Subscriber User Name for RID, CoA Requests, and Lawful Intercepts When Strip Domain Is Enabled
Using the Strip Domain Functionality Per Virtual Router When Strip Domain Is Enabled for an AAA Domain Map
Redirected Authentication When Strip Domain Is Enabled
Example: Stripping Domain Name Per Virtual Router for RADIUS Server Authentication

Domain Name and Realm Name Examples

Specifying a Single Name for Users from a Domain

Configuring RADIUS Authentication and Accounting Servers

Server Access

Server Request Processing Limit

Authentication and Accounting Methods

Supporting Exchange of Extensible Authentication Protocol Messages

Immediate Accounting Updates

Duplicate and Broadcast Accounting

Configuring AAA Duplicate Accounting
Configuring AAA Broadcast Accounting
Overriding AAA Accounting NAS Information

UDP Checksums

Collecting Accounting Statistics

Configuring RADIUS AAA Servers

SNMP Traps and System Log Messages

SNMP Traps
System Log Messages

Configuring SNMP Traps

Configuring Local Authentication Servers

Creating the Local Authentication Environment

Creating Local User Databases

Adding User Entries to Local User Databases

Using the username Command
Using the aaa local username Command

Assigning a Local User Database to a Virtual Router

Enabling Local Authentication on the Virtual Router

Configuration Commands

Local Authentication Example

Configuring Tunnel Subscriber Authentication

Configuring Name Server Addresses

Configuration Tasks

DNS Primary and Secondary NMS Configuration
WINS Primary and Secondary NMS Configuration

Configuring Local Address Servers

Local Address Pool Ranges
Local Address Pool Aliases
Shared Local Address Pools
SNMP Thresholds
Configuring a Local Address Server

Configuring DHCP Features

Creating an IP Interface

Single Clients per ATM Subinterface
Multiple Clients per ATM Subinterface

Configuring AAA Profiles

Allowing or Denying Domain Names

Configuration Example

Using Domain Name Aliases

Manually Setting NAS-Port-Type Attribute

Service-Description Attribute

Using RADIUS Route-Download Server to Distribute Routes

Format of Downloaded Routes

Framed-Route (RADIUS attribute 22)
Cisco-AVPair (Cisco VSA 26-1)

How the Route-Download Server Downloads Routes

Configuring the Route-Download Server to Download Routes

Using the AAA Logical Line Identifier to Track Subscribers

How the Router Obtains and Uses the LLID
RADIUS Attributes in Preauthentication Request
Considerations for Using the LLID
Configuring the Router to Obtain the LLID for a Subscriber
Troubleshooting Subscriber Preauthentication

Using VSAs for Dynamic IP Interfaces

Traffic Shaping for PPP over ATM Interfaces

Mapping Application Terminate Reasons to RADIUS Terminate Codes

Configuration Example

Configuring Timeout

Limiting Active Subscribers

Notifying RADIUS of AAA Failure

Configuring Standard RADIUS IPv6 Attributes for IPv6 Neighbor Discovery Router Advertisements and DHCPv6 Prefix Delegation

Duplicate IPv6 Prefix Check Overview

Configuring Duplicate IPv6 Prefix Check

Propagation of LAG Subscriber Information to AAA and RADIUS

Configuring the SRC Client

Retrieval of DSL Line Rate Information from Access Nodes Overview

DHCPv6 Local Address Pools for Allocation of IPv6 Prefixes Overview

DHCPv6 Prefix Delegation Example
Order of Preference in Determining the Local Address Pool for Allocating Prefixes
Order of Preference in Allocating Prefixes and Assigning DNS Addresses to Requesting Routers

Configuring the DHCPv6 Local Address Pools

Limitation on the Number of Prefixes Used by Clients

Using DHCPv6 Local Address Pools for Prefix Delegation over non-PPP Links Example

Monitoring and Troubleshooting Remote Access

Setting Baselines for Remote Access

Setting a Baseline for AAA Statistics
Setting a Baseline for AAA Route Downloads
Setting a Baseline for COPS Statistics
Setting a Baseline for Local Address Pool Statistics
Setting a Baseline for RADIUS Statistics
Setting the Baseline for SRC Statistics

