
JunosE 11.3.x Broadband Access Configuration Guide
Copyright and Trademark Information
Table of Contents
List of Figures
List of Tables
About the Documentation
Managing Remote Access
Configuring Remote Access
Remote Access Overview
Remote Access Platform Considerations
Remote Access References
Before You Configure B-RAS
Remote Access Configuration Tasks
Configuring a B-RAS License
Mapping a User Domain Name to a Virtual Router
Setting Up Domain Name and Realm Name Usage
Specifying a Single Name for Users from a Domain
Configuring RADIUS Authentication and Accounting Servers
Server Access
Server Request Processing Limit
Authentication and Accounting Methods
Supporting Exchange of Extensible Authentication Protocol Messages
Immediate Accounting Updates
Duplicate and Broadcast Accounting
UDP Checksums
Collecting Accounting Statistics
Configuring RADIUS AAA Servers
SNMP Traps and System Log Messages
Configuring SNMP Traps 
Configuring Local Authentication Servers
Configuring Tunnel Subscriber Authentication
Configuring Name Server Addresses
Configuring Local Address Servers
Configuring DHCP Features
Creating an IP Interface
Configuring AAA Profiles 
Using RADIUS Route-Download Server to Distribute Routes
Using the AAA Logical Line Identifier to Track Subscribers
Using VSAs for Dynamic IP Interfaces
Mapping Application Terminate Reasons to RADIUS Terminate Codes
Configuring Timeout
Limiting Active Subscribers
Notifying RADIUS of AAA Failure
Configuring Standard RADIUS IPv6 Attributes for IPv6 Neighbor
Discovery Router Advertisements and DHCPv6 Prefix Delegation
Duplicate IPv6 Prefix Check Overview
Configuring Duplicate IPv6 Prefix Check
Propagation of LAG Subscriber Information to AAA and RADIUS
Configuring the SRC Client
Retrieval of DSL Line Rate Information from Access Nodes Overview
DHCPv6 Local Address Pools for Allocation of IPv6 Prefixes
Overview
Configuring the DHCPv6 Local Address Pools
Using DHCPv6 Local Address Pools for Prefix Delegation over
non-PPP Links Example
Monitoring and Troubleshooting Remote Access 
Setting Baselines for Remote Access
How to Monitor PPP Interfaces
Monitoring AAA Accounting Configuration
Monitoring AAA Accounting Default
Monitoring Accounting Interval
Monitoring Specific Virtual Router Groups
Monitoring the Default AAA Authentication Method List
Monitoring Domain and Realm Name Delimiters
Monitoring Mapping Between User Domains and Virtual Routers
Monitoring Tunnel Subscriber Authentication
Monitoring Routing Table Address Lookup
Monitoring the AAA Model
Monitoring IP Addresses of Primary and Secondary DNS and WINS
Name Servers
Monitoring AAA Profile Configuration
Monitoring Statistics about the RADIUS Route-Download Server
Monitoring Routes Downloaded by the RADIUS Route-Download Server
Monitoring Chassis-Wide Routes Downloaded by RADIUS Route-Download
Servers
Monitoring Authentication, Authorization, and Accounting Statistics
Monitoring the Number of Active Subscribers Per Port
Monitoring the Maximum Number of Active Subscribers Per Virtual
Router
Monitoring Session Timeouts
Monitoring Interim Accounting for Users on the Virtual Router
Monitoring Virtual Router Groups Configured for AAA Broadcast
Accounting
Monitoring Configuration Information for AAA Local Authentication
Monitoring AAA Server Attributes
Monitoring the COPS Layer Over SRC Connection
Monitoring Statistics About the COPS Layer
Monitoring Local Address Pool Aliases
Monitoring Local Address Pools
Monitoring Local Address Pool Statistics
Monitoring Shared Local Address Pools
Monitoring the Routing Table
Monitoring the B-RAS License
Monitoring the RADIUS Server Algorithm
Monitoring RADIUS Override Settings
Monitoring the RADIUS Rollover Configuration
Monitoring RADIUS Server Information
Monitoring RADIUS Services Statistics
Monitoring RADIUS SNMP Traps
Monitoring RADIUS Accounting for L2TP Tunnels
Monitoring RADIUS UDP Checksums
Monitoring RADIUS Server IP Addresses
Monitoring the RADIUS Attribute Used for IPv6 Neighbor Discovery
Router Advertisements
Monitoring the RADIUS Attribute Used for DHCPv6 Prefix Delegation
Monitoring Duplicate IPv6 Prefixes
Monitoring SRC Client Connection Status
Monitoring SRC Client Connection Statistics
Monitoring the SRC Client Version Number
Monitoring Subscriber Information
Monitoring Application Terminate Reason Mappings
Monitoring IPv6 Local Pools for DHCP Prefix Delegation By All
Configured Pools
Monitoring IPv6 Local Pools for DHCP Prefix Delegation By Pool
Name
Monitoring IPv6 Local Pool Statistics for DHCP Prefix Delegation
Managing RADIUS and TACACS+
Configuring RADIUS Attributes
RADIUS Overview
RADIUS Platform Considerations
RADIUS References
Subscriber AAA Access Messages
Subscriber AAA Accounting Messages
DSL Forum VSAs in AAA Access and Accounting Messages
CLI AAA Messages
CLI Commands Used to Modify RADIUS Attributes
RADIUS IETF Attributes
[4] NAS-IP-Address
[5] NAS-Port
[8] Framed-IP-Address
[9] Framed-Ip-Netmask
[13] Framed-Compression
[22] Framed-Route
[25] Class
[30] Called-Station-Id
[31] Calling-Station-Id
[32] NAS-Identifier
[41] Acct-Delay-Time
[44] Acct-Session-Id
[45] Acct-Authentic
[49] Acct-Terminate-Cause
[50] Acct-Multi-Session-Id
[51] Acct-Link-Count
[52] Acct-Input-Gigawords
[53] Output-Gigawords
[55] Event-Timestamp
[61] NAS-Port-Type
[64] Tunnel-Type
[65] Tunnel-Medium-Type
[66] Tunnel-Client-Endpoint
[67] Tunnel-Server-Endpoint
[68] Acct-Tunnel-Connection
[77] Connect-Info
[82] Tunnel-Assignment-Id
[83] Tunnel-Preference
[87] NAS-Port-Id
[90] Tunnel-Client-Auth-Id
[91] Tunnel-Server-Auth-Id
[96] Framed-Interface-Id
[97] Framed-Ipv6-Prefix
[99] Framed-Ipv6-Route
[100] Framed-Ipv6-Pool
[123] Delegated-Ipv6-Prefix
[188] Ascend-Num-In-Multilink
All Tunnel Server
Attributes
Juniper Networks Vendor-Specific Attributes
[26-1] Virtual-Router
[26-10] Ingress-Policy-Name
[26-11] Egress-Policy-Name
[26-14] Service-Category
[26-15] PCR
[26-16] SCR
[26-17] MBS
[26-24] Pppoe-Description
[26-35] Acct-Input-Gigapackets
[26-36] Acct-Output-Gigapackets
[26-44] Tunnel-Interface-Id
[26-45] Ipv6-Virtual-Router
[26-46] Ipv6-Local-Interface
[26-47] Ipv6-Primary-DNS
[26-48] Ipv6-Secondary-DNS
[26-51] Disconnect-Cause
[26-53] Service-Description
[26-55] DHCP-Options
[26-56] DHCP-MAC-Address
[26-57] DHCP-GI-Address
[26-62] MLPPP-Bundle-Name
[26-63] Interface-Desc
[26-81] L2C-Information
[26-92] L2C-Up-Stream-Data
[26-93]
L2C-Down-Stream-Data
[26-129]
Ipv6-NdRa-Prefix
[26-141] Downstream-Calculated-Qos-Rate
[26-142]
Upstream-Calculated-Qos-Rate
[26-143]
Max-Clients-Per-Interface
[26-150]
ICR-Partition-Id
All
IPv6 Accounting Attributes
