Juniper Networks
Log in
|
How to Buy
|
Contact Us
|
United States (Change)
Choose Country
Close

Choose Country

North America

  • United States

Europe

  • Deutschland - Germany
  • España - Spain
  • France
  • Italia - Italy
  • Россия - Russia
  • United Kingdom

Asia Pacific

  • Asean Region (Vietnam, Indonesia, Singapore, Malaysia)
  • Australia
  • 中国 - China
  • India
  • 日本 - Japan
  • 대한민국 - Korea
  • 台灣 - Taiwan
Solutions
Products & Services
Company
Partners
Support
Education
Community
Security Intelligence Center

Technical Documentation

Support
Technical Documentation
Content Explorer New
 
Enterprise MIBs
 
EOL Documentation
 
Feature Explorer Login required New
 
File Format Help
 
Glossary
 
Portable Libraries
 
 
Home > Support > Technical Documentation > JunosE Software > Subscriber Management Configuration Examples
Print
Rate and give feedback:  Feedback Received. Thank You!
Rate and give feedback: 
Close
This document helped resolve my issue.  Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  
E-mail: 
Submitting...
 

Related Documentation

  • Understanding Subscriber Management
  • Subscriber Management Procedure Overview
  • Configuring Subscriber Management with an External DHCP Server
  • include circuit-identifier
  • include dhcp-option 82
  • include hostname
  • include ip-address
  • include mac-address
  • ip policy
  • ip policy-list
  • ip service-profile
  • profile
  • route-map
  • set ip interface-profile
  • set ip service-profile
  • user-prefix
 

Subscriber Management Configuration Examples

This section contains examples of creating dynamic usernames and shows the usernames that are generated. The examples all use the following IP policy, interface profile, and route map:

  • An IP policy that restricts access.
    host1(config)#ip policy-list restrictAccess host1(config-policy-list)#classifier-group * host1(config-policy-list-classifier-group)#filter host1(config-policy-list-classifier-group)#exit host1(config-policy-list)#exit host1(config)#
  • An interface profile that references the restrictAccess policy.
    host1(config)#profile atlInterfaceProfile host1(config-profile)#ip policy input restrictAccess host1(config-profile)#ip policy output restrictAccess host1(config-profile)#exit host1(config)#
  • A route map that references the interface profile and the atlServiceProfile service profile.
    host1(config)#route-map atlRouteMap host1(config-route-map)#set interface-profile atlInterfaceProfile host1(config-route-map)#set ip service-profile atlServiceProfile host1(config-route-map)#exit host1(config)#

The following examples show the configuration of a service profile that enables RADIUS authentication:

  • Username with ATM Circuit Identifier and No Circuit Type
  • Username with VLAN Circuit Identifier and Circuit Type
  • Username with MAC Address

Username with ATM Circuit Identifier and No Circuit Type

This example shows the steps to configure a service profile for a username that includes the ATM circuit identifier, but does not include the circuit type.

host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier atm host1(config-service-profile)#exit host1(config)#

The example generates the following username:

The circuit identifier indicates a user at slot 2, port 3, with a virtual path identifier (VPI) of 32 and a virtual channel identifier (VCP) of 100.

Username with VLAN Circuit Identifier and Circuit Type

This example shows the steps to configure a service profile for a username that includes a VLAN circuit identifier and the circuit type.

host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier vlan prepend-circuit-type host1(config-service-profile)#exit

The example generates the following username:

The circuit identifier indicates a user on slot 1, port 0, no stacked vlan, and a vlan ID of 45.

Username with MAC Address

Step-by-Step Procedure

This example shows the steps to configure a service profile that generates a username that includes a MAC address.

Note: Including a MAC address in a username works only for DHCP users. It does not work for IP subscribers that have statically configured IP addresses.

host1(config)#ip service-profile atlServiceProfile host1(config-service-profile)#user-prefix xyzcorp.atl host1(config-service-profile)#domain eastcoast host1(config-service-profile)#include hostname host1(config-service-profile)#include circuit-identifier vlan host1(config-service-profile)#include mac-address host1(config-service-profile)#include dhcp-option 82 agent-circuit-id host1(config-service-profile)#exit host1(config)#

The example generates the following username, which includes the MAC address:

 

Related Documentation

  • Understanding Subscriber Management
  • Subscriber Management Procedure Overview
  • Configuring Subscriber Management with an External DHCP Server
  • include circuit-identifier
  • include dhcp-option 82
  • include hostname
  • include ip-address
  • include mac-address
  • ip policy
  • ip policy-list
  • ip service-profile
  • profile
  • route-map
  • set ip interface-profile
  • set ip service-profile
  • user-prefix
 

Published: 2012-06-27

 
  • About Juniper
  • Investor Relations
  • Press Releases
  • Newsletters
  • Juniper Offices
  • Green Networking
  • Resources
  • How to Buy
  • Partner Locator
  • Image Library
  • Visio Templates
  • Security Center
  • Community
  • Forums
  • Blogs
  • Junos Central
  • Social Media
  • Developers
  • Support
  • Technical Documentation
  • Knowledge Base (KB)
  • Software Downloads
  • Product Licensing
  • Contact Support
Site Map / RSS Feeds / Careers / Accessibility / Feedback / Privacy & Policy / Legal Notices
Copyright© 1999-2012 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out