How to Monitor PPP Interfaces

Monitoring AAA Accounting Configuration

Monitoring AAA Accounting Default

Monitoring Accounting Interval

Monitoring Specific Virtual Router Groups

Monitoring the Default AAA Authentication Method List

Monitoring AAA Domain Name Stripping for a Domain Per Virtual Router

Monitoring Mapping Between User Domains and Virtual Routers

Monitoring Tunnel Subscriber Authentication

Monitoring Routing Table Address Lookup

Monitoring the AAA Model

Monitoring IP Addresses of Primary and Secondary DNS and WINS Name Servers

Monitoring AAA Profile Configuration

Monitoring Statistics about the RADIUS Route-Download Server

Monitoring Routes Downloaded by the RADIUS Route-Download Server

Monitoring Chassis-Wide Routes Downloaded by RADIUS Route-Download Servers

Monitoring Authentication, Authorization, and Accounting Statistics

Monitoring the Number of Active Subscribers Per Port

Monitoring the Maximum Number of Active Subscribers Per Virtual Router

Monitoring Session Timeouts

Monitoring Interim Accounting for Users on the Virtual Router

Monitoring Virtual Router Groups Configured for AAA Broadcast Accounting

Monitoring Configuration Information for AAA Local Authentication

Monitoring AAA Server Attributes

Monitoring the COPS Layer Over SRC Connection

Monitoring Statistics About the COPS Layer

Monitoring Local Address Pool Aliases

Monitoring Local Address Pools

Monitoring Local Address Pool Statistics

Monitoring Shared Local Address Pools

Monitoring the Routing Table

Monitoring the B-RAS License

Monitoring the RADIUS Server Algorithm

Monitoring RADIUS Override Settings

Monitoring the RADIUS Rollover Configuration

Monitoring RADIUS Server Information

Monitoring RADIUS Services Statistics

Monitoring RADIUS SNMP Traps

Monitoring RADIUS Accounting for L2TP Tunnels

Monitoring RADIUS UDP Checksums

Monitoring RADIUS Server IP Addresses

Monitoring the RADIUS Attribute Used for IPv6 Neighbor Discovery Router Advertisements

Monitoring the RADIUS Attribute Used for DHCPv6 Prefix Delegation

Monitoring Duplicate IPv6 Prefixes

Monitoring SRC Client Connection Status

Monitoring SRC Client Connection Statistics

Monitoring the SRC Client Version Number

Monitoring Subscriber Information

Monitoring Application Terminate Reason Mappings

Monitoring IPv6 Local Pools for DHCP Prefix Delegation By All Configured Pools

Monitoring IPv6 Local Pools for DHCP Prefix Delegation By Pool Name

Monitoring IPv6 Local Pool Statistics for DHCP Prefix Delegation

Managing RADIUS and TACACS+

Configuring RADIUS Attributes

RADIUS Overview

RADIUS Services
RADIUS Attributes

RADIUS Platform Considerations

RADIUS References

Subscriber AAA Access Messages

Supported RADIUS IETF Attributes
Supported Juniper Networks VSAs

Subscriber AAA Accounting Messages

Supported RADIUS IETF Attributes
Supported Juniper Networks VSAs
Tunnel Accounting Messages

DSL Forum VSAs in AAA Access and Accounting Messages

CLI AAA Messages

CLI Commands Used to Modify RADIUS Attributes

RADIUS IETF Attributes

[4] NAS-IP-Address
[5] NAS-Port
[8] Framed-IP-Address
[9] Framed-Ip-Netmask
[13] Framed-Compression
[22] Framed-Route
[25] Class
[30] Called-Station-Id
[31] Calling-Station-Id
[32] NAS-Identifier
[41] Acct-Delay-Time
[44] Acct-Session-Id
[45] Acct-Authentic
[49] Acct-Terminate-Cause
[50] Acct-Multi-Session-Id
[51] Acct-Link-Count
[52] Acct-Input-Gigawords
[53] Output-Gigawords
[55] Event-Timestamp
[61] NAS-Port-Type
[64] Tunnel-Type
[65] Tunnel-Medium-Type
[66] Tunnel-Client-Endpoint
[67] Tunnel-Server-Endpoint
[68] Acct-Tunnel-Connection
[77] Connect-Info
[82] Tunnel-Assignment-Id
[83] Tunnel-Preference
[87] NAS-Port-Id
[90] Tunnel-Client-Auth-Id
[91] Tunnel-Server-Auth-Id
[96] Framed-Interface-Id
[97] Framed-Ipv6-Prefix
[99] Framed-Ipv6-Route
[100] Framed-Ipv6-Pool
[123] Delegated-Ipv6-Prefix
[188] Ascend-Num-In-Multilink
All Tunnel Server Attributes