[26-159] DHCP-Option
82
ANCP-Related Juniper Networks VSAs
DSL Forum Vendor-Specific Attributes
Including or Excluding Attributes in RADIUS Messages
Ignoring Attributes When Receiving Access-Accept Messages
Configuring RADIUS Dynamic-Request Server
RADIUS Dynamic-Request Server Overview
RADIUS Dynamic-Request Server Platform Considerations
RADIUS Dynamic-Request Server References
How RADIUS Dynamic-Request Server Works 
RADIUS-Initiated Disconnect
Message Exchange
Configuring RADIUS-Initiated Disconnect
RADIUS-Initiated Change of Authorization
Configuring RADIUS-Initiated Change of Authorization
RADIUS Dynamic-Request Server Commands
Monitoring RADIUS Dynamic-Request Servers
Configuring RADIUS Relay Server
RADIUS Attribute Descriptions 
Application Terminate Reasons
Monitoring RADIUS
Monitoring Override Settings of RADIUS IETF Attributes
Monitoring the NAS-Port-Format RADIUS Attribute
Monitoring the Calling-Station-Id RADIUS Attribute
Monitoring the NAS-Identifier RADIUS Attribute
Monitoring the Format of the Remote-Circuit-ID for RADIUS
Monitoring the Delimiter Character in the Remote-Circuit-ID
for RADIUS
Monitoring the Acct-Session-Id RADIUS Attribute
Monitoring the DSL-Port-Type RADIUS Attribute
Monitoring the Connect-Info RADIUS Attribute
Monitoring the NAS-Port-ID RADIUS Attribute
Monitoring Included RADIUS Attributes
Monitoring Ignored RADIUS Attributes
Setting the Baseline for RADIUS Dynamic-Request Server Statistics
Monitoring RADIUS Dynamic-Request Server Statistics
Monitoring the Configuration of the RADIUS Dynamic-Request
Server
Setting a Baseline for RADIUS Relay Statistics
Monitoring RADIUS Relay Server Statistics
Monitoring the Configuration of the RADIUS Relay Server
Monitoring the Status of RADIUS Relay UDP Checksums
Monitoring the Status of ICR Partition Accounting
Configuring TACACS+
Monitoring TACACS+
Managing L2TP
L2TP Overview
Configuring an L2TP LAC
LAC Configuration Prerequisites
Modifying L2TP LAC Default Settings for Managing Destinations,
Tunnels, and Sessions
Generating UDP Checksums in Packets to L2TP Peers
Specifying a Destruct Timeout for L2TP Tunnels and Sessions
Preventing Creation of New Destinations, Tunnels, and Sessions 
Shutting Down Destinations, Tunnels, and Sessions
Specifying the Number of Retransmission Attempts
Configuring Calling Number AVP Formats
Mapping a User Domain Name to an L2TP Tunnel Overview
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel
Mode
Mapping User Domain Names to L2TP Tunnels from Tunnel Group
Tunnel Mode
Configuring the RX Speed on the LAC
Managing the L2TP Destination Lockout Process
Managing Address Changes Received from Remote Endpoints
Configuring LAC Tunnel Selection Parameters
Configuring an L2TP LNS
LNS Configuration Prerequisites
Configuring an LNS
Creating an L2TP Destination Profile
Creating an L2TP Host Profile
Configuring the Maximum Number of LNS Sessions
Configuring the RADIUS Connect-Info Attribute on the LNS
Overriding LNS Out-of-Resource Result Codes 4 and 5
Selecting Service Modules for LNS Sessions Using MLPPP
Enabling Tunnel Switching
Creating Persistent Tunnels
Testing Tunnel Configuration
Managing L2TP Destinations, Tunnels, and Sessions 
Configuring Disconnect Cause Information
Configuring the Receive Window Size
Configuring Peer Resynchronization
Configuring L2TP Tunnel Switch Profiles
Applying the L2TP Tunnel Switch Profile
Configuration Guidelines
Configuring L2TP AVPs for Relay
Configuration Tasks
Enabling Tunnel Switching on the Router
Configuring L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps
Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups
Applying Default L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using RADIUS
Configuring the Transmit Connect Speed Calculation Method
Transmit Connect Speed Calculation Methods
Transmit Connect Speed Calculation Examples
Transmit Connect Speed Reporting Considerations
Using AAA Domain Maps to Configure the Transmit Connect Speed
Calculation Method
Using AAA Tunnel Groups to Configure the Transmit Connect Speed
Calculation Method
Using AAA Default Tunnel Parameters to Configure the Transmit
Connect Speed Calculation Method
Using RADIUS to Configure the Transmit Connect Speed Calculation
Method
PPP Accounting Statistics
Stateful Line Module Switchover for LNS Sessions
Configuring L2TP Dial-Out
L2TP Disconnect Cause Codes
Monitoring L2TP and L2TP Dial-Out
Monitoring the Mapping for User Domains and Virtual Routers
with AAA
Monitoring Configured Tunnel Groups with AAA
Monitoring Configuration of Tunnel Parameters with AAA
Monitoring Global Configuration Status on E Series Routers
Monitoring Detailed Configuration Information for Specified
Destinations
Monitoring Locked Out Destinations
Monitoring Configured Destination Profiles or Host Profiles
Monitoring Configured and Operational Status of all Destinations
Monitoring Statistics on the Cause of a Session Disconnection
Monitoring Detailed Configuration Information about Specified
Sessions
Monitoring Configured and Operational Summary Status
Monitoring Configured Switch Profiles on Router
Monitoring Detailed Configuration Information about Specified
Tunnels
Monitoring Configured and Operational Status of All Tunnels
Monitoring Chassis-wide Configuration for L2TP Dial-out
Monitoring Status of Dial-out Sessions
Monitoring Dial-out Targets within the Current VR Context
Monitoring Operational Status within the Current VR Context
Managing DHCP
DHCP Overview 
DHCP Local Server Overview
Configuring DHCP Local Server
Configuring the DHCP Local Server
Basic Configuration of DHCP Local Server
Limiting the Number of IP Addresses Supplied by DHCP Local
Server
Excluding IP Addresses from Address Pools
Configuring DHCP Local Server to Support Creation of Dynamic
Subscriber Interfaces
Differentiating Between Clients with the Same Client ID or
Hardware Address
Logging Out DHCP Local Server Subscribers
Clearing an IP DHCP Local Server Binding
Using SNMP Traps to Monitor DHCP Local Server Events
Using DHCP Local Server Event Logs
Configuring DHCP Local Address Pools
Configuring AAA Authentication for DHCP Local Server Standalone
Mode
Configuring the DHCPv6 Local Server
Deleting DHCPv6 Client Bindings
Configuring the Router to Work with the SRC Software
Configuring DHCP Relay 
Configuring DHCP Relay and BOOTP Relay
Enabling DHCP Relay
Removing Access Routes from Routing Tables and NVS
Treating All Packets as Originating at Trusted Sources
Assigning the Giaddr to Source IP Address
Protecting Against Spoofed Giaddr and Relay Agent Option Values
