JunosE 13.2.x Broadband Access Configuration Guide
Copyright and Trademark Information- Table of Contents
- List of Figures
- List of Tables
-
About the Documentation - Managing Remote Access
- Remote Access Overview
- Remote Access Overview
- Remote Access Platform Considerations
- Remote Access References
- Overview of Mapping a User Domain to a Virtual Router
- Domain Name and Realm Name Overview
- Example: Domain Name and Realm Name
- Example: Stripping Domain Name Per Virtual Router for RADIUS
Server Authentication
- Single Name Specification for Users from a Domain Overview
- RADIUS Authentication and Accounting Servers Configuration
Overview
- SNMP Traps and System Log Messages Overview
- Local Authentication Servers Configuration Overview
- Tunnel Subscriber Authentication Configuration Overview
- Name Server Addresses Configuration Overview
- Local Address Servers Configuration Overview
- DHCP Features
- Domain Name Aliases Overview
- AAA Profile Configuration Overview
- RADIUS Route-Download Server for Route Distribution Overview
- AAA Logical Line Identifier for Subscriber Tracking Overview
- RADIUS Attributes in Preauthentication Request
- Considerations for Using the LLID
- VSAs for Dynamic IP Interfaces Overview
- Overview of Mapping Application Terminate Reasons and RADIUS
Terminate Codes
- Timeout Configuration Overview
- Standard RADIUS IPv6 Attributes for IPv6 Neighbor Discovery
Router Advertisements and DHCPv6 Prefix Delegation Configuration
- Maximum Number of IPv6 Prefixes Assigned to Clients Using Only
the DHCPv6 Local Server
- Maximum Number of IPv6 Prefixes Assigned to Clients Using Both
DHPCv6 Local Server and Neighbor Discovery Router Advertisements
- Duplicate IPv6 Prefix Check Overview
- Duplicate IPv6 Prefix Detection in the AAA User Profile Database
Overview
- Guidelines for Duplicate Address Verification
- Propagation of LAG Subscriber Information to AAA and RADIUS
- SRC Client Configuration Overview
- SRC Client and COPS Terminology
- Retrieval of DSL Line Rate Information from Access Nodes Overview
- DHCPv6 Local Address Pools for Allocation of IPv6 Prefixes
Overview
- Example: Delegating the DHCPv6 Prefix
- IPv6 Prefix Allocation Using Neighbor Discovery Router Advertisements
from IPv6 Address Pools Overview
- Allocation of Neighbor Discovery Prefixes for IPv6 Subscribers
over PPP Links
- Order of Preference in Determining the Local Address Pool for
Allocating Prefixes for Neighbor Discovery Router Advertisements
- Order of Preference in Assigning Prefixes when Neighbor Discovery
Router Advertisements are Configured on an Interface
- Guidelines for Allocating Neighbor Discovery Prefixes Using
IPv6 Address Pools
-
- Configuring Remote Access
- Remote Access Configuration Tasks
- Configuring a B-RAS License
- Configuring AAA Duplicate Accounting
- Configuring AAA Broadcast Accounting
- Overriding AAA Accounting NAS Information
- Collecting Accounting Statistics
- Configuring RADIUS AAA Servers
- Configuring SNMP Traps
- Creating the AAA Local Authentication Environment
- Creating AAA Local User Databases
- Adding AAA User Entries to Local User Databases
- Adding AAA User Entries to Default Local User Databases
- Configuring AAA User Entries in Local User Databases
- Assigning a Local User Database to a Virtual Router
- Enabling Local Authentication on the Virtual Router
- Example: Configuring AAA Local Authentication
- Configuring DNS Primary and Secondary NMS
- Configuring WINS Primary and Secondary NMS
- Configuring a Local Address Server
- Creating an IP Interface
- Controlling Access to Domain Names
- Example: Associating all Subscribers of a PPP Interface with
a Specific Domain Name
- Example: Associating Multiple Domain Names with a Specific
Domain Name
- Configuring an AAA Per-Profile Attribute List
- Configuring the NAS-Port-Type Attribute Manually
- Configuring a Service Description for the AAA Profile
- Configuring the Route-Download Server to Download Routes
- Configuring the Router to Obtain the LLID for a Subscriber
- Troubleshooting Subscriber Preauthentication
- Configuring Custom Mappings for PPP Terminate Reasons
- Configuring Duplicate IPv6 Prefix Check
- Configuring Detection of Duplicate IPv6 Prefixes in the AAA
User Profile Database
- Configuring the SRC Client
- Configuring the DHCPv6 Local Address Pools
- Example: Limiting the Number of Prefixes Used by DHCPv6 Clients
- Example: Using DHCPv6 Local Address Pools for Prefix Delegation
over non-PPP Links
- Configuring IPv6 Neighbor Discovery Local Address Pools
- Monitoring and Troubleshooting Remote Access
- Setting Baselines for Remote Access
- How to Monitor PPP Interfaces
- Monitoring the AAA Accounting Configuration
- Monitoring AAA Accounting Default
- Monitoring the AAA Accounting Interval
- Monitoring AAA Specific Virtual Router Groups
- Monitoring the Default AAA Authentication Method List
- Monitoring AAA Domain Name Stripping for a Domain Per Virtual
Router
- Monitoring Mapping Between User Domains and Virtual Routers
- Monitoring Tunnel Subscriber Authentication
- Monitoring Routing Table Address Lookup
- Monitoring the AAA Model
- Monitoring IP Addresses of Primary and Secondary DNS and WINS
Name Servers
- Monitoring AAA Profile Configuration
- Monitoring Statistics about the RADIUS Route-Download Server
- Monitoring Routes Downloaded by the RADIUS Route-Download Server
- Monitoring Chassis-Wide Routes Downloaded by the RADIUS Route-Download
Server
- Monitoring AAA Statistics
- Monitoring the Number of Active Subscribers Per Port
- Monitoring the Maximum Number of Active Subscribers Per Virtual
Router
- Monitoring Session Timeouts
- Monitoring Interim Accounting for Users on the Virtual Router
- Monitoring Virtual Router Groups Configured for AAA Broadcast
Accounting
- Monitoring Configuration Information for AAA Local Authentication
- Monitoring AAA Server Attributes
- Monitoring the COPS Layer Over SRC Connection
- Monitoring Statistics About the COPS Layer
- Monitoring Local Address Pool Aliases
- Monitoring Local Address Pools
- Monitoring Local Address Pool Statistics
- Monitoring Shared Local Address Pools
- Monitoring the Routing Table
- Monitoring the B-RAS License
- Monitoring the RADIUS Server Algorithm
- Monitoring RADIUS Override Settings
- Monitoring the RADIUS Rollover Configuration
- Monitoring RADIUS Server Information
- Monitoring RADIUS Services Statistics
- Monitoring RADIUS SNMP Traps
- Monitoring RADIUS Accounting for L2TP Tunnels
- Monitoring RADIUS UDP Checksums
- Monitoring RADIUS Server IP Addresses
- Monitoring the RADIUS Attribute Used for IPv6 Neighbor Discovery
Router Advertisements
- Monitoring the RADIUS Attribute Used for DHCPv6 Prefix Delegation
- Monitoring Duplicate IPv6 Prefixes
- Monitoring Duplicate IPv6 Prefixes in the AAA User Profile
Database
- Monitoring SRC Client Connection Status
- Monitoring SRC Client Connection Statistics
- Monitoring the SRC Client Version Number
- Monitoring the SRC Option
- Monitoring Subscriber Information
- Monitoring Application Terminate Reason Mappings
- Monitoring IPv6 Local Pools for DHCP Prefix Delegation By All
Configured Pools
- Monitoring IPv6 Local Pools for DHCP Prefix Delegation By Pool
Name
- Monitoring IPv6 Local Pool Statistics for DHCP Prefix Delegation
- Monitoring IPv6 Local Pools for Neighbor Discovery Router Advertisements
for all Configured Pools
- Monitoring IPv6 Local Pools for Neighbor Discovery Router Advertisements
by Pool Name
- Monitoring IPv6 Local Pool Statistics for Neighbor Discovery
Router Advertisements Allocation of Prefixes
-
-
- Managing RADIUS and TACACS+
- Configuring RADIUS Attributes
- RADIUS Overview
- RADIUS Platform Considerations
- RADIUS References
- Subscriber AAA Access Messages Overview
- RADIUS IETF Attributes Supported for Subscriber AAA Access
Messages
- Juniper Networks VSAs Supported for Subscriber AAA Access Messages
- Processing DNS Addresses from Microsoft RADIUS VSAs for PPP
Clients During IPCP
- Subscriber AAA Accounting Messages Overview
- RADIUS IETF Attributes Supported for Subscriber AAA Accounting
Messages
- Juniper Networks VSAs Supported for Subscriber AAA Accounting
Messages
