Configuring a Local Subscriber for a Dynamic IPoA or Bridged Ethernet Interface

For dynamic interfaces that do not have a PPP layer, such as IPoA, you can use the subscriber command to configure an ATM 1483 subinterface to be authenticated automatically by the RADIUS server. The subscriber command uses a RADIUS username and optional password for identification and is available only for bridged Ethernet and IPoA configurations. This command is used for dynamic encapsulations that do not provide the authentication information remotely, as PPP does.

For dynamic interfaces with a PPP layer, the RADIUS username and password are obtained from the remote client, and authentication is performed with the RADIUS server. The attributes obtained from RADIUS can then be used to configure any higher-layer dynamic interfaces, such as IP, that are built over PPP.

If your router is running stateful SRP switchover (high availability), the use of the subscriber command to configure RADIUS authentication for subscribers on dynamic bridged Ethernet interfaces might suspend stateful SRP switchover on the router or prevent stateful SRP switchover from becoming active. For more information about using the subscriber management application to bypass this limitation, see Subscriber Authentication on Dynamic Bridged Ethernet over Static ATM Interfaces.

To configure a local subscriber on the E Series router to support authentication and configuration from RADIUS for a dynamic IPoA or bridged Ethernet interface:

• Issue the subscriber command in Subinterface Configuration mode.
  1. To set IP as the dynamic-layer upper interface:
     host1(config-subif)#subscriber ip user-prefix charlie domain myisp password-prefix lucy
  2. To set bridged Ethernet as the dynamic-layer upper interface:
     host1(config-subif)#subscriber bridgedEthernet user westford003 domain acmecorp.east password xyz123

  Use the no version to remove the subscriber.