Using the Broadcast Flag Setting to Control Transmission of
DHCP Reply Packets
Preventing DHCP Relay from Installing Host Routes
by Default
Including Relay Agent Option Values in the PPPoE Remote Circuit
ID
Using the Giaddr to Identify the Primary Interface for Dynamic
Subscriber Interfaces
Configuring Layer 2 Unicast Transmission Method for Reply Packets
to DHCP Clients
Using Option 60 Strings to Forward Client Traffic to Specific
DHCP Servers
Relaying DHCP Packets That Originate from a Cable Modem
Configuring Relay Agent Option 82 Information
Preventing Option 82 Information from Being Stripped from Trusted
Client Packets
Configuring Relay Agent Information Option (Option 82) Suboption
Values
Format of the JunosE Data Field in the Vendor-Specific Suboption
for Option 82
Using the set dhcp relay agent sub-option Command to Enable
Option 82 Suboption Support
Configuration Example—Using DHCP Relay Option 82 to Pass
IEEE 802.1p Values to DHCP Servers
Using the set dhcp relay agent Command to Enable Option 82
Suboption Support
Rate of DHCP Client Packets Processed by DHCP Relay Overview
Configuring the Rate of Client Packets Processed by DHCP Relay
Configuring DHCP Relay Proxy
Configuring the DHCP External Server Application
DHCP External Server Overview
Preservation of Dynamic Subscriber Interfaces with DHCP External
Server Overview
DHCP External Server Identification of Clients with Duplicate
MAC Addresses Overview
DHCP External Server Configuration Requirements
Enabling and Disabling the DHCP External Server Application
Monitoring DHCP Traffic Between Remote Clients and DHCP Servers
Synchronizing the DHCP External Application and the Router
Configuring Interoperation with Ethernet DSLAMs
Configuring the DHCP External Server to Support the Creation
of Dynamic Subscriber Interfaces
Configuring DHCP External Server to Control Preservation of
Dynamic Subscriber Interfaces
Configuring Dynamic Subscriber Interfaces for Interoperation
with DHCP Relay and DHCP Relay Proxy
Deleting Clients from a Virtual Router’s DHCP Binding
Table
Configuring DHCP External Server to Uniquely Identify Clients
with Duplicate MAC Addresses
Configuring DHCP External Server to Re-Authenticate Auto-Detected
Dynamic Subscriber Interfaces
Monitoring and Troubleshooting DHCP
Setting Baselines for DHCP Statistics
Monitoring Addresses Excluded from DHCP Local Server Use
Monitoring DHCP Bindings
Monitoring DHCP Binding Information
Monitoring DHCP Binding Count Information
Monitoring DHCP Binding Host Information
Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address
Bindings)
Monitoring DHCP Bindings (Displaying DHCP Bindings Based on
Binding ID)
Monitoring DHCP Bindings (Local Server Binding Information)
Monitoring DHCP External Server Configuration Information
Monitoring DHCP External Server Statistics
Monitoring DHCP External Server Duplicate MAC Address Setting
Monitoring DHCP Local Address Pools
Monitoring DHCP Local Server Authentication Information
Monitoring DHCP Local Server Configuration
Monitoring DHCP Local Server Leases
Monitoring DHCP Local Server Statistics
Monitoring DHCP Option 60 Information
Monitoring DHCP Packet Capture Settings
Monitoring DHCP Relay Configuration Information
Monitoring DHCP Relay Proxy Statistics
Monitoring DHCP Relay Statistics
Monitoring DHCP Server and DHCP Relay Agent Statistics
Monitoring DHCP Server and Proxy Client Information
Monitoring DHCPv6 Local Server Binding Information
Monitoring DHCPv6 Local Server DNS Search Lists
Monitoring DHCPv6 Local Server DNS Servers
Monitoring DHCPv6 Local Server Prefix Lifetime
Monitoring DHCPv6 Local Server Statistics
Monitoring Duplicate MAC Addresses Use By DHCP Local Server
Clients
Monitoring the Maximum Number of Available Leases
Monitoring Static IP Address and MAC Address Pairs Supplied
by DHCP Local Server
Monitoring Status of DHCP Applications
Managing the Subscriber Environment
Managing Subscriber Services
Configuring Service Manager
Service Manager Overview
Service Manager Platform Considerations
Service Manager References
Service Manager Configuration Tasks
Service Definitions
Referencing Policies in Service Definitions
Referencing QoS Configurations in Service Definitions
Configuring the Service Manager License
Managing and Activating Service Sessions
Using RADIUS to Manage Subscriber Service Sessions 
Using Mutex Groups to Activate and Deactivate Subscriber Services
Combined and Independent IPv4 and IPv6 Services in a Dual Stack
Overview
Activation and Deactivation of IPv4 and IPv6 Services in a
Dual Stack
Configuring RADIUS Accounting for Service Manager
Using the CLI to Manage Subscriber Service Sessions
Configuring Service Manager Statistics
Service Manager Performance Considerations
Service Definition Examples
Monitoring Service Manager
Setting a Baseline for HTTP Local Server Statistics
Monitoring the Connections to the HTTP Local Server
Monitoring the Configuration of the HTTP Local Server
Monitoring Statistics for Connections to the HTTP Local Server
Monitoring Profiles for the HTTP Local Server
Monitoring the Default Interval for Interim Accounting of Services
Monitoring the Status of the Service Manager License
Monitoring Profiles for Service Manager
Monitoring IPv4 and IPv6 Interfaces for Service Manager
Monitoring Service Definitions
Monitoring Service Session Profiles
Monitoring Active Owner Sessions with Service Manager
Monitoring Active Subscriber Sessions with Service Manager
Monitoring the Number of Active Subscriber and Service Sessions
with Service Manager
IndexSymbols
A
- AAA (authentication, authorization, accounting)
- DSL Forum VSAs 1, 2
- EAP authentication
- failure, notifying RADIUS of
- L2TP tunnel switch profiles, applying 1, 2
- overview 1, 2
- services
- accounting
- and TACACS+
- authentication 1, 2
- authorization
- overview
- aaa commands, See also show aaa commands
- aaa accounting acct-stop on-aaa-failure
- aaa accounting acct-stop on-access-deny
- aaa accounting broadcast
- aaa accounting commands
- aaa accounting default
- aaa accounting duplication
- aaa accounting exec
- aaa accounting immediate-update
- aaa accounting interval
- aaa accounting statistics
- aaa accounting suppress null-username
- aaa accounting tacacs+
- aaa accounting vr-group
- aaa authentication default 1, 2
- aaa authentication enable default 1, 2
- aaa authentication login 1, 2
- aaa delimiter
- aaa dhcpv6-delegated-prefix delegated-ipv6-prefix
- aaa dns primary 1, 2
- aaa dns secondary 1, 2
- aaa domain-map 1, 2, 3, 4
- aaa duplicate-address-check
- aaa intf-desc-format include 1, 2
- aaa ipv6-nd-ra-prefix framed-ipv6-prefix
