Dynamic Bridged Ethernet Interfaces

Dynamic Bridged Ethernet Interfaces Overview

A bridged Ethernet interface is IP over bridged Ethernet over Asynchronous Transfer Mode (ATM) 1483 over ATM AAL5 over ATM.

When bridged Ethernet packets are received over ATM circuits, the bridged Ethernet and IP interfaces are dynamically constructed over the corresponding ATM 1483 interfaces and use the configuration data received from the RADIUS server, a profile, or both.

Figure 1 shows the protocol layers that represent the bridged Ethernet interface columns, and the layers within the interface columns that are static and dynamic.

Figure 1: Dynamic Bridged Ethernet over Static ATM 1483 Interface Columns

Configuring a Dynamic Bridged Ethernet Interface

When you configure dynamic bridged Ethernet interfaces, you must assign a profile. You may optionally assign a subscriber identification.

To configure dynamic bridged Ethernet interfaces:

1. Configure a physical interface.
   host1(config)#interface atm 5/0
2. Configure an ATM subinterface.
   host1(config-if)#interface atm 5/0.1
3. Configure a PVC by specifying the VCD, the VPI, the VCI, and the encapsulation type. For more information, see Creating a PVC on an ATM 1483 Subinterface.
   host1(config-subif)#atm pvc 10 10 22 aal5snap

   If you want the router to autodetect the encapsulation type, use the aal5autoconfig option.

   host1(config-subif)#atm pvc 10 10 22 aal5autoconfig
4. Do either of the following:
   • Configure the subinterface to detect and accept the dynamic bridged Ethernet encapsulation type with the default lockout time range, 1–300 seconds. For more information, see Configuring a Dynamic Interface over an ATM 1483 Subinterface.
     host1(config-subif)#auto-configure bridgedEthernet
   • Configure the subinterface to detect and accept the dynamic bridged Ethernet encapsulation type with a nondefault lockout time range. For example, the following command configures 3600 seconds (1 hour) as the minimum lockout time and 7200 seconds (2 hours) as the maximum lockout time.
     host1(config-subif)#auto-configure bridgedEthernet lockout-time 3600 7200
5. Assign a profile to match the encapsulation type of bridged Ethernet. For more information, see Dynamic Interface Configuration Using a Profile.
   host1(config-subif)#profile bridgedEthernet foo
6. (Optional) Assign subscriber identification. For more information, see Configuring a Local Subscriber for a Dynamic IPoA or Bridged Ethernet Interface.
   host1(config-subif)#subscriber bridgedEthernet user charlie domain myisp password lucy
7. (Optional) Verify your configuration.

   host1#show atm subinterface atm 5/0.1

                                  Circuit                           Interface
   Interface ATM-Prot VCD VPI VCI  Type   Encap MTU      Status       Type
   --------- -------- --- --- --- ------- ----- ---- -------------- ---------
   ATM 5/0.1 RFC-1483  10  10  22 PVC     SNAP  9180 lowerLayerDown Static
   
   Auto configure status         : dynamic
   Auto configure interface(s)   : bridgedEthernet
   Detected 1483 encapsulation   : none
   Detected dynamic interface    : none
   Interface types in lockout    : none
   
   Lockout state (seconds)       : Min Max Current Elapsed Next
   ------------------------------- --- --- ------- ------- ----
   BridgedEthernet                   1 300       0       0    1
   
   Assigned profile (IP)         : none assigned
   Assigned profile (BridgedEnet): foo
   Assigned profile (PPP)        : none assigned
   Assigned profile (PPPoE)      : none assigned
   Assigned profile (any)        : none assigned
   
   BridgedEnet subscriber info   :
   Username: charlie@myisp
   Password: lucy
   Authenticate: enabled
   
   SNMP trap link-status: disabled
   Assigned VC Class: none assigned
   
   InPackets:                0
   InBytes:                  0
   OutPackets:               0
   OutBytes:                 0
   InErrors:                 0
   OutErrors:                0
   InPacketDiscards:         0
   InPacketsUnknownProtocol: 0
   OutDiscards:              0
   InPolicedPackets:         0
   OutPolicedPackets:        0
   1 interface(s) found

Configuring Subscriber Management for IP Subscribers on Dynamic Bridged Ethernet Interfaces

You can use the JunosE subscriber management application to configure and manage IP subscribers associated with a dynamic bridged Ethernet over static ATM 1483 interface column, as described in Subscriber Authentication on Dynamic Bridged Ethernet over Static ATM Interfaces.

To use the subscriber management application to configure IP subscribers on a dynamic bridged Ethernet interface for RADIUS authentication:

1. Define an IP service profile that contains the subscriber’s RADIUS authentication parameters including the username, domain, and password.
2. Configure the interface profile from which the router creates a dynamic bridged Ethernet interface column. For more information, see Dynamic Interface Configuration Using a Profile and Configuring Profile Characteristics .
   1. Include the desired characteristics for the upper-layer encapsulation types.
   2. (Optional) Specify the name of the route map used to configure the IP subscriber interface.
   3. Use the bridge1483 service-profile command to assign the specified IP service profile to the interface profile. The IP service profile contains the RADIUS authentication parameters for subscribers on the dynamic bridged Ethernet interface.
3. Define the underlying static or dynamic ATM 1483 subinterface on which the dynamic bridged Ethernet interface column is built. For more information, see Configuring a Dynamic Bridged Ethernet Interface.
   1. Assign the specified interface profile to the ATM 1483 subinterface.
   2. Enable autodetection (autoconfiguration) of the bridged Ethernet upper-layer encapsulation type.
   3. Define the ATM PVC over which data is transmitted.
4. (Optional) Use the show profile command to verify assignment of the IP service profile to the interface profile. For more information, see Monitoring the Characteristics of a Profile Assigned to Dynamic Interfaces.