Juniper Networks Vendor-Specific Attributes

[26-1] Virtual-Router
[26-10] Ingress-Policy-Name
[26-11] Egress-Policy-Name
[26-14] Service-Category
[26-15] PCR
[26-16] SCR
[26-17] MBS
[26-24] Pppoe-Description
[26-35] Acct-Input-Gigapackets
[26-36] Acct-Output-Gigapackets
[26-44] Tunnel-Interface-Id
[26-45] Ipv6-Virtual-Router
[26-46] Ipv6-Local-Interface
[26-47] Ipv6-Primary-DNS
[26-48] Ipv6-Secondary-DNS
[26-51] Disconnect-Cause
[26-53] Service-Description
[26-55] DHCP-Options
[26-56] DHCP-MAC-Address
[26-57] DHCP-GI-Address
[26-62] MLPPP-Bundle-Name
[26-63] Interface-Desc
[26-81] L2C-Information
[26-92] L2C-Up-Stream-Data
[26-93] L2C-Down-Stream-Data
[26-129] Ipv6-NdRa-Prefix
[26-141] Downstream-Calculated-Qos-Rate
[26-142] Upstream-Calculated-Qos-Rate
[26-143] Max-Clients-Per-Interface
[26-150] ICR-Partition-Id
All IPv6 Accounting Attributes
[26-159] DHCP-Option 82

ANCP-Related Juniper Networks VSAs

DSL Forum Vendor-Specific Attributes

Including or Excluding Attributes in RADIUS Messages

Ignoring Attributes When Receiving Access-Accept Messages

Configuring RADIUS Dynamic-Request Server

RADIUS Dynamic-Request Server Overview

RADIUS Dynamic-Request Server Platform Considerations

RADIUS Dynamic-Request Server References

How RADIUS Dynamic-Request Server Works

RADIUS-Initiated Disconnect

Disconnect Messages

Message Exchange

Supported Error-Cause Codes (RADIUS Attribute 101)
Qualifications for Disconnect
Security/Authentication

Configuring RADIUS-Initiated Disconnect

RADIUS-Initiated Change of Authorization

Change-of-Authorization Messages
Message Exchange
Supported Error-Cause Codes (RADIUS Attribute 101)
Qualifications for Change of Authorization
Security/Authentication

Configuring RADIUS-Initiated Change of Authorization

RADIUS Dynamic-Request Server Commands

Monitoring RADIUS Dynamic-Request Servers

Configuring RADIUS Relay Server

RADIUS Relay Server Overview

RADIUS Relay Server Platform Considerations

RADIUS Relay Server References

How RADIUS Relay Server Works

Authentication and Addressing
Accounting
Terminating the Wireless Subscriber’s Connection

RADIUS Relay Server and the SRC Software

Using the SRC Software for Addressing
Using the SRC Application for Accounting

Configuring RADIUS Relay Server Support

Monitoring RADIUS Relay Server

RADIUS Attribute Descriptions

RADIUS IETF Attributes
Juniper Networks VSAs
DSL Forum VSAs
Pass Through RADIUS Attributes
RADIUS Attributes References

Application Terminate Reasons

AAA Terminate Reasons
L2TP Terminate Reasons
PPP Terminate Reasons
RADIUS Client Terminate Reasons