- aaa local database
- aaa local select database
- aaa local username
- aaa new-model 1, 2
- aaa parse-direction
- aaa parse-order
- aaa profile 1, 2, 3, 4
- aaa route-download
- aaa route-download now
- aaa route-download suspend
- aaa service accounting interval
- aaa subscriber limit per-port
- aaa subscriber limit per-vr
- aaa timeout
- aaa tunnel assignment-id-format
- aaa tunnel calling-number-format
- aaa tunnel calling-number-format fallback
- aaa tunnel client-name
- aaa tunnel ignore
- aaa tunnel password
- aaa tunnel switch-profile
- aaa tunnel tx-connect-speed-method
- aaa tunnel-group
- aaa user accounting interval 1, 2
- aaa virtual-router
- aaa wins primary
- aaa wins secondary
- AAA default tunnel parameters
- AAA domain maps
- AAA LLID (logical line identifier)
- configuration steps
- how it works
- monitoring 1, 2
- preauthentication considerations
- RADIUS attributes in preauthentication request 1, 2
- troubleshooting
- using to track subscribers
- AAA logical line identifier (LLID)., See AAA LLID
- AAA profile commands
- aaa profile 1, 2
- allow
- deny
- nas-port-type atm
- nas-port-type ethernet
- ppp aaa-profile 1, 2
- service-description
- translate
- AAA profiles
- AAA tunnel groups
- Access-Accept messages
- Access-Challenge messages 1, 2
- Access-Reject messages 1, 2
- Access-Request messages
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- accounting
- accounting statistics
- Acct-Authentic (RADIUS attribute 45)
- Acct-Delay-Time (RADIUS attribute 41)
- Acct-Input-Gigapackets (RADIUS attribute 26-35)
- Acct-Input-Gigawords (RADIUS attribute 52)
- Acct-Link-Count (RADIUS attribute 51)
- Acct-Multi-Session-Id (RADIUS attribute 50)
- Acct-Off messages
- Acct-On messages
- Acct-Output-Gigapackets (RADIUS attribute 26-36)
- Acct-Session-Id (RADIUS attribute 44) 1, 2, 3
- Acct-Start messages
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- Acct-Stop messages
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- Acct-Terminate-Cause (RADIUS attribute 49)
- Acct-Tunnel-Connection (RADIUS attribute 68)
- Activate-Service (RADIUS attribute 26-65)
- address command, L2TP 1, 2
- address pool
- address-pool-name command
- agent circuit ID (suboption 1)
- agent remote ID (suboption 2)
- agent-circuit-id
- agent-remote-id
- allow command
- Ascend-Num-In-Multilink (RADIUS attribute 188)
- ATM (Asynchronous Transfer Mode)
- atm atm1483 advisory-rx-speed command
- atm commands
- ATM subinterface
- configuring multiple clients
- configuring single clients 1, 2
- attribute value pair., See AVP
- authentication
- authentication and accounting servers
- authentication login, TACACS+
- authentication, authorization, accounting., See AAA
- authorization
- authorization change command
- AVP (attribute value pair)
- avp command
B
- B-RAS applications
- AAA profiles
- allowing or denying domain names
- client to server interaction
- configuring
- creating an IP interface
- creating domain name aliases
- DHCP (Dynamic Host Configuration Protocol) proxy client and server
- IP hinting
- limiting active subscribers
- local address server
- manually setting NAS-Port-Type
- mapping address pool to domain
- mapping backup address pool to domain
- mapping IPv6 local address pool to domain
- mapping user domain names to a virtual router
- mapping user requests
- monitoring
- multiple clients per ATM subinterface
- overview
- preauthenticating users
- protocol support
- redirected authentication
- references 1, 2
- setting Service-Description
- single clients per ATM subinterface
- SNMP traps
- specifying a single name for a domain
- SRC client., See SRC software
- system log messages
- virtual router
- B-RAS licenses
- backoff algorithm 1, 2
- backup address pool
- backup local address pool
- backup-address-pool-name command
- baseline commands
- baseline aaa 1, 2
- baseline aaa route-download 1, 2, 3, 4, 5, 6, 7
- baseline cops
- baseline dhcp relay
- baseline dhcp server
- baseline dhcp-local 1, 2, 3
- baseline dhcpv6-local 1, 2, 3
- baseline ip dhcp-external
- baseline ip http
- baseline local pool
- baseline radius
- baseline radius dynamic-request
- baseline radius relay
- baseline sscc
- Bearer Type AVP
- BOOTP (bootstrap protocol)
- bootstrap protocol., See BOOTP
- bridged Ethernet and dynamic subscriber interfaces
- Broadband Remote Access Server., See B-RAS applications
- broadcast AAA accounting
- broadcast flag, DHCP
- bundled session commands
- bundled sessions
C
- cable modem DHCP relay
- cable modem networks
- Called-Station-Id (RADIUS attribute 30)
- Calling Number AVP
- descriptive formats
- fixed format
- fixed format configuration
- formatting in L2TP ICRQ packets
- including agent-circuit-id and agent-remote-id
- preventing in L2TP ICRQ packets
- relaying in L2TP tunnel-switched network 1, 2
- Calling-Station-Id (RADIUS attribute 31)
- captive portal., See guided entrance
- Change-of-Authorization-Request messages
- Cisco NAS Port Info AVP
- Class (RADIUS attribute 25)
- clear ip commands
- CLI (command-line interface)
- client-name command 1, 2
- CoA-Request messages
- guided entrance 1, 2
- Service Manager
- combined IPv4 and IPv6 services
- command-line interface., See CLI
- Common Open Policy Service., See COPS
- compatibility with previous releases
- configuring., See specific feature, product, or protocol
- Connect-Info (RADIUS attribute 77)
- conventions
- COPS (Common Open Policy Service) 1, 2, 3
- COPS(Common Open Policy Service) 1, 2, 3, 4, 5
- COPS-PR (COPS usage for policy provisioning)
- customer support
D
- Deactivate-Service (RADIUS attribute 26-66) 1, 2, 3
- deadtime command
- default domain name
- default-router command
- default-upper-type mlppp command
- Delegated-Ipv6-Prefix (RADIUS attribute 123)
- delegating routers
- deny command
- descriptive formats
- destination
- DHCP (Dynamic Host Configuration Protocol)
- access model
- configuring BOOTP Relay
- configuring DHCP relay
- configuring DHCP relay proxy 1, 2
- configuring proxy client and server
- features
- giaddr 1, 2, 3
- option 82 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
- overview 1, 2, 3
- per-interface logging
- source IP address
- trust-all
- DHCP access model
- DHCP broadcast flag
- DHCP client bindings
- DHCP commands, See also show dhcp commands
- dhcp-external duplicate-mac-address 1, 2
- ip auto-detect ip-subscriber
- ip dhcp-capture
- ip dhcp-external re-authenticate-subscriber-interface
- ip dhcp-external recreate-subscriber-interface 1, 2
- ip inactivity-timer
- set ip interface-profile
- set ip source-prefix 1, 2