- RADIUS IETF Attributes Supported for AAA Tunnel Accounting
Messages
- AAA Access Messages During IPCP Negotiations for Dual-Stack
Subscribers
- AAA Accounting Messages During IPCP Negotiations for Dual-Stack
Subscribers
- Interim-Acct Messages When an IPv4 Address is Assigned
- Interim-Acct Messages When an IPv4 Address is Not Assigned
- Interim-Acct Messages During a Successful IPCP Renegotiation
for IPv4 Addresses
- Interim-Acct Messages During a Failed IPCP Renegotiation for
IPv4 Addresses
- Interim-Acct Messages When an IPv4 Address is Released
- DSL Forum VSAs in AAA Access and Accounting Messages Overview
- DSL Forum VSAs Supported for AAA Access and Accounting Messages
- RADIUS Attributes Supported for CLI AAA Messages
- CLI Commands Used to Modify RADIUS Attributes
- CLI Commands Used to Configure RADIUS IETF Attributes
- CLI Commands Used to Configure Juniper Networks VSAs
- CLI Commands Used to Include ANCP-Related Juniper Networks
VSAs in Access and Accounting Messages
- CLI Commands Used to Include DSL Forum VSAs in Access and Accounting
Messages
- CLI Commands Used to Include or Exclude Attributes in RADIUS
Messages
- CLI Commands Used to Ignore Attributes when Receiving Access-Accept
Messages
- RADIUS Per-Profile Attribute List Configuration Overview
- Example: Configuring RADIUS-Specific Attributes
-
- Configuring RADIUS Dynamic-Request Server
- RADIUS Dynamic-Request Server Overview
- RADIUS Dynamic-Request Server Platform Considerations
- RADIUS Dynamic-Request Server References
- Understanding RADIUS-Initiated Disconnect
- Configuring RADIUS-Initiated Disconnect
- Understanding RADIUS-Initiated Change of Authorization
- Configuring RADIUS-Initiated Change of Authorization
- Configuring RADIUS Relay Server
- RADIUS Attribute Descriptions
- Application Terminate Reasons
- Monitoring RADIUS
- Monitoring Override Settings of RADIUS IETF Attributes
- Monitoring the NAS-Port-Format RADIUS Attribute
- Monitoring the Calling-Station-Id RADIUS Attribute
- Monitoring the NAS-Identifier RADIUS Attribute
- Monitoring the Format of the Remote-Circuit-ID for RADIUS
- Monitoring the Delimiter Character in the Remote-Circuit-ID
for RADIUS
- Monitoring the Acct-Session-Id RADIUS Attribute
- Monitoring the DSL-Port-Type RADIUS Attribute
- Monitoring the Connect-Info RADIUS Attribute
- Monitoring the NAS-Port-ID RADIUS Attribute
- Monitoring Included RADIUS Attributes
- Monitoring Ignored RADIUS Attributes
- Setting the Baseline for RADIUS Dynamic-Request Server Statistics
- Monitoring RADIUS Dynamic-Request Server Statistics
- Monitoring the Configuration of the RADIUS Dynamic-Request
Server
- Setting a Baseline for RADIUS Relay Statistics
- Monitoring RADIUS Relay Server Statistics
- Monitoring the Configuration of the RADIUS Relay Server
- Monitoring the Status of RADIUS Relay UDP Checksums
- Monitoring the Status of ICR Partition Accounting
- Configuring TACACS+
- Monitoring TACACS+
-
- Managing L2TP
- L2TP Overview
- Configuring an L2TP LAC
- LAC Configuration Prerequisites
- Modifying L2TP LAC Default Settings for Managing Destinations,
Tunnels, and Sessions
- Generating UDP Checksums in Packets to L2TP Peers
- Specifying a Destruct Timeout for L2TP Tunnels and Sessions
- Preventing Creation of New Destinations, Tunnels, and Sessions
- Shutting Down Destinations, Tunnels, and Sessions
- Specifying the Number of Retransmission Attempts
- Configuring Calling Number AVP Formats
- Mapping a User Domain Name to an L2TP Tunnel Overview
- Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel
Mode
- Mapping User Domain Names to L2TP Tunnels from Tunnel Group
Tunnel Mode
- Transmission of the Subscriber Access Interface Speed to LNS
Using the RX Connect-Speed AVP
- Configuring the RX Speed on the LAC
- Managing the L2TP Destination Lockout Process
- Managing Address Changes Received from Remote Endpoints
- Configuring LAC Tunnel Selection Parameters
- Configuring an L2TP LNS
- LNS Configuration Prerequisites
- Configuring an LNS
- Creating an L2TP Destination Profile
- Creating an L2TP Host Profile
- Configuring the Maximum Number of LNS Sessions
- Configuring Groups for LNS Sessions
- Configuring the RADIUS Connect-Info Attribute on the LNS
- Overriding LNS Out-of-Resource Result Codes 4 and 5
- Selecting Service Modules for LNS Sessions Using MLPPP
- Enabling Tunnel Switching
- Creating Persistent Tunnels
- Testing Tunnel Configuration
- Managing L2TP Destinations, Tunnels, and Sessions
- Configuring Disconnect Cause Information
- Configuring the Receive Window Size
- Configuring Peer Resynchronization
- Configuring L2TP Tunnel Switch Profiles
- Applying the L2TP Tunnel Switch Profile
- Configuration Guidelines
- Configuring L2TP AVPs for Relay
- Configuration Tasks
- Enabling Tunnel Switching on the Router
- Configuring L2TP Tunnel Switch Profiles
- Applying L2TP Tunnel Switch Profiles by Using AAA Domain Maps
- Applying L2TP Tunnel Switch Profiles by Using AAA Tunnel Groups
- Applying Default L2TP Tunnel Switch Profiles
- Applying L2TP Tunnel Switch Profiles by Using RADIUS
- Configuring the Transmit Connect Speed Calculation Method
- Transmit Connect Speed Calculation Methods
- Transmit Connect Speed Calculation Examples
- Transmit Connect Speed Reporting Considerations
- Using AAA Domain Maps to Configure the Transmit Connect Speed
Calculation Method
- Using AAA Tunnel Groups to Configure the Transmit Connect Speed
Calculation Method
- Using AAA Default Tunnel Parameters to Configure the Transmit
Connect Speed Calculation Method
- Using RADIUS to Configure the Transmit Connect Speed Calculation
Method
-
- PPP Accounting Statistics
- Stateful Line Module Switchover for LNS Sessions
- Configuring L2TP Dial-Out
- L2TP Dial-Out Overview
- L2TP Dial-Out Terms
- L2TP Dial-Out Platform Considerations
- L2TP Dial-Out References
- L2TP Dial-Out Network Model
- L2TP Dial-Out Process
- L2TP Dial-Out Operational States
- L2TP Dial-Out Outgoing Call Setup Details
- Creating a Profile Before Configuring L2TP Dial-Out
- Configuring L2TP Dial-Out
- Creating an L2TP Dial-Out Session
- Specifying the Maximum Timeout Period for Establishing an L2TP
Dial-Out Session
- Specifying the Duration for an L2TP Dial-Out Session to Remain
in Dormant State
- Specifying the Maximum Triggers to Buffer for an L2TP Dial-Out
Session
- Deleting an L2TP Dial-Out Session
- Resetting an L2TP Dial-Out Session
- L2TP Disconnect Cause Codes
- Monitoring L2TP and L2TP Dial-Out
- Monitoring the Mapping for User Domains and Virtual Routers
with AAA
- Monitoring Configured Tunnel Groups with AAA
- Monitoring Configuration of Tunnel Parameters with AAA
- Monitoring Global Configuration Status on E Series Routers
- Monitoring Detailed Configuration Information for Specified
Destinations
- Monitoring Locked Out Destinations
- Monitoring Configured Destination Profiles or Host Profiles
- Monitoring Configured and Operational Status of all Destinations
- Monitoring Statistics on the Cause of a Session Disconnection
- Monitoring Detailed Configuration Information about Specified
Sessions
- Monitoring Configured and Operational Summary Status
- Monitoring Configured Switch Profiles on Router
- Monitoring Detailed Configuration Information about Specified
Tunnels
- Monitoring Configured and Operational Status of All Tunnels
- Monitoring Chassis-wide Configuration for L2TP Dial-out
- Monitoring Status of Dial-out Sessions
- Monitoring Dial-out Targets within the Current VR Context
- Monitoring Operational Status within the Current VR Context
-
- Managing DHCP
- DHCP Overview
- DHCP Local Server Overview
- Embedded DHCP Local Server Overview
- Equal-Access Mode Overview
- Standalone Mode Overview
- DHCP Local Server Prerequisites
- DHCP Local Server Configuration Tasks
- DHCP Unique ID for Clients and Servers Overview
- Authentication and Accounting of IPv6 Subscribers Using the
DHCPv6 Local Server Overview
- Interoperation of Authentication of IPv6 Clients and Display
of Active Subscriber Information
-
- Configuring DHCP Local Server
- Configuring the DHCP Local Server
- Basic Configuration of DHCP Local Server
- Limiting the Number of IP Addresses Supplied by DHCP Local
Server
