Manager Portal Types of Firewall Services Overview of Basic Firewall Services and Policies Tasks to Configure Firewall Policies and Services Configuring Basic Firewall Policies Configuring Basic Firewall Services Reviewing the fwrule Policy Group for Exceptions to Stateful Firewalls Reviewing the Firewall Rule Service for Exceptions to Stateful Firewalls Reviewing Services for Exceptions to Stateless Firewalls Parameter Values Used by Services for Exceptions to Stateless Firewalls Planning Services for Custom Firewall Exceptions Configuring Policies for Custom Firewall Exceptions Configuring Services for Custom Firewall Exceptions Configuring Priorities for Stateless or Stateful Firewall Services Configuring Priorities to Have Enterprise Services Work Together Configuring Priorities for Individual Scopes by Defining Them in Services Using Stateless Firewall and BoD Applications Together Configuring NAT Policies and Services for Enterprise Manager Portal NAT Policies and Services in the SRC Sample Data Configuring the dynsrcnat Policy Group Reviewing the DynSrcNat Service Configuring the staticdstnat Policy Group Configuring the StaticDstNat Service Configuring the staticsrcnat Policy Group Configuring the StaticSrcNat Service Configuring Bandwidth Policies and Services for Enterprise Manager Portal Overview of Bandwidth-on-Demand Services Parameter Values Used by BoD Services Bandwidth Policies for Different Routing Platforms Configuring Basic BoD Policies Configuring Basic BoD Services Configuring BoD Policies Configuring BoD Services Using BoD Services to Assign Traffic to Bandwidth Categories Using BoD and Basic BoD Services Together to Supply Class of Service Examples: Setting Up Forwarding Preferences Setting Up Forwarding Preferences by Using CoS on JUNOS Routing Platforms Setting Up Forwarding Preferences by Allocating a Percentage of a Link’s Bandwidth to a Service Enabling Schedules for Subscriptions for Enterprise Manager Portal Configuring VPNs for Enterprise Manager Portal Overview of VPN Management Through Enterprise Manager Portal Before You Configure VPN Policies and Services Configuring Policies for BoD Traffic Destined for VPNs Configuring Services for BoD Traffic Destined for VPNs Billing Subscribers Through SCU/DCU for JUNOS Routing Platforms Adding VPNs from JUNOS Routing Platforms (SRC CLI) Before You Add a JUNOS VPN to the SRC Configuration Configuring VPNs to Integrate into an SRC Network Configuration Statements for Adding VPNs and Extranet Clients Adding VPNs for Retailers and Enterprises Verifying and Updating Configuration of Extranets for VPNs Locating and Removing Inactive Subscriptions to a VPN Overview of Enterprise Service Portals Function of Enterprise Service Portals Consistency of Data in the Directory Privileges of IT Managers Developing and Customizing Enterprise Service Portals Identifying the SAE Enterprise Service Portals Provided with the SRC Software Sample Enterprise Service Portal Enterprise Manager Portal NAT Address Management Portal Enterprise Service Portal Audit Plug-In Network Information Collector with Enterprise Service Portals Service Parameters Substitutions and the Parameter Acquisition Path Power of Substitutions Substituting Values for Policy Parameters Managing Subscriptions to Aggregate Services Configuring Your Web Browser to Use an Enterprise Service Portal Accessing Enterprise Service Portals Planning Deployment for Enterprise Service Portals Architecture of Enterprise Service Portals Elements for an Enterprise Service Portal Communication Protocols Deployment Scenario for an Enterprise Service Portal Deciding Which Enterprise Service Portal to Use Planning Number of Instances of an Enterprise Service Portal Planning Namespace Hierarchy for an Enterprise Service Portal Installing and Configuring Enterprise Service Portals Before You Install an Enterprise Service Portal Setting Up Enterprise Service Portals Preparing the Web Applications for Customization Configuring Connections to the Directory Configuring Deployment Settings for Enterprise Manager Portal Configuring the URL for an Enterprise Service Portal Writing an Application to Allow a Machine to Provide Public IP Addresses for NAT Configuring an Enterprise Service Portal Audit Plug-In Managing Services with Enterprise Manager Portal Overview of