- show dhcp-external
- dhcp delete-binding command
- DHCP external server
- and DHCP relay proxy
- configuring 1, 2, 3
- dynamic subscriber interfaces
- identifying clients with duplicate MAC addresses 1, 2
- monitoring
- preserving dynamic subscriber interfaces 1, 2
- re-authenticating auto-detected dynamic subscriber interfaces
- DHCP local address pools
- DHCP local server
- configuring 1, 2
- configuring authentication
- duplicate clients
- equal-access mode
- local address pool group 1, 2
- local pool selection, equal-access
- local pool selection, standalone
- logging information
- modes
- monitoring 1, 2
- overview
- RADIUS accounting support for
- RADIUS accounting support for standalone mode
- standalone mode
- address allocation 1, 2
- authentication
- configuring
- local pool selection
- overview
- unique client IDs
- DHCP local server traps
- DHCP local server:local pool selection, equal-access
- DHCP local server:local pool selection, standalone with AAA
- DHCP local server:local pool selection, standalone without AAA
- DHCP logging
- DHCP option 60 cable modem DHCP relay
- DHCP option 60 strings
- DHCP Option 82 (RADIUS attribute 26-159)
- DHCP options and RADIUS
- DHCP packets
- DHCP per-interface information
- DHCP pool commands
- DHCP proxy client
- DHCP relay
- DHCP relay agent information option
- DHCP relay and BOOTP relay
- DHCP relay proxy
- DHCP server
- DHCP vendor class identifier option
- dhcp-external commands
- dhcp-external duplicate-mac-address 1, 2
- show dhcp-external
- DHCP-GI-Address (RADIUS attribute 26-57)
- dhcp-local-server-configuration-overview
- DHCP-MAC-Address (RADIUS attribute 26-56)
- DHCP-Options (RADIUS attribute 26-55)
- DHCPv6 client bindings
- DHCPv6 clients
- dhcpv6 delete-binding command
- DHCPv6 local address pools, See IPv6 local address pools
- DHCPv6 local server
- DHCPv6 Prefix Delegation
- and IPv6 Neighbor Discovery
- assigned prefix length of /128
- enabling
- example for non-PPP client requests
- example scenario
- for client requests
- for IPv6 clients
- Framed-IPv6-Prefix
- guidelines for configuring
- interface level configuration
- IPv6 local address pool
- limitation on
- standard RADIUS attributes
- using IPv6 local address pools
- dialed number identification service., See DNIS
- digital subscriber line access multiplexers., See DSLAMs
- digital subscriber lines., See DSLs
- disable proxy lcp command
- Disconnect-Cause (RADIUS attribute 26-51)
- Disconnect-Request messages
- DNIS (dialed number identification service) 1, 2
- DNS (Domain Name System)
- DNS addresses
- DNS domain names
- DNS domains
- DNS Recursive Name Search option
- DNS servers
- documentation set
- domain command
- Domain Name System., See DNS
- domain names
- allowing or denying
- configuring
- default
- mapping to virtual routers 1, 2, 3, 4, 5, 6
- mapping user requests without domain name 1, 2
- none
- specifying single name for users
- stripping domain name
- using aliases
- using delimiters other than @
- using either domain or realm asdomain name
- using realm name as domain name
- Downstream-Calculated-QoS-Rate (RADIUS attribute 26-141)
- DSL Forum VSAs
- DSLAMs (digital subscriber line access multiplexers)
- DSLs (digital subscriber lines)
- dual stack
- duplicate AAA accounting
- duplicate clients
- duplicate MAC addresses
- identifying DHCP clients with 1, 2
- monitoring
- Dynamic Host Configuration Protocol., See DHCP
- dynamic IP interfaces
- dynamic subscriber interfaces
- commands
- configuring 1, 2
- configuring DHCP external server to interoperate with DHCP relay and DHCP relay proxy
- configuring DHCP external server to preserve 1, 2
- configuring DHCP external server to re-authenticate
- DHCP server
- framed routes
- GRE tunnel configuration
- in same VR as DHCP relay
- inheriting MAC validation state
- IP over bridged Ethernet configuration
- IP over Ethernet configuration
- IP over VLAN over Ethernet configuration
- monitoring
- overview
- packet detection
E
- E120 and E320 routers
- EAP (Extensible Authentication Protocol)
- EAP-Message (RADIUS attribute 79)
- Egress-Policy-Name (RADIUS attribute 26-11)
- enable proxy authenticate command
- encapsulation commands
- endpoint discriminator
- equal-access DHCP local server
- Ethernet
- Ethernet interfaces
- Ethernet links
- Event-Timestamp (RADIUS attribute 55)
- exclusion ranges
- Extensible Authentication Protocol., See EAP
- external parent groups
F
- fixed format
- fragmentation
- framed routes dynamic subscriber interfaces
- Framed-Compression (RADIUS attribute 13)
- Framed-Interface-Id (RADIUS attribute 96)
- Framed-Ip-Address (RADIUS attribute 8)
- Framed-Ip-Netmask (RADIUS attribute 9)
- Framed-Ipv6-Pool (RADIUS attribute 100)
- Framed-Ipv6-Prefix (RADIUS attribute 97)
- Framed-IPv6-Prefix attribute
- Framed-Ipv6-Route (RADIUS attribute 99)
- Framed-MTU (RADIUS attribute 12)
- Framed-Route (RADIUS attribute 22)
G
- giaddr 1, 2
- GRE (Generic Routing Encapsulation) tunnels dynamic subscriber interfaces 1, 2
- guided entrance
H
I
- I/O adapters., See IOAs
- ICR partition accounting
- identification command 1, 2
- idle timeout for B-RAS
- idle timeout, range for
- include commands
- independent IPv4 and IPv6 services
- Ingress-Policy-Name (RADIUS attribute 26-10)
- inheriting MAC address validation state
- interface commands
- Interface-Desc (RADIUS attribute 26-63)
- interfaces
- Interim-Acct messages
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- Internet Protocol., See IP
- IOAs
- IP
- IP addresses
- assigning to name servers 1, 2, 3
- configuring for remote client
- ip commands
- clear ip demux
- ip address
- ip address-pool dhcp
- ip auto-configure ip-subscriber 1, 2, 3
- ip auto-detect ip-subscriber
- ip demux-type
- ip destination-prefix 1, 2, 3
- ip dhcp-local pool
- ip inactivity-timer
- ip local alias
- ip local pool
- ip local pool snmpTrap
- ip local pool warning
- ip local shared-pool
- ip route-map ip-subscriber
- ip service-profile
- ip share-interface
- ip share-nexthop
- ip source-prefix 1, 2, 3
- ip unnumbered
- ip use-framed-routes ip-subscriber 1, 2
- ip-hint
- ip dhcp-external commands, See also show ip dhcp-external commands
- ip dhcp-external auto-configure
- ip dhcp-external disregard-giaddr-next-hop
- ip dhcp-external recreate-subscriber-interface 1, 2
- ip dhcp-external server-address
- ip dhcp-external server-sync
- ip re-authenticate-auto-detect ip-subscriber
- ip dhcp-local auth domain command 1, 2
- ip dhcp-local auth include command
- ip dhcp-local auth password
- ip dhcp-local auth user-prefix command
- ip dhcp-local commands