Monitoring RADIUS

Monitoring Override Settings of RADIUS IETF Attributes
Monitoring the NAS-Port-Format RADIUS Attribute
Monitoring the Calling-Station-Id RADIUS Attribute
Monitoring the NAS-Identifier RADIUS Attribute
Monitoring the Format of the Remote-Circuit-ID for RADIUS
Monitoring the Delimiter Character in the Remote-Circuit-ID for RADIUS
Monitoring the Acct-Session-Id RADIUS Attribute
Monitoring the DSL-Port-Type RADIUS Attribute
Monitoring the Connect-Info RADIUS Attribute
Monitoring the NAS-Port-ID RADIUS Attribute
Monitoring Included RADIUS Attributes
Monitoring Ignored RADIUS Attributes
Setting the Baseline for RADIUS Dynamic-Request Server Statistics
Monitoring RADIUS Dynamic-Request Server Statistics
Monitoring the Configuration of the RADIUS Dynamic-Request Server
Setting a Baseline for RADIUS Relay Statistics
Monitoring RADIUS Relay Server Statistics
Monitoring the Configuration of the RADIUS Relay Server
Monitoring the Status of RADIUS Relay UDP Checksums
Monitoring the Status of ICR Partition Accounting

Configuring TACACS+

TACACS+ Overview

AAA Overview
Administrative Login Authentication
Privilege Authentication
Login Authorization
Accounting

TACACS+ Platform Considerations

TACACS+ References

Before You Configure TACACS+

Configuring TACACS+ Support

Configuring Authentication
Configuring Accounting

Monitoring TACACS+

Setting Baseline TACACS+ Statistics
Monitoring TACACS+ Statistics
Monitoring TACACS+ Information

Managing L2TP

L2TP Overview

L2TP Terminology

Implementing L2TP

Sequence of Events on the LAC
Sequence of Events on the LNS

Packet Fragmentation

L2TP Platform Considerations

L2TP Module Requirements

ERX7xx Models, ERX14xx Models, and the ERX310 Router
E120 Router and E320 Router

Sessions and Tunnels Supported

L2TP References

Configuring an L2TP LAC

LAC Configuration Prerequisites

Modifying L2TP LAC Default Settings for Managing Destinations, Tunnels, and Sessions

Generating UDP Checksums in Packets to L2TP Peers

Specifying a Destruct Timeout for L2TP Tunnels and Sessions

Preventing Creation of New Destinations, Tunnels, and Sessions

Preventing Creation of New Destinations, Tunnels, and Sessions on the Router
Preventing Creation of New Tunnels and Sessions at a Destination
Preventing Creation of New Sessions for a Tunnel
Specifying a Drain Timeout for a Disconnected Tunnel

Shutting Down Destinations, Tunnels, and Sessions

Closing Existing and Preventing New Destinations, Tunnels, and Sessions on the Router
Closing Existing and Preventing New Tunnels and Sessions for a Destination
Closing Existing and Preventing New Sessions in a Specific Tunnel
Closing a Specific Session

Specifying the Number of Retransmission Attempts

Configuring Calling Number AVP Formats

Calling Number AVP 22 Configuration Tasks
Configuring the Fallback Format
Disabling the Calling Number AVP

Mapping a User Domain Name to an L2TP Tunnel Overview

Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode

Mapping User Domain Names to L2TP Tunnels from Tunnel Group Tunnel Mode

Configuring the RX Speed on the LAC

Managing the L2TP Destination Lockout Process

Modifying the Lockout Procedure
Verifying That a Locked-Out Destination Is Available
Configuring a Lockout Timeout
Unlocking a Destination that is Currently Locked Out
Starting an Immediate Lockout Test

Managing Address Changes Received from Remote Endpoints

Configuring LAC Tunnel Selection Parameters

Configuring the Failover Between Preference Levels Method
Configuring the Failover Within a Preference Level Method
Configuring the Maximum Sessions per Tunnel
Configuring the Weighted Load Balancing Method

Configuring an L2TP LNS

LNS Configuration Prerequisites

Configuring an LNS

Creating an L2TP Destination Profile

Creating an L2TP Host Profile

Configuring the Maximum Number of LNS Sessions

Configuring the RADIUS Connect-Info Attribute on the LNS

Overriding LNS Out-of-Resource Result Codes 4 and 5

Overriding the Result Codes
Displaying the Current Override Setting

Selecting Service Modules for LNS Sessions Using MLPPP

Assigning Bundled Group Identifiers
Overriding All Endpoint Discriminators

Enabling Tunnel Switching

Creating Persistent Tunnels

Testing Tunnel Configuration

Managing L2TP Destinations, Tunnels, and Sessions

Configuring Disconnect Cause Information

Generating the Disconnect Cause AVP Globally
Generating the Disconnect Cause AVP with a Host Profile
Enabling RADIUS Accounting for Disconnect Cause
Displaying Disconnect Cause Statistics

