Profile Characteristics

Currently, profiles support bridged Ethernet, IP, IPv6, L2TP, Multilink PPP, PPP, PPPoE, and VLANs. You create a profile with a specific set of characteristics. You then assign the profile to multiple interfaces instead of creating separate interfaces with identical attributes. After you create a profile, you can assign it to static ATM 1483, static PPP, or static VLAN major interfaces on different devices.

Bridged Ethernet Characteristics

A profile can contain the following bridged Ethernet characteristic:

• mtu—Sets the maximum allowable size, in bytes, of the MTU for dynamic bridged Ethernet interfaces

IP Characteristics

A profile can contain one or more of the following IP characteristics:

• access-routes—Enables the creation of host access routes on an interface
• address—Configures an IP address on an interface
• auto-configure ip-subscriber—Configures a primary IP interface to enable dynamic creation of subscriber interfaces
• auto-detect ip-subscriber—Enables packet detection on the router and specifies that IP automatically detects packets that do not match any entries in the demultiplexer table
• directed-broadcast—Enables directed broadcast forwarding
• filter-options all—Filters out packets that include IP options
• igmp—Configures an IGMP interface
• ignore-df-bit—Specifies that the don’t-fragment bit is ignored
• inactivity-timer—Configures an inactivity timer value for IP interfaces
• inspection—Associates an inspection list to the interface for firewalling
• mtu—Configures the MTU for a network
• nat—Configures the interface as inside or outside for NAT
• policy—Assigns a policy to the ingress or egress of an interface
• redirects—Enables transmission of ICMP redirect messages
• route-cache flow sampled—Enables J-Flow statistics on an interface
• route-map ip-subscriber—Configures the interface for route-map processing
• sa-validate—Verifies that a packet has been sent from a valid source address
• tcp adjust-mss—Modifies MSS on TCP connections when path MTU detection is not sufficient
• unnumbered—Configures IP on this interface without a specific address
• virtual-router—Specifies a virtual router to which interfaces created by this profile attach

IPv6 Characteristics

A profile can contain one or more of the following IPv6 characteristics:

• address—Configures an IPv6 address on an interface
• http—Configures the HTTP local server for IPv6
• http redirectUrl—Configures the URL to which a subscriber’s initial Web browser session is redirected
• nd—Enables Neighbor Discovery on an interface
• nd managed-config-flag—Sets the “managed address configuration” flag in IPv6 router advertisements
• nd other-config-flag—Sets the “other stateful configuration” flag in IPv6 router advertisements
• nd prefix-advertisement—Specifies which IPv6 prefixes are included in IPv6 router advertisements
• nd ra-interval—Configures the interval between IPv6 router advertisements
• nd ra-lifetime—Configures the router advertisement lifetime
• nd reachable-time—Configures the amount of time the router can reach an IPv6 node after a reachability confirmation event occurs
• nd suppress-ra—Disables router advertisement transmissions
• mld—Configures the MLD interface
• mtu—Configures the MTU for a network
• policy—Attaches (or removes) a policy to (or from) an interface
• sa-validate—Enables source address validation
• unnumbered—Configures IPv6 on this interface without a specific address
• virtual-router—Specifies a virtual router to which interfaces created by this profile attach

L2TP Characteristics

A profile can contain the following L2TP characteristic:

• policy—Assigns an L2TP policy list to a profile

MLPPP and PPP Characteristics

A profile can contain one or more of the following MLPPP or PPP characteristics:

