About the Documentation

SRC Documentation and Release Notes

Audience

Documentation Conventions

Obtaining Documentation

Documentation Feedback

Requesting Technical Support

SRC Product Overview

SRC Product Description

SRC Product Features and Benefits

SRC Components

SRC Component Overview

SRC Server Components

Service Activation Engine

Policy and Service Management

Accounting Support

SAE Extensions

Juniper Policy Server

Network Information Collector

Redirect Server

SRC Repository for Data

Juniper Networks Database as a Data Repository on C Series Controllers

Directory as Repository for Subscriber Data

SRC Configuration and Management Tools

SRC CLI

C-Web Interface

Policy and Management

SDX SNMP Agent

SRC Service Management Applications

SRC SOAP Gateway

Deep Packet Inspection Integration Application

Benefits of the DPI Integration

Threat Mitigation Portal

SRC Programming Interfaces

NETCONF API

CORBA Plug-In SPI

CORBA Remote API

NIC Access API

SAE Core API

Script Services

SRC Authentication and Accounting Applications

AAA RADIUS Servers

SRC Admission Control Plug-In

Flat-File Accounting

SRC Volume Tracking Application

Managing Subscriber Accounts with Web Portals

SRC Demonstration Applications

Enterprise Audit Plug-In

Enterprise Manager Portal

IDP Integration Applications

IVE Host Checker Integration Application

Monitoring Agent Application

Prepaid Account Administration Application

Prepaid Service Application

Sample Enterprise Service Portal

Residential Service Selection Portals

Traffic-Mirroring Administration Application

Traffic-Mirroring Application

SRC Auxiliary Applications

Application Server

Other Applications

Planning a Deployment of C Series Controllers

Components in an SRC Deployment

Considerations When Planning a Deployment of C Series Controllers

Deployment Scenario

Configuring a C Series Controller

Before You Begin Configuring the SRC Software on a C Series Controller

Configuring the SRC Software

Configuring SRC Components

Accessing and Starting the SRC CLI

Overview of Configuration for the SRC CLI

Configuration Statements for SRC CLI Directory Access

Changing Access to the Directory that Stores SRC Configuration Data

Verifying the Configuration for SRC Directory Access

Starting the SRC CLI

Policies, Services, and Subscribers CLI

Overview of the Policies, Services, and Subscribers CLI

Configuring Access to the Policies, Services, and Subscribers CLI

Starting the Policies, Services, and Subscribers CLI

Accessing and Using the C-Web Interface

C-Web Interface Overview

Navigating the C-Web Interface

Layout of the C-Web Interface

Elements of the C-Web Interface

Top Pane Elements

Main Pane Elements

Side Pane Elements

Accessing the C-Web Interface

Enabling the C-Web Interface

Starting the C-Web Interface

Policies, Services, and Subscribers Subtasks in the C-Web Interface

Overview of the Policies, Services, and Subscribers Management Subtasks in the C-Web Interface

Configuring Access to Policies, Services, and Subscribers (C-Web Interface)

Starting Policies, Services, and Subscribers

Getting Help in the C-Web Interface

Enabling Help

Disabling Help

Changing a Username or Password for the C-Web Interface

Enabling Remote Users to Access the C-Web Interface

Accessing the C-Web Interface Through Secure HTTP

Accessing the C-Web Interface Through HTTP

Modifying the Editing Level in the C-Web Interface

Displaying Icons for Objects in the C-Web Interface

Enabling Icons for Objects

Disabling Icons for Objects

Editing SRC Configurations (C-Web Interface)

Loading Configuration Values in the C-Web Interface

Committing a Configuration

Reverting to a Previous Configuration

Updating the Configuration Data

Modifying Objects in the C-Web Interface

Copying a Configuration for an Object (C-Web Interface)

Renaming an Object

Moving an Object

Deleting an Object

Configuring Logging Properties in the C-Web Interface

Configuring File Properties

Configuring Syslog Properties

Configuration Statements for Logging for the C-Web Interface

Logging Out of the C-Web Interface

Configuring Remote Access to a C Series Controller (SRC CLI)

Overview of External Interfaces on a C Series Controller

Tunnel Interfaces

Ethernet Redundancy

Configuring Gigabit Ethernet Interfaces for IPv4 (SRC CLI)

Configuring Gigabit Ethernet Interfaces for IPv6 (SRC CLI)

Configuring Tunnel Interfaces (SRC CLI)

Configuring Ethernet Redundancy (SRC CLI)

Configuring Group Interfaces (SRC CLI)

Configuring the MII Monitor (SRC CLI)

Configuring a Trusted Interface (SRC CLI)

Disabling an Interface (SRC CLI)

Configuring the Virtual IP Address (SRC CLI)

Configuring a Static Route to Devices on Other Networks (SRC CLI)

Securing Connections Between a C Series Controller and Remote Hosts

Configuring a C Series Controller to Accept SSH Connections (SRC CLI)