Configuring the Receive Window Size

Configuring the Default Receive Window Size
Configuring the Receive Window Size on the LAC
Configuring the Receive Window Size on the LNS

Configuring Peer Resynchronization

Configuring Peer Resynchronization for L2TP Host Profiles and AAA Domain Map Tunnels
Configuring the Global L2TP Peer Resynchronization Method
Using RADIUS to Configure Peer Resynchronization

Configuring L2TP Tunnel Switch Profiles

Applying the L2TP Tunnel Switch Profile

Configuration Guidelines

Configuring L2TP AVPs for Relay

Configuration Tasks

Enabling Tunnel Switching on the Router
Configuring L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps
Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups
Applying Default L2TP Tunnel Switch Profiles
Applying L2TP Tunnel Switch Profiles by Using RADIUS

Configuring the Transmit Connect Speed Calculation Method

Transmit Connect Speed Calculation Methods

Static Layer 2
Dynamic Layer 2
QoS
Actual

Transmit Connect Speed Calculation Examples

Example 1: L2TP Session over ATM 1483 Interface
Example 2: L2TP Session over Ethernet VLAN Interface

Transmit Connect Speed Reporting Considerations

Session Termination for Dynamic Speed Timeout
Advisory Speed Precedence for VLANs over Bridged Ethernet

Using AAA Domain Maps to Configure the Transmit Connect Speed Calculation Method

Using AAA Tunnel Groups to Configure the Transmit Connect Speed Calculation Method

Using AAA Default Tunnel Parameters to Configure the Transmit Connect Speed Calculation Method

Using RADIUS to Configure the Transmit Connect Speed Calculation Method

PPP Accounting Statistics

Stateful Line Module Switchover for LNS Sessions

Configuring L2TP Dial-Out

L2TP Dial-Out Overview

Terms

Network Model for Dial-Out

Dial-Out Process

Dial-Out Operational States

Chassis
Virtual Router
Targets
Sessions

Outgoing Call Setup Details

Access-Request Message
Access-Accept Message
Outgoing Call
Mutual Authentication
Route Installation

L2TP Dial-Out Platform Considerations

L2TP Dial-Out References

Before You Configure L2TP Dial-Out

Configuring L2TP Dial-Out

Monitoring L2TP Dial-Out

L2TP Disconnect Cause Codes

L2TP Disconnect Cause Codes

Monitoring L2TP and L2TP Dial-Out

Monitoring the Mapping for User Domains and Virtual Routers with AAA
Monitoring Configured Tunnel Groups with AAA
Monitoring Configuration of Tunnel Parameters with AAA
Monitoring Global Configuration Status on E Series Routers
Monitoring Detailed Configuration Information for Specified Destinations
Monitoring Locked Out Destinations
Monitoring Configured Destination Profiles or Host Profiles
Monitoring Configured and Operational Status of all Destinations
Monitoring Statistics on the Cause of a Session Disconnection
Monitoring Detailed Configuration Information about Specified Sessions
Monitoring Configured and Operational Summary Status
Monitoring Configured Switch Profiles on Router
Monitoring Detailed Configuration Information about Specified Tunnels
Monitoring Configured and Operational Status of All Tunnels
Monitoring Chassis-wide Configuration for L2TP Dial-out
Monitoring Status of Dial-out Sessions
Monitoring Dial-out Targets within the Current VR Context
Monitoring Operational Status within the Current VR Context

Managing DHCP

DHCP Overview

DHCP Overview Information

Session and Resource Control Software

DHCP Platform Considerations

DHCP References

Configuring the DHCP Access Model

Configuring DHCP Proxy Clients

Logging DHCP Packet Information

Viewing and Deleting DHCP Client Bindings

DHCP Local Server Overview

Embedded DHCP Local Server Overview

DHCP Local Server and Client Configuration

Equal-Access Mode Overview

Local Pool Selection and Address Allocation
The Connection Process

Standalone Mode Overview

Local Pool Selection and Address Allocation
Server Management Table

DHCP Local Server Prerequisites

DHCP Local Server Configuration Tasks

Configuring DHCP Local Server

Configuring the DHCP Local Server

Basic Configuration of DHCP Local Server
Limiting the Number of IP Addresses Supplied by DHCP Local Server
Excluding IP Addresses from Address Pools
Configuring DHCP Local Server to Support Creation of Dynamic Subscriber Interfaces
Differentiating Between Clients with the Same Client ID or Hardware Address
Logging Out DHCP Local Server Subscribers
Clearing an IP DHCP Local Server Binding
Using SNMP Traps to Monitor DHCP Local Server Events
Using DHCP Local Server Event Logs