- Excluding IP Addresses from Address Pools
- Configuring DHCP Local Server to Support Creation of Dynamic
Subscriber Interfaces
- Differentiating Between Clients with the Same Client ID or
Hardware Address
- Logging Out DHCP Local Server Subscribers
- Clearing an IP DHCP Local Server Binding
- Using SNMP Traps to Monitor DHCP Local Server Events
- Using DHCP Local Server Event Logs
- Configuring DHCP Local Address Pools
- Overview of Sending RADIUS Attributes to DHCP Subscribers
- Configuring AAA Authentication for DHCP Local Server Standalone
Mode
- Configuring AAA Authentication for DHCPv6 Local Server Standalone
Mode
- Configuring the DHCPv6 Local Server
- Configuring the Type of DHCP Unique ID for DHCPv6 Local Servers
- Deleting DHCPv6 Client Bindings
- Configuring the Router to Work with the SRC Software
-
- Configuring DHCP Relay
- DHCP Relay and BOOTP Relay Overview
- Configuring DHCP Relay Settings
- Enabling DHCP Relay
- Removing Access Routes from Routing Tables and NVS
- Treating All Packets as Originating at Trusted Sources
- Assigning the Giaddr to Source IP Address
- Protecting Against Spoofed Giaddr and Relay Agent Option Values
- Using the Giaddr to Identify the Primary Interface for Dynamic
Subscriber Interfaces
- Using the Broadcast Flag Setting to Control Transmission of
DHCP Reply Packets
- Interaction of DHCP Relay Broadcast Flag with the Layer 2 Unicast
Transmission Method
- Preventing DHCP Relay from Installing Host Routes by Default
- Example: Preventing Installation of Host Routes
- Including Relay Agent Option Values in the PPPoE Remote Circuit
ID
- Configuring the Layer 2 Unicast Transmission Method for Reply
Packets to DHCP Clients
- Using Option 60 Strings to Forward Client Traffic to Specific
DHCP Servers
- Configuring the DHCP Relay Option 60 Attribute for Traffic
Forwarding
- Relaying DHCP Packets That Originate from a Cable Modem
- DHCP Relay Agent Information Option (Option 82) Suboption Values
Overview
- Configuring the DHCP Relay Agent Option 82 Settings
- Using the set dhcp relay agent sub-option Command to Enable
Option 82 Suboption Support
- Using the set dhcp relay agent Command to Enable Option 82
Suboption Support
- Example: Using DHCP Relay Option 82 to Pass IEEE 802.1p Values
to DHCP Servers
- Rate of DHCP Client Packets Processed by DHCP Relay Overview
- Configuring the Rate of Client Packets Processed by DHCP Relay
- Configuring DHCP Relay Proxy
- Managing Host Routes Using DHCP Relay Proxy
- Configuring the DHCP External Server Application
- DHCP External Server Overview
- Preservation of Dynamic Subscriber Interfaces with DHCP External
Server Overview
- DHCP External Server Identification of Clients with Duplicate
MAC Addresses Overview
- DHCP External Server Configuration Requirements
- Enabling and Disabling the DHCP External Server Application
- Monitoring DHCP Traffic Between Remote Clients and DHCP Servers
- Synchronizing the DHCP External Application and the Router
- Configuring Interoperation with Ethernet DSLAMs
- Configuring the DHCP External Server to Support the Creation
of Dynamic Subscriber Interfaces
- Configuring DHCP External Server to Control Preservation of
Dynamic Subscriber Interfaces
- Configuring Dynamic Subscriber Interfaces for Interoperation
with DHCP Relay and DHCP Relay Proxy
- Deleting Clients from a Virtual Router’s DHCP Binding
Table
- Configuring DHCP External Server to Uniquely Identify Clients
with Duplicate MAC Addresses
- Configuring DHCP External Server to Re-Authenticate Auto-Detected
Dynamic Subscriber Interfaces
- Monitoring and Troubleshooting DHCP
- Setting Baselines for DHCP Statistics
- Monitoring Addresses Excluded from DHCP Local Server Use
- Monitoring DHCP Bindings
- Monitoring DHCP Binding Information
- Monitoring DHCP Binding Count Information
- Monitoring DHCP Binding Host Information
- Monitoring DHCP Bindings (Displaying IP Address-to-MAC Address
Bindings)
- Monitoring DHCP Bindings (Displaying DHCP Bindings Based on
Binding ID)
- Monitoring DHCP Bindings (Local Server Binding Information)
- Monitoring DHCP External Server Configuration Information
- Monitoring DHCP External Server Statistics
- Monitoring DHCP External Server Duplicate MAC Address Setting
- Monitoring DHCP Local Address Pools
- Monitoring DHCP Local Server Authentication Information
- Monitoring DHCP Local Server Configuration
- Monitoring DHCP Local Server Leases
- Monitoring DHCP Local Server Statistics
- Monitoring DHCP Option 60 Information
- Monitoring DHCP Packet Capture Settings
- Monitoring DHCP Relay Configuration Information
- Monitoring DHCP Relay Proxy Statistics
- Monitoring DHCP Relay Statistics
- Monitoring DHCP Server and DHCP Relay Agent Statistics
- Monitoring DHCP Server and Proxy Client Information
- Monitoring DHCPv6 Local Server Binding Information
- Monitoring DHCPv6 Local Server DNS Search Lists
- Monitoring DHCPv6 Local Server DNS Servers
- Monitoring DHCPv6 Local Server Prefix Lifetime
- Monitoring DHCPv6 Local Server Statistics
- Monitoring DHCPv6 Local Server Authentication Information
- Monitoring Duplicate MAC Addresses Use By DHCP Local Server
Clients
- Monitoring the Maximum Number of Available Leases
- Monitoring Static IP Address and MAC Address Pairs Supplied
by DHCP Local Server
- Monitoring Status of DHCP Applications
- Monitoring DHCP Proxy Client Bindings
-
-
- Managing the Subscriber Environment
- Configuring Subscriber Management
- Monitoring Subscriber Management
- Configuring Subscriber Interfaces
- Subscriber Interfaces Overview
- Dynamic Interfaces and Dynamic Subscriber Interfaces Overview
- Subscriber Interfaces Platform Considerations
- Subscriber Interfaces References
- Characteristics of Subscriber Interfaces
- Applications for Subscriber Interfaces
- Dynamic Creation of Subscriber Interfaces Overview
- Dynamic Subscriber Interfaces Using DHCP Events Overview
- Dynamic Subscriber Interfaces Using Packet Detection Overview
- Inheritance of MAC Address Validation State for Dynamic Subscriber
Interfaces Overview
- How MAC Address Validation State Inheritance Works
- Example: Configuring Static Subscriber Interfaces
- Example: Configuring Dynamic Subscriber Interfaces
- Example: Configuring Dynamic Subscriber Interfaces Using Loopback
Interfaces
- Monitoring Subscriber Interfaces
-
- Managing Subscriber Services
- Configuring Service Manager
- Service Manager Overview
- Service Manager Terms and Acronyms
- Service Manager Platform Considerations
- Service Manager References
- Configuring Service Manager
- Service Definitions Overview
- Creating Service Definitions
- Managing Your Service Definitions
- Overview of Referencing Policies in Service Definitions
- Referencing QoS Configurations in Service Definitions
- Specifying QoS Profiles in Service Definitions
- Specifying QoS Parameter Instances in a Service Definition
- Modifying QoS Configurations with Service Manager
- Removing QoS Configurations Referenced by Service Manager
- QoS for Service Manager Considerations
- Configuring the Service Manager License
- Overview of Managing and Activating Service Sessions
- Overview of Managing Subscriber Service Sessions Using RADIUS
- Activating Subscriber Service Sessions Using RADIUS
- Understanding Service Manager RADIUS Attributes
- Deactivating Service Sessions Using RADIUS
- Overview of Activating and Deactivating Subscriber Services
Using Mutex Groups
- Activating and Deactivating Multiple Services
- Configuring a Mutex Service
- Combined and Independent IPv4 and IPv6 Services in a Dual Stack
Overview
- Activation and Deactivation of IPv4 and IPv6 Services in a
Dual Stack
- Understanding RADIUS Accounting for Service Manager
- Service Interim Accounting Overview
- Configuring Service Interim Accounting
- Service Interim Accounting for IPv4 and IPv6 Services in a
Dual Stack Overview
- Overview of Managing Subscriber Service Sessions Using the
CLI
- Overview of Activating Subscriber Service Sessions Using the
CLI
- Activating Subscriber Sessions Using the CLI
- Preprovisioning Service Sessions
- Service Session Profiles Overview
- Working with Service Session Profiles
- Overview of Deactivating Subscriber Service Sessions Using