Configuring a C Series Controller to Accept Telnet Connections (SRC CLI)

Configuring a C Series Controller to Accept NETCONF Connections (SRC CLI)

Port Settings for SRC Components

Overview of SRC Licenses

Types of SRC Licenses

Obtaining an SRC License

Pilot License

Server License

Overview of the SRC License Server

Overview of the SRC License Server

About the SRC License Server

License Server Errors

License Requests

Example: License Allocation

Example: License Release Example

Lease Renewal

Directory Location and Access

Unsuccessful Connections from the SAE to the SRC License Server

SRC License Server Redundancy

About SRC License Server Alarms

Customizing SRC License Server Configuration

Configuration Statements for SRC License Server Properties

Configuring License Server Alarms (SRC CLI)

Specifying the ORB Configuration for the SRC License Server (SRC CLI)

Configuring the License Server Repository (SRC CLI)

Configuring License Server Properties (SRC CLI)

Configuring the License Server Location (SRC CLI)

Installing Licenses for C Series Controllers

Installing a Pilot License (SRC CLI)

Installing Server Licenses for C Series Controllers (SRC CLI)

Configuring License Manager for an SAE on a C Series Controller (SRC CLI)

Monitoring License Usage

About SRC License Reports

Creating SRC License Usage Reports (SRC CLI)

Sending SRC License Usage Reports to Administrators (SRC CLI)

Monitoring SRC License Usage (SRC CLI)

Configuring System Time on C Series Controllers (SRC CLI)

Setting the Time Zone (SRC CLI)

Setting the System Date (SRC CLI)

Configuring NTP for C Series Controllers

NTP Support on C Series Controllers

Configuring NTP on a C Series Controller

Configuring NTP on C Series Controllers (SRC CLI)

Configuration Statements for NTP on C Series Controllers

Specifying Which NTP Server a C Series Controller Contacts on Startup

Configuring NTP Client Mode for a C Series Controller (SRC CLI)

Configuring an NTP Peer on a C Series Controller (SRC CLI)

Configuring NTP Broadcast Mode on a C Series Controller (SRC CLI)

Configuring NTP Authentication on a C Series Controller (SRC CLI)

Configuring NTP as a Broadcast Client on a C Series Controller (SRC CLI)

Configuring NTP as a Multicast Client on a C Series Controller (SRC CLI)

Verifying NTP Configuration on a C Series Controller

Configuring System Logging for a C Series Controller (SRC CLI)

Overview of the C Series Controller Log Server

Message Groups

Severity Levels

Before You Configure System Logging (SRC CLI)

Configuration Statements for System Logging on a C Series Controller

Saving System Log Messages to a File (SRC CLI)

Sending System Log Messages to Other Servers (SRC CLI)

Sending Notifications for System Log Messages to Users (SRC CLI)

Configuring Static Host Mapping (SRC CLI)

Overview of Static Host Mapping

Configuring Static Host Mapping (SRC CLI)

Overview of the Juniper Networks Database

Overview of the Juniper Networks Database

Redundancy for a Juniper Networks Database

Security for a Juniper Networks Database

Managing the Juniper Networks Database (SRC CLI)

Configuration Statements for the Juniper Networks Database (SRC CLI)

Enabling the Juniper Networks Database to Run in Standalone Mode (SRC CLI)

Enabling the Juniper Networks Database to Run in Community Mode (SRC CLI)

Securing the Juniper Networks Database (SRC CLI)

Changing the Mode of a Juniper Networks Database (SRC CLI)

Adding a Juniper Networks Database to an Established Community (SRC CLI)

Promoting a Secondary Database to a Primary Role in a Configuration with One Primary Database (SRC CLI)

Updating Data on a Juniper Networks Database (SRC CLI)

Synchronizing Data on a Juniper Networks Database (SRC CLI)

Loading Sample Data in to a Juniper Networks Database (SRC CLI)

Securing Communications Between the Juniper Networks Database and SRC Modules and Components (SRC CLI)

Verifying Configuration for a Juniper Networks Database with the SRC CLI

Getting Information About Operations in a Juniper Networks Database (SRC CLI)

Example: Configuration for a Database Community

Troubleshooting Data Synchronization for Juniper Networks Databases (SRC CLI)

Recovering Data in a Community with One Primary Database and One Secondary Database (SRC CLI)

Setting Up an SAE (SRC CLI)

Initially Configuring the SAE

Grouped Configurations for the SAE

Creating Grouped Configurations for the SAE (SRC CLI)

Configuring an SAE Group

Deleting Default Configurations Within an SAE Group

Configuring Local Properties for the SAE (SRC CLI)

Configuring the RADIUS Local IP Address and NAS ID (SRC CLI)

Starting the SAE (SRC CLI)

Stopping the SAE (SRC CLI)