• aaa-profile—Assigns an AAA profile
• authentication—Requests PAP or CHAP authentication from a PPP peer
• authentication virtual router—Specifies a virtual router for the authentication virtual router context
• chap challenge length—Modifies the length of the CHAP challenge
• fragmentation—Enables fragmentation on an MLPPP link interface
• hash-link-selection—Enables use of a hash-based algorithm to select the link on which the router transmits non-best-effort (high-priority) packets, such as voice or video, on dynamic MLPPP interfaces
• initiate-ip—Initiates IPv4 for passive clients
• initiate-ipv6—Initiates IPv6 for passive clients
• ipcp lockout—Terminates an invalid subscriber entry and prevents additional Internet Protocol Control Protocol negotiations
• ipcp netmask—Controls the negotiation of the IPCP netmask option 0x90; disabled indicates do not negotiate, enabled indicates negotiate
• keepalive—Specifies a keepalive value, in seconds
• log—Enables packet or state machine logging for any dynamic interfaces that use the profile
• magic-number disable—Disables negotiation of the local magic number
• magic-number ignore-mismatch—Causes the router to ignore a mismatch of the LCP peer magic number and retain the PPP connection when the peer has not negotiated an LCP magic number.
• max-negotiations—Configures the maximum number of LCPl, IPCP, or IPv6CP renegotiation attempts that the router accepts before terminating a PPP session
• mru—Configures the maximum receive unit size for the interface
• multilink enable—For MLPPP interfaces only, enables the creation of dynamic MLPPP interfaces
• multilink multiclass—Enables the creation of multilink classes on a multiclass MLPPP interface
• multilink multiclass fragmentation—Enables fragmentation on a multiclass MLPPP interface
• multilink multiclass reassembly—Enables reassembly on a multiclass MLPPP interface
• multilink multiclass traffic-class—Configures mapping of QoS traffic classes to multilink classes on a multiclass MLPPP interface
• passive-mode—Forces the interface into passive mode before LCP negotiation begins, for a period of one second to enable slow clients to start up and initiate the LCP negotiation
• peer dns—Resolves conflicts when the E Series router and the PPP peer system have the primary and secondary DNS addresses configured with different values
• peer wins—Resolves conflicts when the E Series router and the PPP peer system have the primary and secondary WINS addresses configured with different values
• reassembly—Enables reassembly on an MLPPP link interface

PPPoE Characteristics

A profile can contain one or more of the following PPPoE characteristics:

• AC name—Adds an access concentrator name to the profile configuration
• always-offer—Causes the router to offer to set up a session for the client, even when the router has insufficient resources to establish a session
• duplicate-protection—Prevents a client from establishing more than one session using the same MAC address

  Note: When the duplicate protection feature is enabled for PPPoE sessions that contain the IWF-Session DSL VSA (26–254) in the Point-to-Point Protocol over Ethernet Active Discovery Request packet sent from PPPoEt clients to the access concentrator, multiple IWF PPPoE sessions that contain the same MAC address are still processed and can access network services until the maximum number of PPPoE sessions configured per major interface (configured using the pppoe sessions command) is reached.

• log pppoeControlPacket—Enables packet trace logging on PPPoE dynamic interfaces created with this profile
• motm—Causes the router to send a PADM message of the minute
• mtu—Configures the MTU
• remote-circuit-id—Enables the router to capture and process a vendor-specific tag containing a remote circuit ID transmitted from a digital subscriber line access multiplexer device
• service-name-table—Assigns a PPPoE service name table to dynamic interfaces created with this profile
• sessions—Specifies the maximum number of subinterfaces permitted on a PPPoE major interface
• url—Causes the PPPoE application to send a URL string to the new client

VLAN Characteristics

A profile can contain one or more of the following VLAN characteristics:

• advisory-rx-speed—Sets an advisory receive speed for VLAN subinterfaces
• advisory-tx-speed—Sets an advisory connect speed for VLAN subinterfaces
• auto-configure—Specifies the types of upper-interface encapsulations that are accepted or detected by the dynamic VLAN subinterface
• auto-configure agent-circuit-identifier—Enables the creation of VLAN subinterfaces that are based on agent-circuit-identifier information
• description—Assigns a description to VLAN subinterfaces that are created with this profile
• policy—Attaches (or removes) a policy to (or from) a dynamically created VLAN
• profile—Adds a nested profile assignment, which references another profile that dynamically configures an upper-interface encapsulation type over the VLAN subinterface
• service-profile—Specifies a service profile name to a dynamically created VLAN
• svlan ethertype—Specifies that the packet must use this Ethertype to create the dynamic VLAN subinterface