Configuring DHCP Local Address Pools

Basic Configuration of DHCP Local Address Pools
Linking Local Address Pools
Setting Grace Periods for Address Leases

Configuring AAA Authentication for DHCP Local Server Standalone Mode

Configuring the DHCPv6 Local Server

Deleting DHCPv6 Client Bindings

Configuring the Router to Work with the SRC Software

Configuring DHCP Relay

Configuring DHCP Relay and BOOTP Relay

Enabling DHCP Relay

Removing Access Routes from Routing Tables and NVS

Treating All Packets as Originating at Trusted Sources

Assigning the Giaddr to Source IP Address

Protecting Against Spoofed Giaddr and Relay Agent Option Values

Using the Broadcast Flag Setting to Control Transmission of DHCP Reply Packets

Interaction with Layer 2 Unicast Transmission Method

Preventing DHCP Relay from Installing Host Routes by Default

Configuration Example—Preventing Installation of Host Routes

Including Relay Agent Option Values in the PPPoE Remote Circuit ID

Using the Giaddr to Identify the Primary Interface for Dynamic Subscriber Interfaces

Configuring Layer 2 Unicast Transmission Method for Reply Packets to DHCP Clients

Using Option 60 Strings to Forward Client Traffic to Specific DHCP Servers

Configuration Example—Using DHCP Relay Option 60 to Specify Traffic Forwarding

Relaying DHCP Packets That Originate from a Cable Modem

Configuring Relay Agent Option 82 Information

Preventing Option 82 Information from Being Stripped from Trusted Client Packets

Configuring Relay Agent Information Option (Option 82) Suboption Values

Format of the JunosE Data Field in the Vendor-Specific Suboption for Option 82
Using the set dhcp relay agent sub-option Command to Enable Option 82 Suboption Support
Configuration Example—Using DHCP Relay Option 82 to Pass IEEE 802.1p Values to DHCP Servers
Using the set dhcp relay agent Command to Enable Option 82 Suboption Support

Rate of DHCP Client Packets Processed by DHCP Relay Overview

Manually Configuring the Maximum Rate of Client Packets Processed Per Second by DHCP Relay

Configuring the Rate of Client Packets Processed by DHCP Relay

Configuring DHCP Relay Proxy

Enabling DHCP Relay Proxy

Use the First Offer from a DHCP Server

Set a Timeout for DHCP Client Renewal Messages

Managing Host Routes

Selecting the DHCP Server Response
Behavior for Bound Clients and Address Renewals

Configuring the DHCP External Server Application

DHCP External Server Overview

Preservation of Dynamic Subscriber Interfaces with DHCP External Server Overview

DHCP External Server Identification of Clients with Duplicate MAC Addresses Overview

Configuration Guidelines for Using Duplicate MAC Mode
Restrictions for Using Duplicate MAC Mode to Manage Clients

DHCP External Server Configuration Requirements

Enabling and Disabling the DHCP External Server Application

Monitoring DHCP Traffic Between Remote Clients and DHCP Servers

Synchronizing the DHCP External Application and the Router

Configuring Interoperation with Ethernet DSLAMs

Configuring the DHCP External Server to Support the Creation of Dynamic Subscriber Interfaces

Configuring DHCP External Server to Control Preservation of Dynamic Subscriber Interfaces

Configuring Dynamic Subscriber Interfaces for Interoperation with DHCP Relay and DHCP Relay Proxy

Deleting Clients from a Virtual Router’s DHCP Binding Table

Configuring DHCP External Server to Uniquely Identify Clients with Duplicate MAC Addresses