- ip dhcp-server commands
- ip http commands
- IP interfaces
- IP interfaces that support PPP clients
- IP spoofing
- IPv4 and IPv6 services, See also combined IPv4 and IPv6 services See also independent IPv4 and IPv6 services
- IPv4 services
- ipv6 commands
- IPv6 DHCP local server
- ipv6 dhcpv6-local commands
- IPv6 local address pools
- and overriding using the RADIUS attribute from AAA server
- assigned prefix length of /128
- configuring
- DNS servers in
- enabling
- example for non-PPP client requests
- for delegation of prefixes
- for DHCPv6 Prefix Delegation
- guidelines for configuration
- limitation on
- mapping to a domain name
- multiple configuration
- name length
- not configured in domain map
- order of preference
- Prefix Delegation
- prerequisite for configuring
- procedure
- removing from
- specifying
- used for Prefix Delegation from
- IPv6 Neighbor Discovery
- IPv6 prefix ranges
- IPv6 services
- IPv6-Acct-Input-Gigawords [26-155]
- IPv6-Acct-Input-Octets [26-151]
- IPv6-Acct-Input-Packets [26-153]
- IPv6-Acct-Output-Gigawords [26-156]
- IPv6-Acct-Output-Octets [26-152]
- IPv6-Acct-Output-Packets [26-154]
- Ipv6-Local-Interface (RADIUS attribute 26-46)
- Ipv6-NdRa-Prefix (RADIUS attribute 26-46)
- IPv6-NdRa-Prefix attribute
- IPv6-Primary-DNS (RADIUS attribute 26-47)
- Ipv6-Secondary-DNS (RADIUS attribute 26-46)
- IPv6-Virtual-Router (RADIUS attribute 26-45)
K
L
- L2C-Down-Stream-Data (RADIUS attribute 26-93)
- L2C-Information (RADIUS attribute 26-81)
- L2C-Up-Stream-Data (RADIUS attribute 26-92)
- L2TP (Layer 2 Tunneling Protocol)
- L2TP access concentrator., See LAC
- l2tp commands, See also show l2tp commands
- disconnect-cause
- failover-resync
- l2tp checksum
- l2tp destination lockout-test
- l2tp destination lockout-timeout
- l2tp destination profile 1, 2
- l2tp destruct-timeout
- l2tp disable calling-number avp
- l2tp disable challenge
- l2tp disconnect-cause
- l2tp drain
- l2tp drain destination
- l2tp drain tunnel
- l2tp fail-over-within-preference
- l2tp failover-resync 1, 2
- l2tp ignore-receive-data-sequencing
- l2tp ignore-transmit-address-change
- l2tp reject-transmit-address-change
- l2tp retransmission
- l2tp short-drain-timeout
- l2tp shutdown
- l2tp shutdown destination
- l2tp shutdown session
- l2tp shutdown tunnel
- l2tp switch-profile
- l2tp tunnel default-receive-window
- l2tp tunnel idle-timeout
- l2tp tunnel test
- l2tp tunnel-switching 1, 2
- l2tp unlock destination
- l2tp unlock-test destination
- l2tp weighted-load-balancing command
- max-sessions command 1, 2
- L2TP dial-out
- l2tp dial-out commands, See also show l2tp dial-out commands
- L2TP network server., See LNS
- L2TP RWS (receive window size)
- configuring global default
- configuring on LAC
- configuring on LNS
- l2tp tunnel default-receive-window command
- overview
- receive-window command (for LAC)
- receive-window command (for LNS)
- show l2tp command 1, 2, 3, 4
- show l2tp destination profile command 1, 2
- l2tp rx-connect-speed-when-equal command
- L2TP transmit connect speed
- L2TP transmit connect speed and Transmit (TX) Speed AVP 24
- L2TP tunnel switch profiles
- LAC (L2TP access concentrator)
- before configuring 1, 2
- configuring receive window size (RWS)
- function 1, 2
- sequence of events
- Layer 2 Tunneling Protocol., See L2TP
- license commands, See also show license commands
- licenses
- lifetime
- limitation
- line command
- LLID (logical line identifier)
- LNS (L2TP network server)
- local address pool
- local address server
- local authentication commands
- local host command
- local ip address command
- local-interface command
- logging., See specific feature, product, or protocol
- logical line identifier, AAA., See LLID
- login authentication command 1, 2
- logout subscribers command 1, 2
M
- MAC (media access control) addresses
- duplicate 1, 2
- inheriting validation state 1, 2
- preventing IP spoofing
- macros
- manuals
- max-sessions command 1, 2, 3
- MBS (RADIUS attribute 26-17)
- media access control addresses., See MAC addresses
- medium ipv4 command 1, 2
- merging policies
- Message-Authenticator (RADIUS attribute 80)
- MLPPP Bundle Name (RADIUS attribute 26-62)
- monitoring., See specific feature, product, or protocol
- mutex service 1, 2
N
- name server addresses
- naming conventions
- NAS (network access server) 1, 2
- NAS-Identifier (RADIUS attribute 32)
- NAS-IP-Address (RADIUS attribute 4)
- NAS-Port (RADIUS attribute 5)
- NAS-Port-Id (RADIUS attribute 87)
- NAS-Port-Type (RADIUS attribute 61)
- nas-port-type atm command
- NAS-Port-Type attribute, manually setting
- nas-port-type ethernet command
- network access server., See NAS
- network commands
- no radius client command
- non-PPP clients
- non-PPP equal access
- none domain name
- notice icons
O
- operational states, L2TP
- option 82 1, 2, 3, 4, 5, 6, 7, 8, 9, 10
- out-of-resource result codes, LNS
- Output-Gigawords (RADIUS attribute 53)
- override-user command 1, 2
P
- packet detection dynamic subscriber interfaces
- packet fragmentation
- packet mirroring
- packets
- Partition-Accounting-Off messages
- Partition-Accounting-On messages
- password command 1, 2, 3
- PCR (RADIUS attribute 26-15)
- peer
- peer resynchronization
- performance impact
- persistent tunnels, creating
- PIB (Policy Information Base)
- platform considerations
- Point-to-Point Protocol., See PPP
- Policy Information Base., See PIB
- policy management on subscriber interfaces
- PPP (Point-to-Point Protocol)
- ppp commands
- PPPoE remote circuit ID
- Pppoe-Description (RADIUS attribute 26-24)
- pre-authenticate command
- preauthentication
- preference
- preference command 1, 2
- preference order
- preferred lifetime
- Prefix Delegation, See DHCPv6 Prefix Delegation
- prefixes
- prerequisite
- primary authentication/accounting RADIUS server 1, 2
- primary IP interface
- privilege authentication, TACACS+
- profile commands
Q
R
- RADIUS
- RADIUS (Remote Authentication Dial-In User Service)
- AAA failure
- accounting methods
- attribute descriptions 1, 2, 3
- attributes supported
- authentication and accounting servers
- authentication methods 1, 2
- Calling-Station-Id formats supported
- change of authority messages
- CLI AAA messages
- client to server interaction
- configuring servers
- description 1, 2
- direct server access
- disconnect messages
- EAP authentication
- IETF attributes supported
- Juniper Networks VSAs supported
- L2TP transmit connect speed
- L2TP tunnel switch profiles, applying
- message types supported
- RADIUS dynamic-request server
- round-robin server access
