Subscriber Classification Conditions

Subscriber classification conditions define match criteria that are used to find the subscriber profile. Use the fields in this section to define subscriber classification conditions.

dhcp

• DHCP options. See Sending DHCP Options to the JUNOSe Router .

domainName

• Domain name of the subscriber.

• Value—Valid domain name

• Example—domainName=“ isp99.com”

ifAlias

• Description of the interface.

• Value—Interface description that is configured on the router. For JUNOSe routers, it is the description configured with the interface description command

• Example—ifAlias=“ dhcp-subscriber12”

ifDesc

• Alternate name for the interface that is used by SNMP. This name is a system-generated name.

• Value
  • On a JUNOSe router, the format of the description is

    ip<slot>/<port>.<subinterface>

  • On the JUNOS routing platform, ifDesc is the same as interfaceName.

• Example—ifDesc=“ IP3/1.1”

interfaceName

• Name of the interface.

• Value
  • Name of the interface in your router CLI syntax
  • FORWARDING_INTERFACE for routing instance (used by traffic mirroring)
  • Router for a JUNOSe router instance

• Example—For JUNOSe routers: interfaceName=“ fastEthernet6/0”

For JUNOS routing platforms: interfaceName=“ fe-0/1/0.0”

For forwarding interface: interfaceName=“ FORWARDING_INTERFACE”

loginName

• Name to be used to create a loginName attribute for a subscriber session for JUNOSe interfaces that are not otherwise assigned a loginName when a session starts, such as unauthenticated DHCP addresses, unauthenticated IP interfaces (that are not using PPP connections), or core-facing interfaces.

  The loginName can also be used to identify a subscriber session through the SAE CORBA remote API.

• Value—Name in the form subscriber@domain

• Guideline—The format is not defined. A loginName can be of form subscriber, domain\subscriber, subscriber@domain, or as otherwise defined by the login setup of the operator.

• <Login name>

• Example—idp@idp

loginType

• Type of subscriber session to be created.

• Value—One of the following login types:
  • ASSIGNEDIP—For assigned IP subscribers. Triggered when an application accesses a subscriber object for an assigned IP subscriber that is not currently loaded into memory. (Supported on JUNOSe routers.)
  • AUTHINTF—For authenticated interface login requests. Triggered when a login Name is reported together with the interface, such as authenticated PPP or autoconfigured ATM interface, by means of the subscriber command. (Supported on JUNOSe routers.)
  • INTF—For unauthenticated interface login requests. Triggered when an interface comes up and the interface classification script determines that the SAE should manage the interface. (Supported on JUNOS routing platforms and JUNOSe routers.)
  • ADDR—For unauthenticated address login requests. Triggered when the DHCP server in the JUNOSe router provides an unauthenticated IP address. (Supported on JUNOSe routers.)
  • AUTHADDR—For authenticated address login requests. Triggered when the DHCP server in the JUNOSe router provides an authenticated IP address. (Supported on JUNOSe routers.)
  • PORTAL—Triggered when the portal API is invoked to log in a subscriber. (Supported on JUNOS routing platforms and JUNOSe routers.)

• Example—loginType=“ AUTHADDR”

macAddress

• String representation of the DHCP subscriber media access control (MAC) address.

• Value—Valid MAC address

• Example—macAddress=“ 00:11:22:33:44:55”

nasPortId

• Port identifier of an interface.

• Value—Includes interface name and additional layer 2 information

• Example—nasPortId=“ fastEthernet 3/1” (There is a space between fastEthernet and slot number 3/1 in the nasPortId.)

radiusClass

• RADIUS class used for authorization.

• Value—RADIUS class name

• Example—radiusClass=“ Premium”

retailerDn

• DN of the retailer object. The object is found when the domain name is mapped to a retailer object in LDAP.

• Value—DN of a retailer

serviceBundle

• Content of the vendor-specific RADIUS attribute for the service bundle.

• Value—Name of a service bundle

• Example—serviceBundle=“goldSubscriber”

unauthenticatedUserDn

• DN of the unauthenticated subscriber profile (usable for target expressions only).

• Value—DN of a subscriber profile

userName

• Name of the subscriber.

• Value—Subscriber name without the domain name

• Example—userName=“ peter”

virtualRouterName

• Name of the virtual router or routing instance.

• Value—For JUNOSe routers: name of the virtual router in the format vrname@hostname

  For JUNOS routing platforms: name of the routing instance

• Example—virtualRouterName=“default@e_series5”

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.