Navigation
Back up to About Overview
[+] Expand All
[-] Collapse All
A
- access lines 1
- accesses
- configuring subscriptions
- accounting
- anonymous subscriber
- attributes
- authenticated subscriber
- authentication plug-ins
- authorization plug-ins
B
C
- captive portal
- classification scripts
- conditions 1
- configuring
- descriptions
- DHCP classification, C Series Controller
- interface classification, C Series Controller
- structure
- subscriber classification, C Series Controller
- target, C Series Controller
- component interactions
- conventions
- COPS (Common Open Policy Service)
- custom RADIUS accounting plug-ins 1
- configuring
- custom RADIUS authentication plug-ins 1
- configuring
- customer support 1
D
- default retailer authentication plug-ins
- configuring
- default retailer DHCP authentication plug-ins
- configuring
- denial-of-service attacks
- DHCP (Dynamic Host Configuration Protocol)
- address assignment
- classification scripts. See classification scripts
- options
- profiles
- subscribers
- documentation
E
- enterprise
- enterprise subscribers 1
- adding
- enterprise subscribers, login process
- event publishers
- configuring
- default retailer authentication, configuring
- default retailer DHCP authentication, configuring
- description
- retailer-specific
- service-specific
- virtual router-specific
- external plug-ins
- configuring
F
- file upload settings for log rotation
- configuring
- flat file accounting plug-ins 1
- flexible RADIUS accounting plug-ins 1
- attributes, defining
- configuring
- RADIUS packets, defining
- flexible RADIUS authentication plug-ins 1
- attributes, defining
- configuring
- RADIUS packets, defining
- setting responses
- FTP server for log rotation
G
- general properties
- configuring
H
- HTTP proxy 1, 2
- HTTPS traffic
I
- interface classification scripts. See classification scripts
- interim accounting, configuring on SAE
- internal plug-ins
- configuring
L
- LDAP authentication plug-in 1
- configuring
- limiting subscribers plug-in 1
- configuring
- log rotation
- overview
- logging
- login events, description
- login process
- login registration
- configuring
- logout process, residential
M
- managers
- manuals
N
- NAT (Network Address Translation)
- notice icons
P
- plug-ins
- activating service sessions
- authentication
- authorization
- basic RADIUS accounting 1
- basic RADIUS authentication 1
- creating subscriber sessions
- custom RADIUS accounting 1
- custom RADIUS authentication 1
- defining RADIUS packets
- DHCP address assignment
- event publishers. See event publishers
- external
- flat file accounting 1
- flexible RADIUS accounting 1
- flexible RADIUS authentication 1
- internal 1
- LDAP authentication 1
- limiting subscribers 1
- state synchronization
- tracking
- policy groups
- policy management
- PPP subscribers
- prevention, use of unauthorized resources
- protocols
- proxy HTTP 1, 2
- proxy request management
- public addresses, VPNs
Q
R
- RADIUS accounting
- RADIUS attributes
- defining in RADIUS plug-ins
- examples, defining in RADIUS plug-ins
- RADIUS client library, custom RADIUS plug-ins
- RADIUS packets, customizing in plug-ins
- RADIUS peers
- configuring in plug-ins
- RADIUS plug-ins 1, See also plug-ins
- redirect server
- assessing load
- configuration statements
- configuring
- configuring DNS server for
- configuring HTTP proxy support
- configuring redundant
- directory connection
- failover
- file extensions
- logging
- number of requests
- protection against denial-of-service attacks
- redundancy 1, 2, 3
- static route to router
- traffic definition
- verifying
- redundancy
- residential subscribers 1
- adding
- login process. See login process
- retailers
- subscribers 1
- router subscribers 1
- adding
- routing instances
- routing scheme
S
- SAE (service activation engine)
- classification scripts. See classification scripts
- login events
- login process. See login process
- SAE (service activation engine), configuring
- service activation engine. See SAE
- service sessions
- sites 1, 2, 3
- subscriber 1
- state synchronization plug-in interface
- configuring
- static IP subscribers, login process
- static routing
- subscriber classification scripts. See classification scripts
- subscriber folders 1
- adding
- subscriber sessions
- subscribers
- 3gpp attributes (Gx router driver)
- adding
- enterprise 1
- inheriting properties
- inheriting subscriptions
- residential 1
- retailer 1
- router 1
- sessions
- sites 1
- types
- subscriptions 1
- access, configuring
- an orderly deactivation, activation order, specifying
- configuring
- multiple per subscriber
- support, technical See technical support
T
- targets. See classification scripts
- technical support
- text conventions defined
- tracking plug-ins 1
- configuring
U
- UDP ports
- User Datagram Protocol. See UDP
V
- validating
- virtual private networks. See VPNs
- VPNs (virtual private networks)
- adding
- configuration requirements
- configuration statements
- extranet clients, modifying
- invalid subscriptions
- modifying
- routing schemes
- using NAT
- validating
Download This Guide
Creating DHCP Profiles (SRC CLI)
When the SAE receives a DHCP discover request from the router, it uses the client’s MAC address to find a DHCP profile in cache or in the directory. If it finds a DHCP profile, the SAE uses the information in the profile to create a discover decision that it returns to the router. The discover decision includes information to select an IP address and DHCP options to configure the DHCP client.