- server access
- server request processing limit
- Service Manager attributes 1, 2
- Service Manager tags
- services
- SNMP traps
- system log messages
- traffic shaping for PPP over ATM interfaces
- VSAs (vendor-specific attributes)
- RADIUS attributes
- radius commands, See also show radius commands
- radius acct-session-id-format 1, 2, 3
- radius algorithm 1, 2, 3
- radius calling-station-delimiter 1, 2
- radius calling-station-format 1, 2, 3, 4, 5
- radius client
- radius connect-info-format
- radius connect-info-format command 1, 2
- radius disconnect client
- radius dsl-port-type 1, 2, 3
- radius dynamic-request server
- radius ethernet-port-type 1, 2, 3
- radius ignore atm-mbs
- radius ignore atm-pcr
- radius ignore atm-scr
- radius ignore atm-service-category
- radius ignore egress-policy-name
- radius ignore framed-ip-netmask 1, 2
- radius ignore ingress-policy-name
- radius ignore virtual-router
- radius include
- radius include access-loop-parameters
- radius include acct-authentic
- radius include acct-delay-time
- radius include acct-link-count
- radius include acct-multi-session-id
- radius include acct-session-id
- radius include acct-session-id access-request
- radius include acct-terminate-cause 1, 2
- radius include acct-tunnel-connection
- radius include ascend-num-in-multilink
- radius include called-station-id
- radius include calling-station-id
- radius include class
- radius include connect-info
- radius include delegated-ipv6-prefix
- radius include dhcp-gi-address
- radius include dhcp-mac-address
- radius include dhcp-options
- radius include downstream-calculated-qos-rate
- radius include dsl-forum-attributes
- radius include egress-policy-name
- radius include event-timestamp
- radius include framed-compression
- radius include framed-interface-id
- radius include framed-ip-add acct-start
- radius include framed-ip-addr
- radius include framed-ip-netmask 1, 2, 3, 4
- radius include framed-ipv6-pool
- radius include framed-ipv6-prefix
- radius include framed-ipv6-route
- radius include framed-route
- radius include icr-partition-id
- radius include ingress-policy-name
- radius include input-gigapkts
- radius include input-gigawords
- radius include interface-description
- radius include ipv6-local-interface
- radius include ipv6-nd-ra-prefix
- radius include ipv6-primary-dns
- radius include ipv6-secondary-dns
- radius include ipv6-virtual-router
- radius include l2c-downstream-data
- radius include l2c-upstream-data
- radius include l2tp-ppp-disconnect-cause
- radius include mlppp-bundle-name
- radius include nas-identifier
- radius include nas-port 1, 2
- radius include nas-port-id
- radius include nas-port-type
- radius include output-gigapkts
- radius include output-gigawords
- radius include pppoe-description
- radius include profile-service-description
- radius include tunnel-assignment-id
- radius include tunnel-client-auth-id
- radius include tunnel-client-endpoint
- radius include tunnel-interface-id
- radius include tunnel-medium-type
- radius include tunnel-preference
- radius include tunnel-server-attributes
- radius include tunnel-server-auth-id
- radius include tunnel-server-endpoint
- radius include tunnel-type
- radius include upstream-calculated-qos-rate 1, 2
- radius includeframed-ip-netmask 1, 2
- radius nas-identifier
- radius nas-port-format 1, 2
- radius nas-port-format extended atm
- radius nas-port-format extended ethernet
- radius override calling-station-id remote-circuit-id
- radius override nas-info 1, 2, 3
- radius override nas-ip-addr tunnel-client-endpoint
- radius override nas-port-id remote-circuit-id 1, 2, 3
- radius pppoe nas-port-format unique 1, 2
- radius pre-authentication server
- radius relay server
- radius relay udp-checksum
- radius remote-circuit-id-delimiter
- radius remote-circuit-id-format
- radius rollover-on-reject
- radius route-download server
- radius server
- radius trap acct-server-not-responding
- radius trap acct-server-responding
- radius trap auth-server-not-responding
- radius trap auth-server-responding
- radius trap no-acct-server-responding
- radius trap no-auth-server-responding
- radius tunnel-accounting
- radius udp-checksum
- radius update-source-addr 1, 2, 3
- radius vlan nas-port-format stacked
- RADIUS dynamic-request server
- RADIUS IPv6 attributes
- RADIUS relay server
- radius remote-circuit-id-format command
- RADIUS route-download server
- configuring
- format of routes
- how it works 1, 2
- per chassis
- supported attributes
- RADIUS servers
- radius-attributes-override-monitoring
- RADIUS-initiated change of authorization
- RADIUS-initiated disconnect
- realm names
- Receive speed AVP
- receive window size (RWS)., See L2TP RWS
- receive-window command 1, 2
- redirected authentication 1, 2
- remote access (B-RAS)., See B-RAS applications
- Remote Authentication Dial-In User Service., See RADIUS
- remote clients, IP addresses for
- remote host command 1, 2
- remote system
- requesting routers
- retransmit command
- router-name command 1, 2, 3
- RX speed AVP
S
- S-VLAN links
- SCR (RADIUS attribute 26-16)
- SDX (Service Deployment System) software 1, 2, See also SRC software
- server-name command 1, 2
- service commands
- service definitions
- service dhcp-local command
- service instance
- service interim accounting
- Service Manager
- CLI support
- CoA-Request messages 1, 2
- combined IP4 and IPv6 service
- configuring
- deactivating
- guided entrance 1, 2, 3
- IPv4 and IPv6 services
- license sessions
- macros
- multiple services
- mutex service 1, 2
- overview
- parameter values
- preprovisioning services 1, 2
- QoS
- RADIUS dynamic-request server
- RADIUS support
- RADIUS tags
- service definition
- service instance
- service session
- service session profiles
- session thresholds
- statistics
- statistics collection
- subscriber session ID
- subscriber sessions 1, 2
- supported platforms
- tasks
- testing services
- Service Manager commands
- Service Manager license
- service modules
- service session
- Service-Category (RADIUS attribute 26-14)
- Service-Description (RADIUS attribute 26-53)
- Service-Interim-Acct-Interval (RADIUS attribute 26-140) 1, 2
- Service-Session (RADIUS attribute 26-83) 1, 2
- Service-Statistics (RADIUS attribute 26-69)
- Service-Stats (RADIUS attribute 26-69)
- Service-Timeout (RADIUS attribute 26-68) 1, 2
- Service-Volume (RADIUS attribute 26-67) 1, 2
- session 1, 2
- Session and Resource Control., See SRC software
- session timeout
- session-out-of-resource-result-code-override command
- Session-Timeout (RADIUS attribute 27)