the CLI
- Gracefully Deactivating Subscriber Service Sessions
- Forcing Immediate Deactivation of Subscriber Service Sessions
- Using Service Session Profiles to Deactivate Service Sessions
- Configuring Service Manager Statistics
- Service Manager Performance Considerations
- Example: Tiered Service Definition
- Example: Video-on-Demand Service Definition
- Example: Voice-over-IP Service Definition
- Guided Entrance Service Overview
- Example: Guided Entrance Service Definition
- Using CoA Messages with Guided Entrance Services
- Configuring the HTTP Local Server to Support Guided Entrance
- Redirection of Subscriber Sessions When HTTP Local Server is
Disabled or Not Configured
- Example: Combined IPv4 and IPv6 Service in a Dual Stack Service
Definition
- Preservation of the Original URL During Redirection of Subscriber
Sessions
- Configuring the Preservation of the Original URL During Redirection
of Subscriber Sessions
- Monitoring Service Manager
- Setting a Baseline for HTTP Local Server Statistics
- Monitoring the Connections to the HTTP Local Server
- Monitoring the Configuration of the HTTP Local Server
- Monitoring Statistics for Connections to the HTTP Local Server
- Monitoring Profiles for the HTTP Local Server
- Monitoring the Default Interval for Interim Accounting of Services
- Monitoring the Status of the Service Manager License
- Monitoring Profiles for Service Manager
- Monitoring IPv4 and IPv6 Interfaces for Service Manager
- Monitoring Service Definitions
- Monitoring Service Session Profiles
- Monitoring Active Owner Sessions with Service Manager
- Monitoring Active Subscriber Sessions with Service Manager
- Monitoring the Number of Active Subscriber and Service Sessions
with Service Manager
-
- Index
Symbols
- 10-Gigabit Ethernet interfaces
A
- AAA (authentication, authorization, accounting)
- DSL Forum VSAs 1, 2
- EAP authentication
- failure, notifying RADIUS of
- L2TP tunnel switch profiles, applying 1, 2
- overview 1, 2
- services
- accounting
- and TACACS+
- authentication 1, 2
- authorization
- overview
- AAA authentication
- scenarios in which show subscribers command output varies
- aaa commands 1, See also show aaa commands
- aaa accounting acct-stop on-aaa-failure
- aaa accounting acct-stop on-access-deny
- aaa accounting broadcast
- aaa accounting commands
- aaa accounting default
- aaa accounting duplication
- aaa accounting exec
- aaa accounting immediate-update
- aaa accounting interval
- aaa accounting statistics
- aaa accounting suppress null-username
- aaa accounting vr-group
- aaa authentication default
- aaa authentication enable default 1, 2
- aaa delimiter
- aaa dhcpv6-delegated-prefix delegated-ipv6-prefix
- aaa dns primary 1, 2
- aaa dns secondary 1, 2
- aaa domain-map 1, 2, 3, 4
- aaa intf-desc-format include
- aaa ipv6-nd-ra-prefix framed-ipv6-prefix
- aaa local database
- aaa local select database
- aaa local username
- aaa new-model
- aaa parse-direction
- aaa parse-order
- aaa profile 1, 2
- aaa route-download
- aaa route-download now
- aaa route-download suspend
- aaa service accounting interval
- aaa subscriber limit per-port
- aaa subscriber limit per-vr
- aaa timeout
- aaa tunnel assignment-id-format
- aaa tunnel calling-number-format
- aaa tunnel calling-number-format fallback
- aaa tunnel client-name
- aaa tunnel ignore
- aaa tunnel password
- aaa tunnel switch-profile
- aaa tunnel tx-connect-speed-method
- aaa tunnel-group
- aaa user accounting interval
- aaa wins primary
- aaa wins secondary
- AAA default tunnel parameters
- AAA domain maps
- AAA LLID (logical line identifier) 1
- configuration steps
- how it works
- monitoring 1, 2
- preauthentication considerations
- RADIUS attributes in preauthentication request 1, 2
- troubleshooting
- using to track subscribers
- AAA logical line identifier (LLID). See AAA LLID
- AAA profile commands
- AAA profiles 1
- AAA tunnel groups
- Access-Accept messages 1
- preference order
- with Framed-IPv6-Prefix attribute
- with IPv6-NdRa-Prefix attribute
- Access-Challenge messages 1, 2
- Access-Reject messages 1, 2
- Access-Request messages 1
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- accounting
- accounting statistics
- Acct-Authentic (RADIUS attribute 45)
- Acct-Delay-Time (RADIUS attribute 41)
- Acct-Input-Gigapackets (RADIUS attribute 26-35)
- Acct-Input-Gigawords (RADIUS attribute 52)
- Acct-Link-Count (RADIUS attribute 51)
- Acct-Multi-Session-Id (RADIUS attribute 50)
- Acct-Off messages
- Acct-On messages
- Acct-Output-Gigapackets (RADIUS attribute 26-36)
- Acct-Session-Id (RADIUS attribute 44) 1, 2, 3
- Acct-Start messages 1
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- Acct-Stop messages 1
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- Acct-Terminate-Cause (RADIUS attribute 49)
- Acct-Tunnel-Connection (RADIUS attribute 68)
- Activate-Service (RADIUS attribute 26-65)
- active subscriber details, viewing
- with AAA authentication configured on default router
- with RADIUS authentication configured on default router
- address command, L2TP 1, 2
- address pool
- agent circuit ID (suboption 1)
- agent remote ID (suboption 2)
- agent-circuit-id
- agent-remote-id
- allow command
- Ascend-Num-In-Multilink (RADIUS attribute 188)
- ATM (Asynchronous Transfer Mode)
- atm atm1483 advisory-rx-speed command
- atm atm1483 commands
- atm commands
- ATM subinterface
- configuring multiple clients
- configuring single clients 1, 2
- attribute value pair. See AVP
- authentication
- authentication and accounting servers
- authentication login, TACACS+
- authentication of IPv6 clients
- authentication, authorization, accounting. See AAA
- authorization
- AVP (attribute value pair) 1
- Bearer Type (AVP 18)
- Calling Number (AVP 22)
- Cisco NAS Port Info (AVP 100)
- Transmit (TX) Speed (AVP 24)
- avp command
B
- B-RAS applications
- AAA profiles
- allowing or denying domain names
- client to server interaction
- configuring
- creating an IP interface
- creating domain name aliases
- DHCP (Dynamic Host Configuration Protocol) proxy client and server
- IP hinting
- limiting active subscribers
- local address server
- mapping user domain names to a virtual router
- mapping user requests
- monitoring
- multiple clients per ATM subinterface
- overview
- preauthenticating users
- protocol support
- redirected authentication
- references 1, 2
- single clients per ATM subinterface
- specifying a single name for a domain
- SRC client. See SRC software
- virtual router
- B-RAS licenses
- baseline commands
- baseline aaa 1, 2
- baseline aaa route-download 1, 2, 3, 4, 5, 6, 7
- baseline cops
- baseline dhcp relay
- baseline dhcp server
- baseline dhcp-local 1, 2, 3
- baseline dhcpv6-local 1, 2, 3
- baseline ip dhcp-external
- baseline ip http
- baseline local pool
- baseline radius
- baseline radius dynamic-request
- baseline radius relay
- baseline sscc
- Bearer Type AVP
- BOOTP (bootstrap protocol)
- bootstrap protocol. See BOOTP
- bridged Ethernet and dynamic subscriber interfaces
- Broadband Remote Access Server. See B-RAS applications
- broadcast AAA accounting 1
- broadcast flag, DHCP
- bundled session commands
- bundled sessions
C
- cable modem DHCP relay
- cable modem networks
- Called-Station-Id (RADIUS attribute 30)
- Calling Number AVP
- descriptive formats
- fixed format
- fixed format configuration
- formatting in L2TP ICRQ packets
- including agent-circuit-id and agent-remote-id
- preventing in L2TP ICRQ packets
- relaying in L2TP tunnel-switched network 1, 2
- Calling-Station-Id (RADIUS attribute 31)
- captive portal. See guided entrance
- Change-of-Authorization-Request messages
- Cisco NAS Port Info AVP
- Class (RADIUS attribute 25)
- clear ip commands
- CLI (command-line interface)
- client-name command 1, 2
- CoA-Request messages 1
- guided entrance 1, 2
- Service Manager
- combined IPv4 and IPv6 services
- example
- example scenario
- external parent groups and
- in a dual stack
- rate limiting and
- service interim accounting
- statistics collection and
- command-line interface. See CLI
- Common Open Policy Service. See COPS
- compatibility with previous releases
- for IPv4 and IPv6 services