Managing System Software on a C Series Controller

Overview of Software Management on a C Series Controller

Before You Upgrade the Software on a C Series Controller

Creating a Snapshot of Files on a C Series Controller

Upgrading the System Software on a C Series Controller

Preparing the Software Images on the FTP Server

Preparing the CD Image on a Solaris System

Preparing the CD Image on a Linux System

Preparing the Compressed File on a Solaris System

Preparing the Compressed File on a Linux System

Restoring the Files in a Snapshot

Using the Web Application Server on a C Series Controller

Overview of the Web Application Server on C Series Controllers

Configuration Statements for the Web Application Server

Configuring the Web Application Server (SRC CLI)

Configuring Local Properties for Web Application Server (SRC CLI)

Configuring Remote Access to the Application Server (SRC CLI)

Configuring Access to the Application Server Through Secure HTTP

Configuring Access to the Application Server Through HTTP

Configuring Virtual Hosts for the Web Applications (SRC CLI)

Configuring User Accounts for Web Applications (SRC CLI)

Installing Web Applications in the Application Server

Removing Web Applications From the Application Server

Starting the Web Application Server on a C Series Controller

Restarting the Web Application Server on a C Series Controller

Stopping the Web Application Server on a C Series Controller

Viewing Statistics for the Web Application Server (SRC CLI)

Viewing Statistics for the Web Application Server (C-Web Interface)

Configuring User Access (SRC CLI)

Overview of SRC User Accounts

Login Classes for SRC User Accounts

Login Class Permission Options for the SRC Software

Predefined Login Classes for the SRC Software

Access to Individual Commands and Configuration Statements (SRC CLI)

Regular Expressions for Allow and Deny Statements

Guidelines for Using Regular Expressions

Timeout Value for Idle Login Sessions

Before You Configure Login Classes

Configuring a Login Class (SRC CLI)

User Accounts for the SRC Software

Configuration Statements for SRC User Accounts

Configuring an SRC User Account

Types of Authentication for SRC User Accounts

Configuring Authentication for SRC User Accounts

Configuring a Plain Text Password

Configuring SSH Authentication

Example: SRC User Accounts

Changing the root Password for the SRC Software

Configuring a System Login Announcement (SRC CLI)

Authenticating Users on a C Series Controller (SRC CLI)

Configuring RADIUS and TACACS+ Authentication on a C Series Controller

Configuring RADIUS Authentication (SRC CLI)

Configuring TACACS+ Authentication (C-Web Interface)

A C Series Controller as a RADIUS Client and TACACS+ Client

Configuring More Than One Authentication Method (SRC CLI)

Configuring Authentication Order

Configuring TACACS+ or RADIUS Authentication

Configuring TACACS+ and RADIUS Authentication

Removing an SRC Authentication Method from the Authentication Order

SRC Template Accounts for RADIUS and TACACS+ Authentication

Named Template Accounts

Using Remote SRC Template Accounts

Configuring a Local SRC User Template

Example: Configuring SRC Authentication

Managing Security Digital Certificates

Overview of Digital Certificates

Before You Use Digital Certificates

Commands to Manage Digital Certificates

Manually Obtaining Digital Certificates

Obtaining Digital Certificates through SCEP

Removing a Certificate Request

Removing a Certificate

Connecting to Remote Hosts from the SRC Software

Connecting to a Remote Host Through SSH

Connecting to a Remote Host Through Telnet

Configuring and Starting the SNMP Agent (SRC CLI)

Configuration Statements for the SDX SNMP Agent

Configuring the SDX SNMP Agent

Configuring General Properties for the SDX SNMP Agent

Configuring Initial Properties for the SDX SNMP Agent

Configuring Directory Connection Properties for the SDX SNMP Agent

Configuring Directory Monitoring Properties for the SDX SNMP Agent

Configuring Logging Destinations for the SDX SNMP Agent

Configuring JRE Properties

Configuration Statements for the SNMP Agent

Configuring the SNMP Agent

Configuring System Information for the SNMP Agent (SRC CLI)

Configuring Access Control for SNMPv3 Users (C-Web Interface)

Configuring Authentication

Configuring Encryption

Configuring Access Control for Communities

Configuring Access Control for the VACM

Associating Security Names with a Community

Defining Named Views

Defining Access Privileges for an SNMP Group

Assigning Security Names to Groups

Configuring Notification Targets (SRC CLI)

Operating the SNMP Agent

Starting the SDX SNMP Agent

Stopping the SDX SNMP Agent

Monitoring the SDX SNMP Agent

Distributing Directory Changes to SRC Components

Overview of the Directory Eventing System

Managing Directory Communication

Configuring Local Properties (SRC CLI)

Local Properties for SRC Components

Configuration Statements for Local Configuration

Configuring Basic Local Properties

Changing the Location of Data in the Directory

Configuring Directory Connection Properties

Configuring Initial Directory Eventing Properties for SRC Components

Verifying the Local Configuration for a Component

SRC-Related Abbreviations

SRC-Related Abbreviations

SRC-Related References

RFCs

Draft RFCs

Other Software Standards

URLs

Index

Index