- sessions, L2TP
- set dhcp commands
- set dhcp relay commands
- set dhcp relay
- set dhcp relay agent
- set dhcp relay agent sub-option
- set dhcp relay assign-giaddr-source-ip
- set dhcp relay broadcast-flag-replies 1, 2
- set dhcp relay giaddr-selects-interface
- set dhcp relay layer2-unicast-replies 1, 2
- set dhcp relay options
- set dhcp relay override
- set dhcp relay preserve-trusted-client-option
- set dhcp relay proxy
- set dhcp relay trust-all
- set dhcp relay proxy commands
- set dhcp vendor-option command
- shared IP interfaces
- shared local address pools
- shared tunnel-server ports
- show aaa commands
- show aaa accounting 1, 2
- show aaa accounting default 1, 2
- show aaa accounting interval
- show aaa accounting vr-group 1, 2
- show aaa authentication default 1, 2
- show aaa delimiters 1, 2
- show aaa dhcpv6-delegated-prefix
- show aaa domain-map 1, 2, 3, 4
- show aaa duplicate-address-check
- show aaa intf-desc-format
- show aaa ipv6-nd-ra-prefix
- show aaa model
- show aaa name-servers 1, 2
- show aaa profile
- show aaa route-download routes 1, 2, 3
- show aaa route-download routes global 1, 2
- show aaa service accounting interval
- show aaa statistics 1, 2
- show aaa subscriber per-port-limit 1, 2
- show aaa subscriber per-vr-limit 1, 2
- show aaa timeout 1, 2
- show aaa tunnel-group 1, 2
- show aaa tunnel-parameters 1, 2, 3
- show aaa user accounting interval 1, 2
- show radius route-download 1, 2
- show configuration commands
- show configuration category aaa global-attributes
- show configuration category aaa local-authentication
- show configuration category aaa server-attributes include-defaults
- show configuration category aaaglobal-attributes
- show configuration category aaalocal-authentication
- show configuration category aaaserver-attributes include-defaults
- show cops info command 1, 2
- show cops statistics command 1, 2
- show dhcp commands
- show dhcp summary command
- show dhcp vendor-option command
- show dhcp-external command
- show ip commands
- show ip dhcp-capture command
- show ip dhcp-external commands
- show ip dhcp-local commands
- show ip dhcpv6-local commands
- show ip http commands
- show ip interface commands
- show ip local shared-local command
- show ipv6 interface commands
- show ipv6 local pool commands
- show l2tp commands
- show l2tp dial-out commands
- show license commands
- show profile commands
- show radius commands
- show radius accounting servers
- show radius accounting statistics
- show radius acct-session-id-format
- show radius algorithm
- show radius attributes-included
- show radius authentication servers
- show radius authentication statistics
- show radius calling-station-delimiter 1, 2
- show radius calling-station-format 1, 2
- show radius connect-info-format
- show radius dsl-port-type 1, 2
- show radius dynamic-request servers
- show radius dynamic-request statistics
- show radius ethernet-port-type
- show radius icr-partition-accounting
- show radius nas-identifier
- show radius nas-port-format
- show radius override
- show radius pppoe nas-port-format
- show radius remote-circuit-id-delimiter
- show radius remote-circuit-id-format 1, 2
- show radius rollover-on-reject
- show radius route-download statistics
- show radius servers 1, 2
- show radius statistics 1, 2, 3, 4
- show radius trap
- show radius tunnel-accounting 1, 2
- show radius update-source-address
- show radius vlan nas-port-format
- show radius override 1, 2
- show radius relay commands
- show service-management commands
- show sscc commands
- show subscribers command
- show terminate-code command
- SNMP traps
- source-address command 1, 2
- spoofing, IP
- SRC (Session and Resource Control) software
- configuring the client
- monitoring the client 1, 2
- SRC (Session and Resource Control)software
- sscc commands, See also show sscc commands
- sscc address 1, 2
- sscc enable
- sscc protocol ipv6
- sscc protocol lac
- sscc retryTimer 1, 2
- sscc sourceAddress
- sscc transportRouter 1, 2
- standalone DHCP local server
- standard RADIUS attributes
- State (RADIUS attribute 24)
- statistics
- statistics collection
- strip-domain command
- subscriber disconnect command
- subscriber interface commands
- subscriber interfaces
- subscribers
- support, technical, See technical support
- system log messages
T
- TACACS+
- AAA services
- accounting
- authentication login process
- authorization
- configuring
- daemon 1, 2
- host
- NAS (network access server) 1, 2
- privilege authentication
- TACACS+ commands
- aaa accounting commands
- aaa accounting exec
- aaa accounting suppress null-username
- aaa accounting tacacs+
- aaa authentication enable default 1, 2
- aaa authentication login
- aaa new-model 1, 2
- tacas-server key
- tacas-server source-address
- tacas-server timeout
- tacas-sever host
- TCP and TACACS+
- technical support
- Terminal Access Controller Access Control System +., See TACACS+
- terminate-code command
- test aaa command
- text and syntax conventions
- timeout command
- timeout, configuring for B-RAS applications
- traffic shaping for PPP over ATM
- translate command
- transmit connect speed, L2TP., See L2TP transmit connect speed
- tunnel
- defined 1, 2
- selection, L2TP
- switching
- tunnel commands, L2TP
- tunnel 1, 2
- tunnel group
- tunnel password
- tunnel group mode, mapping to L2TP tunnel
- tunnel selection, L2TP
- tunnel subscribers, enabling authentication for
- tunnel switch profiles, L2TP
- Tunnel-Assignment-Id (RADIUS attribute 82)
- Tunnel-Client-Auth-Id (RADIUS attribute 90)
- Tunnel-Client-Endpoint (RADIUS attribute 66)
- Tunnel-Interface-Id (RADIUS attribute 26-44)
- Tunnel-Medium-Type (RADIUS attribute 65)
- Tunnel-Preference (RADIUS attribute 83)
- tunnel-server command
- tunnel-server ports
- Tunnel-Server-Auth-Id (RADIUS attribute 91)
- Tunnel-Server-Endpoint (RADIUS attribute 67)
- tunnel-subscriber authentication command
- Tunnel-Type (RADIUS attribute 64)
- tunneled PPP session accounting statistics
- tunnels, IP
- tx-connect-speed-method command
- type command, L2TP 1, 2
U
V
- valid lifetime
- validation state, inheriting for MAC addresses
- vendor class identifier option
- vendor-specific (suboption 9)
- vendor-specific attributes., See VSAs
- virtual routers
- Virtual-Router (RADIUS attribute 26-1)
- vlan commands
- VLAN links
- VLANs (virtual local area networks)
- VPNs (virtual private networks)
- VSAs (vendor-specific attributes)
W
- walled garden., See guided entrance
- Web access to E Series router
- Windows Internet Name Service., See WINS
- WINS, assigning IP addresses 1, 2, 3, 4