- configuring. See specific feature, product, or protocol
- Connect-Info (RADIUS attribute 77)
- conventions
- COPS (Common Open Policy Service) 1, 2, 3
- COPS(Common Open Policy Service) 1, 2
- COPS-PR (COPS usage for policy provisioning)
- customer support 1
D
- Deactivate-Service (RADIUS attribute 26-66) 1, 2, 3
- default domain name
- default-router command
- default-upper-type mlppp command
- Delegated-Ipv6-Prefix (RADIUS attribute 123)
- delegating routers
- allocation of IPv6 prefixes
- as E Series routers
- assigning prefixes
- deny command
- descriptive formats
- destination
- DHCP (Dynamic Host Configuration Protocol)
- access model
- configuring BOOTP Relay
- configuring DHCP relay
- configuring DHCP relay proxy 1, 2
- configuring proxy client and server
- features
- giaddr 1, 2, 3
- option 82 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
- overview 1, 2, 3
- per-interface logging
- source IP address
- trust-all
- DHCP access model
- DHCP broadcast flag
- DHCP client bindings
- deleting
- indexing using DUID
- managing
- requests from clients
- viewing
- DHCP clients
- maximum number of prefixes allocated to
- DHCP commands
- dhcp-external duplicate-mac-address 1, 2
- ip auto-detect ip-subscriber
- ip dhcp-capture
- ip dhcp-external re-authenticate-subscriber-interface
- ip dhcp-external recreate-subscriber-interface 1, 2
- ip inactivity-timer
- show dhcp-external
- dhcp delete-binding command
- DHCP external server
- and DHCP relay proxy
- configuring 1, 2, 3
- dynamic subscriber interfaces
- identifying clients with duplicate MAC addresses 1, 2
- monitoring
- preserving dynamic subscriber interfaces 1, 2
- re-authenticating auto-detected dynamic subscriber interfaces
- DHCP local address pools
- DHCP local server 1
- configuring 1, 2
- configuring authentication
- duplicate clients
- equal-access mode 1
- local address pool group 1, 2
- local pool selection, equal-access 1
- local pool selection, standalone 1
- logging information
- modes
- monitoring 1, 2
- overview
- RADIUS accounting support for
- RADIUS accounting support for standalone mode
- standalone mode
- address allocation 1, 2
- authentication
- configuring
- local pool selection
- overview
- unique client IDs
- DHCP local server traps
- DHCP local server:local pool selection, equal-access
- DHCP local server:local pool selection, standalone with AAA
- DHCP local server:local pool selection, standalone without AAA
- DHCP logging
- DHCP option 60 cable modem DHCP relay
- DHCP option 60 strings
- DHCP Option 82 (RADIUS attribute 26-159)
- DHCP options and RADIUS
- DHCP packets
- DHCP per-interface information
- DHCP pool commands
- DHCP proxy client
- DHCP relay
- DHCP relay agent information option
- DHCP relay and BOOTP relay
- DHCP relay proxy
- DHCP server
- DHCP Subscribers
- DHCP unique identifier See DUID
- DHCP vendor class identifier option
- dhcp-external commands
- dhcp-external duplicate-mac-address 1, 2
- show dhcp-external
- DHCP-GI-Address (RADIUS attribute 26-57)
- dhcp-local-server-configuration-overview
- DHCP-MAC-Address (RADIUS attribute 26-56)
- DHCP-Options (RADIUS attribute 26-55)
- DHCPv6 client bindings
- DHCPv6 clients
- assigning prefixes to
- dhcpv6 delete-binding command
- DHCPv6 local address pools See IPv6 local address pools
- DHCPv6 local server
- accounting for IPv6 subscribers
- Advertise message
- assigning maximum number of IPv6 prefixes
- assigning prefixes to clients in conjunction with
- authentication of IPv6 subscribers
- configuring authentication
- configuring DUID type
- IPv6
- maximum number of IPv6 prefixes assigned
- prefix delegation
- standalone mode
- standalone mode with AAA authentication
- standalone mode with AAA authentication, overview
- standalone mode without AAA authentication, overview
- using DUID in identity verification of clients
- using DUID types that suit the client and service provider networks
- DHCPv6 Prefix Delegation
- and IPv6 Neighbor Discovery
- and Neighbor Discovery for prefixes delegation
- assigned prefix length of /128
- enabling
- example for non-PPP client requests
- example scenario
- for client requests
- for IPv6 clients
- Framed-IPv6-Prefix
- guidelines for configuring
- interface level configuration
- limitation on
- maximum number of prefixes delegated to clients, See also using DHCPv6 local server only
- standard RADIUS attributes
- using IPv6 local address pools
- dialed number identification service. See DNIS
- digital subscriber line access multiplexers. See DSLAMs
- digital subscriber lines. See DSLs
- disable proxy lcp command
- Disconnect-Cause (RADIUS attribute 26-51)
- Disconnect-Request messages
- DNIS (dialed number identification service) 1, 2
- DNS (Domain Name System)
- DNS addresses
- order of preference
- DNS domain names
- list of
- order of preference
- DNS domains
- configuring more than one
- in IPv6 local address pools
- in responses to clients
- maximum number
- DNS Recursive Name Search option
- DHCPv6 server responses
- DNS servers
- addresses in responses to clients
- configuring in
- list of
- order of preference
- order of use
- primary and secondary
- responding with IPv6 addresses
- documentation set
- Domain Name System. See DNS
- domain names
- allowing or denying
- configuring
- default
- mapping to virtual routers 1, 2, 3, 4, 5, 6
- mapping user requests without domain name 1, 2
- none
- specifying single name for users
- stripping domain name
- using aliases
- using delimiters other than @
- using either domain or realm asdomain name
- using realm name as domain name
- Downstream-Calculated-QoS-Rate (RADIUS attribute 26-141)
- DS-Lite-Tunnel-Name (RADIUS attribute 144)
- DSL Forum VSAs
- DSLAMs (digital subscriber line access multiplexers)
- DSLs (digital subscriber lines)
- dual stack
- combined IPv4 and IPv6 services
- IPv4 and IPv6 services
- statistics collection
- DUID
- conformance standards
- default type on DHCPv6 local server
- format and example
- Identity Association for Prefix Delegation option and
- Identity Association identifier and
- indexing client bindings
- prerequisite for configuring DUID type
- type, configuring on DHCPv6 local server
- types of
- types supported
- used in client and server exchanges
- duplicate AAA accounting 1
- duplicate clients
- duplicate MAC addresses
- identifying DHCP clients with 1, 2
- monitoring
- Dynamic Host Configuration Protocol. See DHCP
- dynamic IP interfaces
- dynamic subscriber interfaces
- commands
- configuring 1, 2
- configuring DHCP external server to interoperate with DHCP relay and DHCP relay proxy
- configuring DHCP external server to preserve 1, 2
- configuring DHCP external server to re-authenticate
- DHCP server
- framed routes
- GRE tunnel configuration
- in same VR as DHCP relay
- inheriting MAC validation state
- IP over bridged Ethernet configuration
- IP over Ethernet configuration
- IP over VLAN over Ethernet configuration
- monitoring
- overview
- packet detection
E
- E120 and E320 routers
- EAP (Extensible Authentication Protocol)
- EAP-Message (RADIUS attribute 79)
- Egress-Policy-Name (RADIUS attribute 26-11)
- enable proxy authenticate command
- encapsulation commands
- endpoint discriminator
- equal-access DHCP local server
- Ethernet
- Ethernet interfaces
- commands
- Ethernet links
- between CPE and PE routers
- Event-Timestamp (RADIUS attribute 55)
- exclusion ranges
- configuring
- example for non-PPP client requests
- for DHCPv6 prefixes
- for ndra prefixes
- Extensible Authentication Protocol. See EAP
- external parent groups
- combined IPv4 and IPv6 services with
- statistics collection for
F
- fixed format
- fragmentation
- framed routes dynamic subscriber interfaces
- Framed-Compression (RADIUS attribute 13)
- Framed-Interface-Id (RADIUS attribute 96)
- Framed-Ip-Address (RADIUS attribute 8)
- Framed-Ip-Netmask (RADIUS attribute 9)
- Framed-Ipv6-Pool (RADIUS attribute 100)
- Framed-Ipv6-Prefix (RADIUS attribute 97)
- Framed-IPv6-Prefix attribute
- configuring the same IPv6 prefix for multiple subscribers
- used for DHCPv6 Prefix Delegation
- Framed-Ipv6-Route (RADIUS attribute 99)
- Framed-MTU (RADIUS attribute 12)
- Framed-Route (RADIUS attribute 22)
G
H
I