Configuring DHCP External Server to Re-Authenticate Auto-Detected Dynamic Subscriber Interfaces

Monitoring and Troubleshooting DHCP

Setting Baselines for DHCP Statistics

Setting a Baseline for DHCP Relay and Relay Proxy
Setting a Baseline for DHCP Proxy Server Statistics
Setting a Baseline for DHCP External Server Statistics
Setting a Baseline for DHCP Local Server Statistics

Monitoring Addresses Excluded from DHCP Local Server Use

Monitoring DHCP Bindings

Monitoring DHCP Binding Information

Monitoring DHCP Binding Count Information

Monitoring DHCP Binding Host Information

Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address Bindings)

Monitoring DHCP Bindings (Displaying DHCP Bindings Based on Binding ID)

Monitoring DHCP Bindings (Local Server Binding Information)

Monitoring DHCP External Server Configuration Information

Monitoring DHCP External Server Statistics

Monitoring DHCP External Server Duplicate MAC Address Setting

Monitoring DHCP Local Address Pools

Monitoring DHCP Local Server Authentication Information

Monitoring DHCP Local Server Configuration

Monitoring DHCP Local Server Leases

Monitoring DHCP Local Server Statistics

Monitoring DHCP Option 60 Information

Monitoring DHCP Packet Capture Settings

Monitoring DHCP Relay Configuration Information

Monitoring DHCP Relay Proxy Statistics

Monitoring DHCP Relay Statistics

Monitoring DHCP Server and DHCP Relay Agent Statistics

Monitoring DHCP Server and Proxy Client Information

Monitoring DHCPv6 Local Server Binding Information

Monitoring DHCPv6 Local Server DNS Search Lists

Monitoring DHCPv6 Local Server DNS Servers

Monitoring DHCPv6 Local Server Prefix Lifetime

Monitoring DHCPv6 Local Server Statistics

Monitoring Duplicate MAC Addresses Use By DHCP Local Server Clients

Monitoring the Maximum Number of Available Leases

Monitoring Static IP Address and MAC Address Pairs Supplied by DHCP Local Server

Monitoring Status of DHCP Applications

Managing the Subscriber Environment

Configuring Subscriber Management

Subscriber Management Overview

Subscriber Management Platform Considerations

Subscriber Management Attributes

Dynamic IP Subscriber Interfaces

Subscriber Management Procedure

Configuring Subscriber Management with an External DHCP Server

Subscriber Management Commands

Subscriber Management Configuration Examples

Username with ATM Circuit Identifier and No Circuit Type
Username with VLAN Circuit Identifier and Circuit Type
Username with MAC Address

Monitoring Subscriber Management

Monitoring IP Service Profiles
Monitoring Active IP Subscribers Created by Subscriber Management

Configuring Subscriber Interfaces

Subscriber Interfaces Overview

Dynamic Interfaces and Dynamic Subscriber Interfaces

Relationship to Shared IP Interfaces

Relationship to Primary IP Interfaces

Ethernet Interfaces and VLANs

Moving Interfaces

Preventing IP Spoofing

Routing Protocols

Policies and QoS

Applications

Directing Traffic Toward Special Local Content
Differentiating Traffic for VPNs

Subscriber Interfaces Platform Considerations

Interface Specifiers

Subscriber Interfaces References

Dynamic Creation of Subscriber Interfaces

DHCP Servers

DHCP Local Server and Address Allocation
DHCP External Server and Address Allocation
DHCP Relay Configuration
Supported Configurations

Packet Detection

Designating Traffic for the Primary IP Interface

Using Framed Routes

Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces

How MAC Address Validation State Inheritance Works
Configuration of MAC Address Validation State Inheritance
Verification of MAC Address Validation State Inheritance

Configuring Static Subscriber Interfaces

Using a Destination Address to Demultiplex Traffic
Using a Source Address to Demultiplex Traffic

Configuring Dynamic Subscriber Interfaces

Configuring Dynamic Subscriber Interfaces over Ethernet
Configuring Dynamic Subscriber Interfaces over VLANs
Configuring Dynamic Subscriber Interfaces over Bridged Ethernet
Configuring Dynamic Subscriber Interfaces over GRE Tunnels
Dynamic Subscriber Interface Configuration Example