When a DHCP subscriber logs in to the SAE through a Web portal, the SAE registers the subscriber’s equipment and creates a cached DHCP profile in the o=AuthCache directory. These profiles are keyed by the MAC address of the DHCP client device. They are created by the grantPublicIp or the registerEquipment methods.
DHCP profiles are stored in the o=AuthCache directory in the dhcpProfile object class. The dhcpProfile object class is subordinate to the cachedAuthenticationProfiles object class. Manually created profiles are keyed by the cn (common name) attribute.
For more information about how the SAE handles DHCP subscribers, see:
Use the following configuration statements to create a DHCP profile:
shared auth-cache cached-dhcp-profile name {description description; pool-name pool-name; ip-address ip-address; dhcp-options dhcp-options;boot-server-name boot-server-name; boot-file-name boot-file-name; virtual-router virtual-router; local-interface local-interface; lease-time lease-time; user-name user-name;service-bundle service-bundle; radius-class radius-class; }
To create a DHCP profile:
- From configuration mode, enter the DHCP cached authentication
profile configuration. In this sample procedure, dhcp-profile is the name of the DHCP cached authentication profile.user@host# edit shared auth-cache cached-dhcp-profile dhcp-profile
- (Optional) Configure a description for the profile.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set description description
- (Optional) Configure the name of the IP address pool on
the JunosE router from which a DHCP address is selected. [edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set pool-name pool-name
- (Optional) Configure the fixed IP address that is offered
to the DHCP client if the client is part of a network in the configured
DHCP pool.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set ip-address ip-address
- (Optional) Configure the DHCP options that are used to
configure DHCP clients.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set dhcp-options dhcp-options
- (Optional) Configure the name of the server used to boot
the DHCP client.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set boot-server-name boot-server-name
- (Optional) Configure the name of a boot file used to boot
the DHCP client. [edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set boot-file-name boot-file-name
- (Optional) Configure the name of the JunosE virtual router
that holds the IP address pool. [edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set virtual-router virtual-router
- (Optional) Configure the name of the JunosE interface
that is used to check the validity of system-created DHCP profiles.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set local-interface local-interface
- (Optional) Configure the length of time the supplied IP
address is valid.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set lease-time lease-time
- (Optional) Configure the name of DHCP user without the
domain name.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set user-name user-name
- (Optional) Configure the vendor-specific RADIUS attribute
that specifies the SRC service bundle to use.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set service-bundle service-bundle
- (Optional) Configure the RADIUS attribute class.[edit shared auth-cache cached-dhcp-profile dhcp-profile]user@host# set radius-class radius-class
- (Optional) Verify your configuration.
[edit shared auth-cache cached-dhcp-profile dhcp-profile] user@host# show boot-file-name boot.client; boot-server-name 10.212.10.180; description 'This DHCP profile is used to select addresses from the "pool100" pool.'; dhcp-options 50; ip-address 100.100.100.100; lease-time 3600; local-interface *; pool-name pool100; radius-class 0x53425232434cd; service-bundle *; user-name jane; virtual-router *;
Related Documentation
- Selecting DHCP Parameters
- Classifying DHCP Subscribers (SRC CLI)
- Syntax for DHCP Classification Targets
- DHCP Options Supported on the SAE
- DHCP Classification Conditions