- ICR partition accounting
- identification command 1, 2
- Identity Association for Prefix Delegation
- and its interoperation with DUID
- contains Identity Association identifier
- Identity Association identifier
- idle timeout for B-RAS
- idle timeout, range for
- independent IPv4 and IPv6 services
- in a dual stack
- service interim accounting
- statistics collection and
- Ingress-Policy-Name (RADIUS attribute 26-10)
- inheriting MAC address validation state
- interface commands
- Interface-Desc (RADIUS attribute 26-63)
- interfaces
- Interim-Acct messages 1
- ANCP (L2C)-related VSAs
- DSL Forum VSAs 1, 2
- Internet Protocol. See IP
- IOAs
- IP
- IP addresses
- assigning to name servers 1, 2, 3
- configuring for remote client
- ip commands
- ip address
- ip address-pool dhcp
- ip auto-configure append-virtual-router-name
- ip auto-configure ip-subscriber 1, 2
- ip demux-type
- ip destination-prefix 1, 2
- ip dhcp-local pool
- ip share-interface
- ip share-nexthop
- ip source-prefix 1, 2
- ip unnumbered
- ip use-framed-routes ip-subscriber
- ip-hint
- ip dhcp-external commands 1, See also show ip dhcp-external commands
- ip dhcp-external auto-configure
- ip dhcp-external disregard-giaddr-next-hop
- ip dhcp-external recreate-subscriber-interface 1, 2
- ip dhcp-external server-address
- ip dhcp-external server-sync
- ip re-authenticate-auto-detect ip-subscriber
- ip dhcp-local auth domain command 1, 2
- ip dhcp-local auth include command
- ip dhcp-local auth password
- ip dhcp-local auth user-prefix command
- ip dhcp-local commands
- ip dhcp-server commands
- ip http commands
- IP interfaces
- IP interfaces that support PPP clients
- IP spoofing
- IPv4 and IPv6 services 1, 2, See also combined IPv4 and IPv6 services See also independent IPv4 and IPv6 services
- combined services in a dual stack
- in a dual stack
- IPv4 services
- ipv6 commands
- IPv6 DHCP local server 1
- ipv6 dhcpv6-local auth domain command
- ipv6 dhcpv6-local auth password
- ipv6 dhcpv6-local auth user-prefix command
- ipv6 dhcpv6-local commands
- IPv6 local address pools
- assigned prefix length of /128
- configuring
- DNS servers in
- enabling 1, 2
- example for non-PPP client requests
- for delegation of prefixes
- for DHCPv6 Prefix Delegation
- for NDRA
- single pool details, viewing
- summary of all configured pools, viewing 1, 2
- guidelines for configuration
- limitation on
- multiple configuration
- not configured in domain map
- order of preference
- Prefix Delegation
- prerequisite for configuring 1, 2
- procedure
- specifying
- used for Prefix Delegation from
- IPv6 Neighbor Discovery
- and DHCPv6 Prefix Delegation
- assigning prefixes to clients
- IPv6-NdRa-Prefix
- maximum number of delegated IPv6 prefixes
- standard RADIUS attributes
- IPv6 prefix ranges
- IPv6 prefix ranges for ndra
- IPv6 prefixes
- common prefix for multiple subscribers assigned
- maximum number assigned to clients
- same prefix with multiple next-hops
- unique prefix per subscriber assigned
- IPv6 services
- IPv6 subscribers
- accounting of
- accounting of, DHCPv6 local server
- authentication of
- IPv6-Acct-Input-Gigawords [26-155]
- IPv6-Acct-Input-Octets [26-151]
- IPv6-Acct-Input-Packets [26-153]
- IPv6-Acct-Output-Gigawords [26-156]
- IPv6-Acct-Output-Octets [26-152]
- IPv6-Acct-Output-Packets [26-154]
- Ipv6-Egress-Policy-Name (RADIUS attribute 26-107)
- Ipv6-Ingress-Policy-Name (RADIUS attribute 26-106)
- Ipv6-Local-Interface (RADIUS attribute 26-46)
- Ipv6-NdRa-Prefix (RADIUS attribute 26-46)
- IPv6-NdRa-Prefix attribute
- used for IPv6 Neighbor Discovery
- IPv6-Primary-DNS (RADIUS attribute 26-47)
- Ipv6-Secondary-DNS (RADIUS attribute 26-46)
- IPv6-Virtual-Router (RADIUS attribute 26-45)
L
- L2C-Down-Stream-Data (RADIUS attribute 26-93)
- L2C-Information (RADIUS attribute 26-81)
- L2C-Up-Stream-Data (RADIUS attribute 26-92)
- L2TP (Layer 2 Tunneling Protocol)
- actual upstream rate transmission
- advisory receive speed transmission
- defining
- high availability considerations
- implementation
- license
- modifying LAC default settings 1, 2
- monitoring
- peer resynchronization
- RX Connect-Speed AVP generation
- rx speed
- sessions supported
- silent failover
- tunnel selection
- tunnel switch profiles
- L2TP access concentrator. See LAC
- l2tp commands 1, See also show l2tp commands
- disconnect-cause
- failover-resync
- l2tp checksum
- l2tp destination lockout-test
- l2tp destination lockout-timeout
- l2tp destination profile 1, 2
- l2tp destruct-timeout
- l2tp disable calling-number avp
- l2tp disable challenge
- l2tp disconnect-cause
- l2tp drain
- l2tp drain destination
- l2tp drain tunnel
- l2tp fail-over-within-preference
- l2tp failover-resync 1, 2
- l2tp ignore-receive-data-sequencing
- l2tp ignore-transmit-address-change
- l2tp reject-transmit-address-change
- l2tp retransmission
- l2tp rx-connect-speed-upstream-rate
- l2tp rx-connect-speed-when-equal
- l2tp short-drain-timeout
- l2tp shutdown
- l2tp shutdown destination
- l2tp shutdown session
- l2tp shutdown tunnel
- l2tp switch-profile
- l2tp tunnel default-receive-window
- l2tp tunnel idle-timeout
- l2tp tunnel test
- l2tp tunnel-switching 1, 2
- l2tp unlock destination
- l2tp unlock-test destination
- l2tp weighted-load-balancing command
- max-sessions command 1, 2
- sessions-limit-group command
- L2TP dial-out
- l2tp dial-out commands 1, See also show l2tp dial-out commands
- L2TP network server. See LNS
- L2TP RWS (receive window size)
- configuring global default
- configuring on LAC
- configuring on LNS
- l2tp tunnel default-receive-window command
- overview
- receive-window command (for LAC)
- receive-window command (for LNS)
- show l2tp command 1, 2, 3, 4
- show l2tp destination profile command 1, 2
- L2TP transmit connect speed
- and Transmit (TX) Speed AVP 24
- calculation methods
- monitoring 1, 2
- L2TP transmit connect speed and Transmit (TX) Speed AVP 24
- L2TP tunnel switch profiles
- LAC (L2TP access concentrator) 1
- before configuring 1, 2
- configuring receive window size (RWS)
- function 1, 2
- sequence of events
- Layer 2 Tunneling Protocol. See L2TP
- license commands 1, See also show license commands
- licenses
- lifetime
- guideline
- preferred
- restriction
- specifying
- valid
- limitation
- on number of IPv6 prefixes
- LLID (logical line identifier)
- LNS (L2TP network server) 1, 2
- local address pool
- local address server 1
- local authentication commands
- local host command
- local ip address command
- logging. See specific feature, product, or protocol
- logical line identifier, AAA. See LLID
- logout subscribers command
M
- MAC (media access control) addresses
- duplicate 1, 2
- inheriting validation state 1, 2
- preventing IP spoofing
- macros
- manuals
- max-sessions command
- maximum number of IPv6 prefixes
- assigned to clients
- topologies in which they are assigned
- MBS (RADIUS attribute 26-17)
- media access control addresses. See MAC addresses
- medium ipv4 command 1, 2
- merging policies
- Message-Authenticator (RADIUS attribute 80)
- MLPPP Bundle Name (RADIUS attribute 26-62)
- monitoring. See specific feature, product, or protocol
- mutex service 1, 2
N
- name server addresses
- naming conventions
- NAS (network access server) 1, 2
- NAS-Identifier (RADIUS attribute 32)
- NAS-IP-Address (RADIUS attribute 4)
- NAS-Port (RADIUS attribute 5)
- NAS-Port-Id (RADIUS attribute 87)
- NAS-Port-Type (RADIUS attribute 61)
- Ndra
- enabling
- for IPv6 clients
- guidelines for configuring
- NDRA
- using IPv6 local address pools
- monitoring a single pool
- monitoring all configured pools 1, 2
- Ndra clients
- assigning prefixes to
- Ndra local address pools See IPv6 local address pools
- network access server. See NAS
- network commands
- non-PPP clients
- non-PPP equal access
- none domain name
- notice icons
O
- operational states, L2TP 1
- option 82 1, 2, 3, 4, 5, 6, 7, 8, 9, 10
- out-of-resource result codes, LNS
- Output-Gigawords (RADIUS attribute 53)
- override-user command
P
- packet detection dynamic subscriber interfaces
- packet fragmentation
- packet mirroring
- packets
- Partition-Accounting-Off messages
- Partition-Accounting-On messages
- password command 1, 2