Monitoring Subscriber Interfaces

Monitoring Subscriber Interfaces Overview
Monitoring Subscriber Interfaces
Monitoring Active IP Subscribers Created by Subscriber Management

Managing Subscriber Services

Configuring Service Manager

Service Manager Overview

Service Manager Terms and Acronyms

Service Manager Platform Considerations

Service Manager References

Service Manager Configuration Tasks

Service Definitions

Creating Service Definitions
Managing Your Service Definitions

Referencing Policies in Service Definitions

Referencing QoS Configurations in Service Definitions

Specifying QoS Profiles in a Service Definition

Configuring a QoS Profile for Service Manager
Specifying QoS Profiles in a Service Definition

Specifying QoS Parameter Instances in a Service Definition

Creating a Parameter Instance in a Profile

Specifying QoS Parameter Instances in a Service Definition

Specifying the Add and Initial-Value Keywords

Modifying QoS Configurations with Service Manager

Modifying Parameter Instances

Modifying QoS Configurations in a Single Service Manager Event

Modifying QoS Configurations Using Other Sources

Service Manager
RADIUS
SNMP, the SRC Software, and the CLI

Removing QoS Configurations Referenced by Service Manager

QoS for Service Manager Considerations

RADIUS or Service Manager
Interoperability with Other Service Components
QoS Statistics
Ranges

Configuring the Service Manager License

Managing and Activating Service Sessions

Using RADIUS to Manage Subscriber Service Sessions

Using RADIUS to Activate Subscriber Service Sessions

Service Manager RADIUS Attributes

Using Tags with RADIUS Attributes

Using RADIUS to Deactivate Service Sessions

Setting Thresholds
Using the Deactivate-Service Attribute

Using Mutex Groups to Activate and Deactivate Subscriber Services

Activating and Deactivating Multiple Services
Configuring a Mutex Service

Combined and Independent IPv4 and IPv6 Services in a Dual Stack Overview

Activation and Deactivation of IPv4 and IPv6 Services in a Dual Stack

Independent IPv4 and IPv6 Services in a Dual Stack
Combined IPv4 and IPv6 Service in a Dual Stack
Performance Impact on the Router and Compatibility with Previous Releases for an IPv4 and IPv6 Dual Stack

Configuring RADIUS Accounting for Service Manager

Configuring Service Interim Accounting
Service Interim Accounting for IPv4 and IPv6 Services in a Dual Stack Overview

Using the CLI to Manage Subscriber Service Sessions

Using the CLI to Activate Subscriber Service Sessions

Preprovisioning Services

Using Service Session Profiles

Using the CLI to Deactivate Subscriber Service Sessions

Gracefully Deactivating Subscriber Service Sessions
Forcing Immediate Deactivation of Subscriber Service Sessions
Using Service Session Profiles to Deactivate Service Sessions

Configuring Service Manager Statistics

Setting Up the Service Definition File for Statistics Collection
Enabling Statistics Collection with RADIUS
Enabling Statistics Collection with the CLI
External Parent Group Statistics Collection Setup

Service Manager Performance Considerations

Service Definition Examples

Tiered Service Example

Video-on-Demand Service Definition Example

Voice-over-IP Service Definition Example

Guided Entrance Service Example

Guided Entrance Service Definition Example

Using CoA Messages with Guided Entrance Services

Configuring the HTTP Local Server to Support Guided Entrance

HTTP Local Server Commands

Combined IPv4 and IPv6 Service in a Dual Stack Example

Monitoring Service Manager

Setting a Baseline for HTTP Local Server Statistics
Monitoring the Connections to the HTTP Local Server
Monitoring the Configuration of the HTTP Local Server
Monitoring Statistics for Connections to the HTTP Local Server
Monitoring Profiles for the HTTP Local Server
Monitoring the Default Interval for Interim Accounting of Services
Monitoring the Status of the Service Manager License
Monitoring Profiles for Service Manager
Monitoring IPv4 and IPv6 Interfaces for Service Manager
Monitoring Service Definitions
Monitoring Service Session Profiles
Monitoring Active Owner Sessions with Service Manager
Monitoring Active Subscriber Sessions with Service Manager
Monitoring the Number of Active Subscriber and Service Sessions with Service Manager

Index

Index

Table of Contents