Enterprise Manager Portal Getting Help on Enterprise Manager Portal Setting the Configuration Level for Enterprise Manager Portal Managing Schedules Schedules in Enterprise Manager Portal Enabling Scheduling for the Enterprise Manager Portal Using Schedules in Enterprise Manager Portal Creating a Schedule in Enterprise Manager Portal Applying a Schedule to a Service in Enterprise Manager Portal Disabling a Schedule for a Service in Enterprise Manager Portal Changing Schedules in Enterprise Manager Portal Managing Subscriptions to Bandwidth-on-Demand Services Overview of Bandwidth-on-Demand Services Planning Subscriptions to BoD Services Creating a Subscription to BoD Services Setting a Bandwidth Level Adding Subscriptions to BoD Services Modifying Rules for a Subscription to a BoD Service Modifying the Bandwidth Level Moving the Bandwidth Level Deleting a Subscription for a BoD Service Deleting the Bandwidth Level Monitoring Use of Subscriptions to BoD Services Integrating VPNs into an SRC Network Through Enterprise Manager Portal Overview of VPNs in an SRC Network Modifying Subscriber VPN Configuration Creating Extranets Through Enterprise Manager Portal Deleting Extranets Through Enterprise Manager Portal Sending Traffic to a VPN Modifying the VPN to Which the Router Sends Traffic Stopping the Router from Sending Traffic to VPNs Classifying Traffic for Stateful Firewall Exceptions and NAT Rules Overview of Traffic Classification for Firewall Exceptions and NAT Rules Classifying Traffic Modifying Values for Traffic Classifications Deleting Traffic Classifications Subscribing to Firewall Services Through Enterprise Manager Portal Overview of Firewall Services in Enterprise Manager Portal Before You Configure Firewall Exception Rules Creating Subscriptions to Firewall Services Creating Firewall Exceptions for Stateless Firewalls Creating Firewall Exceptions for Stateful Firewalls Adding a Schedule to a Firewall Exception Modifying Firewall Exceptions Deleting Firewall Exceptions Deleting Basic Firewalls Monitoring the Use of Subscriptions to Firewall Services Working with IP Addressing and NAT Services Requesting Public IP Addresses for NAT Services Canceling Requests for Public IP Addresses Returning Public IP Addresses to Service Providers Applying NAT Rules to Traffic Configuring Public IP Addresses for Outgoing Traffic Configuring Public IP Addresses for Incoming Traffic Configuring Fixed Public Addresses for Outgoing Traffic Modifying NAT Rules Deleting NAT Rules Monitoring the Status of Subscriptions Troubleshooting Subscriptions That Are Not Functioning Correctly Troubleshooting Subscriptions of Unknown Status Managing Enterprise Service Portals Displaying Information About Your Control in the Enterprise Through the Enterprise Service Portal Updating Data That the Enterprise Service Portal Displays Managing Operators Through the Enterprise Service Portal Creating Managers Through the Enterprise Service Portal Modifying Managers Through the Enterprise Service Portal Deleting Managers Through the Enterprise Service Portal Using NAT Address Management Portal Overview of NAT Address Management Portal Assigning IP Addresses Acknowledging the Release of IP Addresses Using the Sample Enterprise Service Portal Overview of the Sample Enterprise Service Portal Starting the Sample Enterprise Service Portal Subscribing to Services Activating Subscriptions Deactivating Subscriptions Suspending Subscriptions Canceling Suspensions of Subscriptions Monitoring Use of Subscriptions Specifying Values for Service Parameters in Subscriptions Restoring Default Values for Service Parameters In Subscriptions Deleting Subscriptions Monitoring Service Sessions for a Subscription Defining Networks for Departments in an Enterprise Modifying Network Definitions for Departments in an Enterprise Deleting Network Definitions for Departments in an Enterprise Developing an Enterprise Service Portal Developing a Portal Based on the Sample Enterprise Service Portal Preparing to Develop a Sample-Based Enterprise Service Portal Creating a Portal Project for a Sample-Based Enterprise Service Portal Building a Sample-Based Enterprise Service Portal Deploying a Sample-Based Enterprise Service Portal Testing a Sample-Based Enterprise Service Portal Using a Virtual Address for the Portal Index Index