- PCP-Server-Name(RADIUS attribute 26-165)
- PCR (RADIUS attribute 26-15)
- peer
- peer resynchronization
- performance impact
- IPv4 and IPv6 services
- persistent tunnels, creating
- PIB (Policy Information Base)
- platform considerations
- Point-to-Point Protocol. See PPP
- Policy Information Base. See PIB
- policy management on subscriber interfaces
- PPP (Point-to-Point Protocol)
- ppp commands
- PPP subscribers
- DHCPv6 local server: standalone mode
- PPPoE remote circuit ID
- Pppoe-Description (RADIUS attribute 26-24)
- PPPv6 subscribers
- assigning prefixes to
- preauthentication
- preference
- preference command 1, 2
- preference order
- in allocation of prefixes
- in assignment of DNS addresses
- in determining local address pool
- preferred lifetime
- for delegated prefixes
- setting
- Prefix Delegation See DHCPv6 Prefix Delegation
- prefixes
- allocated to clients from
- assigned length of /128
- assigning to
- configuring ranges
- delegating by
- delegating to clients
- excluded from
- excluding
- limitation on
- order of preference
- preferred and valid lifetimes
- prerequisite
- for configuring IPv6 local address pools
- primary authentication/accounting RADIUS server 1, 2, 3
- primary IP interface
- privilege authentication, TACACS+
- profile commands
Q
- QoS (quality of service)
- QoS commands
- QoS-Profile-Name (RADIUS attribute 26-26)
R
- RADIUS
- RADIUS (Remote Authentication Dial-In User Service)
- AAA failure
- accounting methods
- attribute descriptions 1, 2, 3
- attributes supported
- authentication and accounting servers
- authentication methods 1, 2
- Calling-Station-Id formats supported
- change of authority messages
- CLI AAA messages
- client to server interaction
- configuring servers
- description
- direct server access
- disconnect messages
- EAP authentication
- IETF attributes supported
- Juniper Networks VSAs supported
- L2TP transmit connect speed
- L2TP tunnel switch profiles, applying
- message types supported
- RADIUS dynamic-request server
- round-robin server access
- server access
- server request processing limit
- Service Manager attributes 1, 2
- Service Manager tags
- services
- traffic shaping for PPP over ATM interfaces
- VSAs (vendor-specific attributes)
- RADIUS attributes
- preference order and
- RADIUS authentication
- scenarios in which show subscribers command output varies
- radius commands 1, See also show radius commands
- radius acct-session-id-format 1, 2
- radius algorithm 1, 2
- radius calling-station-delimiter 1, 2
- radius calling-station-format 1, 2, 3
- radius connect-info-format command 1, 2
- radius connect-info-format l2tp-connect-speed
- radius dsl-port-type 1, 2
- radius ethernet-port-type 1, 2
- radius ignore atm-mbs
- radius ignore atm-pcr
- radius ignore atm-scr
- radius ignore atm-service-category
- radius ignore egress-policy-name
- radius ignore framed-ip-netmask
- radius ignore ingress-policy-name
- radius ignore ipv6-egress-policy-name
- radius ignore ipv6-ingress-policy-name
- radius ignore virtual-router
- radius include
- radius include access-loop-parameters
- radius include acct-authentic
- radius include acct-delay-time
- radius include acct-link-count
- radius include acct-multi-session-id
- radius include acct-session-id
- radius include acct-session-id access-request
- radius include acct-terminate-cause 1, 2
- radius include acct-tunnel-connection
- radius include ascend-num-in-multilink
- radius include called-station-id
- radius include calling-station-id
- radius include class
- radius include connect-info
- radius include delegated-ipv6-prefix
- radius include dhcp-gi-address
- radius include dhcp-mac-address
- radius include dhcp-options
- radius include downstream-calculated-qos-rate
- radius include ds-lite-tunnel-name
- radius include dsl-forum-attributes
- radius include egress-policy-name
- radius include event-timestamp
- radius include framed-compression
- radius include framed-interface-id
- radius include framed-ip-add acct-start
- radius include framed-ip-addr
- radius include framed-ip-netmask 1, 2
- radius include framed-ipv6-pool
- radius include framed-ipv6-prefix
- radius include framed-ipv6-route
- radius include framed-route
- radius include icr-partition-id
- radius include ingress-policy-name
- radius include input-gigapkts
- radius include input-gigawords
- radius include interface-description
- radius include ipv6-egress-policy-name
- radius include ipv6-ingress-policy-name
- radius include ipv6-local-interface
- radius include ipv6-nd-ra-prefix
- radius include ipv6-primary-dns
- radius include ipv6-secondary-dns
- radius include ipv6-virtual-router
- radius include l2c-downstream-data
- radius include l2c-upstream-data
- radius include l2tp-ppp-disconnect-cause
- radius include mlppp-bundle-name
- radius include nas-identifier
- radius include nas-port
- radius include nas-port-id
- radius include nas-port-type
- radius include output-gigapkts
- radius include output-gigawords
- radius include pcp-server-name
- radius include pppoe-description
- radius include profile-service-description
- radius include qos-profile-name
- radius include tunnel-assignment-id
- radius include tunnel-client-auth-id
- radius include tunnel-client-endpoint
- radius include tunnel-interface-id
- radius include tunnel-medium-type
- radius include tunnel-preference
- radius include tunnel-server-attributes
- radius include tunnel-server-auth-id
- radius include tunnel-server-endpoint
- radius include tunnel-type
- radius include upstream-calculated-qos-rate
- radius nas-identifier
- radius nas-port-format 1, 2
- radius nas-port-format extended atm
- radius nas-port-format extended ethernet
- radius override calling-station-id remote-circuit-id
- radius override nas-info 1, 2
- radius override nas-ip-addr tunnel-client-endpoint
- radius override nas-port-id remote-circuit-id
- radius pppoe nas-port-format unique 1, 2
- radius pre-authentication server
- radius relay server
- radius relay udp-checksum
- radius remote-circuit-id-delimiter
- radius remote-circuit-id-format
- radius route-download server
- radius trap acct-server-not-responding
- radius trap acct-server-responding
- radius trap auth-server-not-responding
- radius trap auth-server-responding
- radius trap no-acct-server-responding
- radius trap no-auth-server-responding
- radius update-source-addr 1, 2
- radius vlan nas-port-format stacked
- radius dynamic-request
- RADIUS dynamic-request server
- RADIUS IPv6 attributes
- radius relay
- RADIUS Relay Server 1
- RADIUS relay server
- radius remote-circuit-id-format command
- RADIUS route-download server 1
- configuring
- format of routes
- how it works 1, 2
- per chassis
- supported attributes
- RADIUS servers
- assignment of a unique prefix route
- Prefix Delegation and
- radius-attributes-override-monitoring
- RADIUS-initiated change of authorization
- RADIUS-initiated CoA
- RADIUS-initiated disconnect
- realm names
- Receive speed AVP
- receive window size (RWS). See L2TP RWS
- receive-window command 1, 2
- redirected authentication 1, 2
- remote access (B-RAS). See B-RAS applications
- Remote Authentication Dial-In User Service. See RADIUS
- remote clients, IP addresses for
- remote host command 1, 2
- remote system
- requesting routers
- as customer edge device
- assigning prefixes to
- receipt of IPv6 prefixes
- router-name command 1, 2
- RX Connect-Speed AVP
- RX speed AVP 1, 2
S
- S-VLAN links
- between CPE and PE routers
- SCR (RADIUS attribute 26-16)
- SDX (Service Deployment System) software 1, 2, See also SRC software
- Sending RADIUS Attributes
- server-name command 1, 2
- service commands
- service definitions 1, 2, 3
- service dhcp-local command
- service dhcpv6-local command
- service instance
- service interim accounting
- in a dual stack
- IPv4 and IPv6 services
- Service Manager
- CLI support
- CoA-Request messages 1, 2
- combined IP4 and IPv6 service
- configuring
- deactivating 1
- guided entrance 1, 2, 3
- IPv4 and IPv6 services
- license sessions
- macros
- multiple services
- mutex service 1, 2
- overview
- parameter values
- preprovisioning services 1, 2
- QoS
- RADIUS dynamic-request server
- RADIUS support
