Subscriber Management Configuration Examples
This section contains examples
of creating dynamic usernames and shows the usernames that are generated.
The examples all use the following IP policy, interface profile, and
route map:
- An IP policy that restricts access.
host1(config)#ip policy-list restrictAccess host1(config-policy-list)#classifier-group
* host1(config-policy-list-classifier-group)#filter host1(config-policy-list-classifier-group)#exit host1(config-policy-list)#exit host1(config)#
- An interface profile that references the restrictAccess
policy.
host1(config)#profile atlInterfaceProfile host1(config-profile)#ip policy input restrictAccess host1(config-profile)#ip policy output restrictAccess host1(config-profile)#exit host1(config)#
- A route map that references the interface profile and
the atlServiceProfile service profile.
host1(config)#route-map atlRouteMap host1(config-route-map)#set interface-profile
atlInterfaceProfile host1(config-route-map)#set ip service-profile
atlServiceProfile host1(config-route-map)#exit host1(config)#
The following examples show the configuration of
a service profile that enables RADIUS authentication:
Username with ATM Circuit Identifier and No Circuit Type
This example shows the steps to configure a service
profile for a username that includes the ATM circuit identifier, but
does not include the circuit type.
host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix
xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier
atm host1(config-service-profile)#exit host1(config)#
The example generates the following username:
The circuit identifier indicates a user at slot 2, port 3, with
a virtual path identifier (VPI) of 32 and a virtual channel identifier
(VCP) of 100.
Username with VLAN Circuit Identifier and Circuit Type
This example shows the steps to configure a service
profile for a username that includes a VLAN circuit identifier and
the circuit type.
host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix
xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier
vlan prepend-circuit-type host1(config-service-profile)#exit
The example generates the following username:
The circuit identifier indicates a user on slot
1, port 0, no stacked vlan, and a vlan ID of 45.
Username with MAC Address
Step-by-Step Procedure
This example shows the steps to configure
a service profile that generates a username that includes a MAC address.
 | Note:
Including a MAC address in a username works only for DHCP
users. It does not work for IP subscribers that have statically configured
IP addresses. |
host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix
xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier
vlan host1(config-service-profile)#include mac-address host1(config-service-profile)#include dhcp-option
82 agent-circuit-id host1(config-service-profile)#exit host1(config)#
The example generates the following username, which
includes the MAC address:
Published: 2012-06-27