Example: Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface Using the subscriber Command

This example shows you how to use the subscriber command to configure RADIUS authentication for IP subscribers on a dynamic bridged Ethernet interface. This configuration method does not support running stateful SRP switchover on the router.

• Requirements
• Overview
• Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface

Requirements

• JunosE Release 7.1.0 or higher-numbered releases
• E Series router (ERX7xx models, ERX14xx models, the ERX310 router, the E120 router, or the E320 router)
• ASIC-based line modules that support Fast Ethernet or Gigabit Ethernet

Overview

You can use the subscriber command to configure RADIUS authentication for IP subscribers on a dynamic bridged Ethernet interface. Assume that you have issued the following commands to configure IP subscribers on a dynamic bridged Ethernet interface for RADIUS authentication. In this configuration, the subscriber command provides the subscriber’s authentication parameters, and the static ATM 1483 subinterface is the authenticating layer. Keep in mind that the subscriber command does not support running stateful SRP switchover on the router.

Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface

Step-by-Step Procedure

1. Configure the interface profile from which to create a dynamic bridged Ethernet interface. For more information, see Dynamic Interface Configuration Using a Profile.
   host1(config)#profile east
2. Include the desired attributes for the profile (in this case, IGMP). For more information, see Configuring IPv4 Characteristics for a Profile.
   host1(config-profile)#ip igmp host1(config-profile)#ip igmp immediate-leave host1(config-profile)#ip igmp group limit 6
3. (Optional) Configure the name of the route map used to configure the IP subscriber interface.
   host1(config-profile)#ip route-map ip-subscriber eastRouteMap host1(config-profile)#exit
4. Configure the static ATM 1483 subinterface to assign the east profile.
   host1(config)#interface atm 2/1.100 point-to-point host1(config-subif)#profile bridgedEthernet east
5. Configure a local subscriber for the static ATM 1483 subinterface to support RADIUS authentication. For more information, see Configuring a Local Subscriber for a Dynamic IPoA or Bridged Ethernet Interface.
   host1(config-subif)#subscriber bridgedEthernet user westford001 domain xyzcorp.east password abc123
6. Enable autodetection of the bridged Ethernet upper-layer encapsulation type. For more information, see Configuring a Dynamic Interface over an ATM 1483 Subinterface.
   host1(config-subif)#auto-configure bridgedEthernet
7. Define the ATM PVC. For more information, see Creating a PVC on an ATM 1483 Subinterface.
   host1(config-subif)#atm pvc 100 10 101 aal5snap 6400 0 0 host1(config-subif)#exit

Example: Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface Using IP Subscriber Management

This example shows you how to configure IP subscribers on a dynamic bridged Ethernet interface for RADIUS authentication using the IP subscriber management application. This configuration method uses the bridge1483 service-profile command to assign the specified IP service profile to the interface profile, and does support running stateful SRP switchover on the router.

• Requirements
• Overview
• Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface

Requirements

• JunosE Release 7.1.0 or higher-numbered releases
• E Series router (ERX7xx models, ERX14xx models, the ERX310 router, the E120 router, or the E320 router)
• ASIC-based line modules that support Fast Ethernet or Gigabit Ethernet

Overview

In this configuration, the IP service profile provides the subscriber’s authentication parameters, and the subscriber management application is the authenticating layer. To assign the IP service profile to the interface profile, use the bridge1483 service-profile command.

For more information about using the subscriber management application, see JunosE Broadband Access Configuration Guide.

Configuring IP Subscribers on a Dynamic Bridged Ethernet Interface

Step-by-Step Procedure

1. Define an IP service profile.
   host1(config)#ip service-profile eastServiceProfile
2. Assign the subscriber’s username, domain, and password to the IP service profile.
   host1(config-service-profile)#user-name westford001 host1(config-service-profile)#domain xyzcorp.east host1(config-service-profile)#password abc123 host1(config-service-profile)#exit
3. Configure the interface profile from which to create a dynamic bridged Ethernet interface. For more information, see Dynamic Interface Configuration Using a Profile.
   host1(config)#profile east
4. Include the desired attributes for the profile (in this case, IGMP). For more information, see Configuring IPv4 Characteristics for a Profile.
   host1(config-profile)#ip igmp host1(config-profile)#ip igmp immediate-leave host1(config-profile)#ip igmp group limit 6
5. (Optional) Configure the name of the route map used to configure the IP subscriber interface.
   host1(config-profile)#ip route-map ip-subscriber eastRouteMap
6. Configure the name of the IP service profile containing the authentication parameters for the dynamic bridged Ethernet interface.
   host1(config-profile)#bridge1483 service-profile eastServiceProfile host1(config-profile)#exit
7. Configure the static ATM 1483 subinterface to assign the east profile.
   host1(config)#interface atm 2/1.100 point-to-point host1(config-subif)#profile bridgedEthernet east
8. Enable autodetection of the bridged Ethernet upper-layer encapsulation type. For more information, see Configuring a Dynamic Interface over an ATM 1483 Subinterface
   host1(config-subif)#auto-configure bridgedEthernet
9. Define the ATM PVC. For more information, see Creating a PVC on an ATM 1483 Subinterface
   host1(config-subif)#atm pvc 100 10 101 aal5snap 6400 0 0 host1(config-subif)#exit