- RADIUS tags
- service definition 1, 2, 3
- service instance
- service session 1
- service session profiles
- statistics 1, 2, 3, 4
- statistics collection
- subscriber session ID
- subscriber sessions 1, 2
- supported platforms
- tasks
- testing services
- Service Manager commands
- Service Manager license
- service modules
- service session
- Service-Category (RADIUS attribute 26-14)
- Service-Description (RADIUS attribute 26-53)
- Service-Interim-Acct-Interval (RADIUS attribute 26-140) 1, 2
- Service-Session (RADIUS attribute 26-83) 1, 2
- Service-Statistics (RADIUS attribute 26-69)
- Service-Stats (RADIUS attribute 26-69)
- Service-Timeout (RADIUS attribute 26-68) 1, 2
- Service-Volume (RADIUS attribute 26-67) 1, 2
- session 1, 2
- Session and Resource Control. See SRC software
- session timeout
- session-out-of-resource-result-code-override command
- Session-Timeout (RADIUS attribute 27)
- sessions, L2TP
- set dhcp commands
- set dhcp relay commands
- set dhcp relay
- set dhcp relay agent sub-option
- set dhcp relay assign-giaddr-source-ip
- set dhcp relay broadcast-flag-replies 1, 2
- set dhcp relay giaddr-selects-interface
- set dhcp relay layer2-unicast-replies 1, 2
- set dhcp relay options
- set dhcp relay override
- set dhcp relay preserve-trusted-client-option
- set dhcp relay proxy
- set dhcp relay trust-all
- set dhcp relay proxy commands
- set dhcp vendor-option command
- shared IP interfaces
- shared local address pools
- shared tunnel-server ports 1, 2, 3
- show aaa commands
- show aaa accounting 1, 2
- show aaa accounting default 1, 2
- show aaa accounting interval
- show aaa accounting vr-group 1, 2
- show aaa authentication default 1, 2
- show aaa dhcpv6-delegated-prefix
- show aaa domain-map 1, 2, 3, 4
- show aaa duplicate-address-check
- show aaa intf-desc-format
- show aaa ipv6-nd-ra-prefix
- show aaa model
- show aaa name-servers 1, 2
- show aaa profile
- show aaa route-download ipv6
- show aaa route-download ipv6 routes
- show aaa route-download ipv6 routes global
- show aaa route-download routes 1, 2
- show aaa route-download routes global
- show aaa service accounting interval
- show aaa statistics 1, 2
- show aaa subscriber per-port-limit 1, 2
- show aaa subscriber per-vr-limit 1, 2
- show aaa timeout 1, 2
- show aaa tunnel-group 1, 2
- show aaa tunnel-parameters 1, 2, 3
- show aaa user accounting interval 1, 2
- show radius route-download
- show configuration commands
- show configuration category aaa global-attributes
- show configuration category aaa local-authentication
- show configuration category aaa server-attributes include-defaults
- show configuration category aaaglobal-attributes
- show configuration category aaalocal-authentication
- show configuration category aaaserver-attributes include-defaults
- show cops info command 1, 2
- show cops statistics command 1, 2
- show dhcp commands
- show dhcp summary command
- show dhcp vendor-option command
- show dhcp-external command
- show ip commands
- show ip dhcp-capture command
- show ip dhcp-external commands
- show ip dhcp-local commands
- show ip dhcpv6-local commands
- show ip http commands
- show ip interface commands
- show ip local shared-local command
- show ipv6 dhcpv6-local commands
- show ipv6 interface commands
- show ipv6 local pool commands
- for a single pool
- for all configured pools 1, 2, 3, 4
- statistics for a single pool
- show l2tp commands
- show l2tp dial-out commands
- show license commands
- show profile commands
- show radius commands
- show radius accounting servers
- show radius accounting statistics
- show radius algorithm
- show radius attributes-included
- show radius authentication servers
- show radius authentication statistics
- show radius calling-station-delimiter 1, 2
- show radius calling-station-format
- show radius connect-info-format
- show radius dsl-port-type
- show radius dynamic-request servers
- show radius dynamic-request statistics
- show radius ethernet-port-type
- show radius icr-partition-accounting
- show radius nas-identifier
- show radius nas-port-format
- show radius override
- show radius pppoe nas-port-format
- show radius remote-circuit-id-delimiter
- show radius remote-circuit-id-format 1, 2
- show radius rollover-on-reject
- show radius route-download statistics
- show radius servers 1, 2
- show radius statistics 1, 2, 3, 4
- show radius trap
- show radius tunnel-accounting 1, 2
- show radius update-source-address
- show radius vlan nas-port-format
- show radius override
- show radius relay commands
- show service-management commands
- show sscc commands
- show subscribers command
- show terminate-code command
- SNMP traps
- source-address command 1, 2
- spoofing, IP
- SRC (Session and Resource Control) software 1, 2, 3, 4
- configuring the client
- monitoring the client 1, 2, 3
- SRC (Session and Resource Control)software
- sscc commands 1, See also show sscc commands
- sscc address 1, 2
- sscc enable
- sscc protocol ipv6
- sscc protocol lac
- sscc retryTimer 1, 2
- sscc sourceAddress
- sscc transportRouter 1, 2
- standalone DHCP local server
- standalone mode
- with and without AAA authentication
- standalone mode with AAA authentication
- DHCPv6 local server
- DHCPv6 local server, parameters in username
- standard RADIUS attributes
- configuring
- IPv6 Neighbor Discovery and
- using the same values
- verifying
- State (RADIUS attribute 24)
- statistics
- statistics collection
- for external parent groups
- subscriber interface commands
- subscriber interfaces
- applications
- commands
- configuring 1
- dynamic 1
- GRE tunnel configuration
- IP over bridged Ethernet configuration
- IP over Ethernet configuration
- IP over VLAN over Ethernet configuration 1, 2
- monitoring
- overview
- static
- subscribers
- support, technical See technical support
T
- TACACS+
- AAA services
- accounting
- authentication login process
- authorization
- configuring
- daemon 1, 2
- host
- NAS (network access server) 1, 2
- privilege authentication
- TACACS+ commands
- aaa accounting commands
- aaa accounting exec
- aaa accounting suppress null-username
- aaa authentication enable default 1, 2
- aaa new-model
- TCP and TACACS+
- technical support
- Terminal Access Controller Access Control System +. See TACACS+
- text and syntax conventions
- timeout, configuring for B-RAS applications
- traffic shaping for PPP over ATM
- transmit connect speed, L2TP. See L2TP transmit connect speed
- tunnel
- defined 1, 2
- selection, L2TP
- switching
- tunnel commands, L2TP
- tunnel 1, 2
- tunnel group
- tunnel password
- tunnel group mode, mapping to L2TP tunnel
- tunnel selection, L2TP 1
- tunnel subscribers, enabling authentication for
- tunnel switch profiles, L2TP
- Tunnel-Assignment-Id (RADIUS attribute 82)
- Tunnel-Client-Auth-Id (RADIUS attribute 90)
- Tunnel-Client-Endpoint (RADIUS attribute 66)
- Tunnel-Interface-Id (RADIUS attribute 26-44)
- Tunnel-Medium-Type (RADIUS attribute 65)
- Tunnel-Preference (RADIUS attribute 83)
- tunnel-server command
- tunnel-server ports
- Tunnel-Server-Auth-Id (RADIUS attribute 91)
- Tunnel-Server-Endpoint (RADIUS attribute 67)
- tunnel-subscriber authentication command
- Tunnel-Type (RADIUS attribute 64)
- tunneled PPP session accounting statistics
- tunnels, IP
- tx-connect-speed-method command
- Type 1 DUID
- Type 2 DUID
- Type 3 DUID
- type command, L2TP 1, 2
U
- UDP (User Datagram Protocol)
- Upstream-Calculated-QoS-Rate (RADIUS attribute 26-142)
- user domain, mapping to L2TP tunnel
- User-Name (RADIUS attribute 1)
- usernames and passwords from a domain
- using shared tunnel-server ports
V
- valid lifetime
- for delegated prefixes
- setting
- validation state, inheriting for MAC addresses
- vendor class identifier option
- vendor-specific (suboption 9)
- vendor-specific attributes. See VSAs
- virtual routers
- Virtual-Router (RADIUS attribute 26-1)
- vlan commands
- VLAN links
- between CPE and PE routers
- VLANs (virtual local area networks)
- VPNs (virtual private networks)
- VSAs (vendor-specific attributes)
W
- walled garden. See guided entrance
- Web access to E Series router
- Windows Internet Name Service. See WINS
- WINS, assigning IP addresses 1, 2, 3, 4
