Navigation
Back up to About Overview
[+] Expand All
[-] Collapse All
A
- access lines 1
- accesses
- configuring subscriptions
- accounting
- anonymous subscriber
- attributes
- authenticated subscriber
- authentication plug-ins
- authorization plug-ins
B
C
- captive portal
- classification scripts
- conditions 1
- configuring
- descriptions
- DHCP classification, C Series Controller
- interface classification, C Series Controller
- structure
- subscriber classification, C Series Controller
- target, C Series Controller
- component interactions
- conventions
- COPS (Common Open Policy Service)
- custom RADIUS accounting plug-ins 1
- configuring
- custom RADIUS authentication plug-ins 1
- configuring
- customer support 1
D
- default retailer authentication plug-ins
- configuring
- default retailer DHCP authentication plug-ins
- configuring
- denial-of-service attacks
- DHCP (Dynamic Host Configuration Protocol)
- address assignment
- classification scripts. See classification scripts
- options
- profiles
- subscribers
- documentation
E
- enterprise
- enterprise subscribers 1
- adding
- enterprise subscribers, login process
- event publishers
- configuring
- default retailer authentication, configuring
- default retailer DHCP authentication, configuring
- description
- retailer-specific
- service-specific
- virtual router-specific
- external plug-ins
- configuring
F
- file upload settings for log rotation
- configuring
- flat file accounting plug-ins 1
- flexible RADIUS accounting plug-ins 1
- attributes, defining
- configuring
- RADIUS packets, defining
- flexible RADIUS authentication plug-ins 1
- attributes, defining
- configuring
- RADIUS packets, defining
- setting responses
- FTP server for log rotation
G
- general properties
- configuring
H
- HTTP proxy 1, 2
- HTTPS traffic
I
- interface classification scripts. See classification scripts
- interim accounting, configuring on SAE
- internal plug-ins
- configuring
L
- LDAP authentication plug-in 1
- configuring
- limiting subscribers plug-in 1
- configuring
- log rotation
- overview
- logging
- login events, description
- login process
- login registration
- configuring
- logout process, residential
M
- managers
- manuals
N
- NAT (Network Address Translation)
- notice icons
P
- plug-ins
- activating service sessions
- authentication
- authorization
- basic RADIUS accounting 1
- basic RADIUS authentication 1
- creating subscriber sessions
- custom RADIUS accounting 1
- custom RADIUS authentication 1
- defining RADIUS packets
- DHCP address assignment
- event publishers. See event publishers
- external
- flat file accounting 1
- flexible RADIUS accounting 1
- flexible RADIUS authentication 1
- internal 1
- LDAP authentication 1
- limiting subscribers 1
- state synchronization
- tracking
- policy groups
- policy management
- PPP subscribers
- prevention, use of unauthorized resources
- protocols
- proxy HTTP 1, 2
- proxy request management
- public addresses, VPNs
Q
R
- RADIUS accounting
- RADIUS attributes
- defining in RADIUS plug-ins
- examples, defining in RADIUS plug-ins
- RADIUS client library, custom RADIUS plug-ins
- RADIUS packets, customizing in plug-ins
- RADIUS peers
- configuring in plug-ins
- RADIUS plug-ins 1, See also plug-ins
- redirect server
- assessing load
- configuration statements
- configuring
- configuring DNS server for
- configuring HTTP proxy support
- configuring redundant
- directory connection
- failover
- file extensions
- logging
- number of requests
- protection against denial-of-service attacks
- redundancy 1, 2, 3
- static route to router
- traffic definition
- verifying
- redundancy
- residential subscribers 1
- adding
- login process. See login process
- retailers
- subscribers 1
- router subscribers 1
- adding
- routing instances
- routing scheme
S
- SAE (service activation engine)
- classification scripts. See classification scripts
- login events
- login process. See login process
- SAE (service activation engine), configuring
- service activation engine. See SAE
- service sessions
- sites 1, 2, 3
- subscriber 1
- state synchronization plug-in interface
- configuring
- static IP subscribers, login process
- static routing
- subscriber classification scripts. See classification scripts
- subscriber folders 1
- adding
- subscriber sessions
- subscribers
- 3gpp attributes (Gx router driver)
- adding
- enterprise 1
- inheriting properties
- inheriting subscriptions
- residential 1
- retailer 1
- router 1
- sessions
- sites 1
- types
- subscriptions 1
- access, configuring
- an orderly deactivation, activation order, specifying
- configuring
- multiple per subscriber
- support, technical See technical support
T
- targets. See classification scripts
- technical support
- text conventions defined
- tracking plug-ins 1
- configuring
U
- UDP ports
- User Datagram Protocol. See UDP
V
- validating
- virtual private networks. See VPNs
- VPNs (virtual private networks)
- adding
- configuration requirements
- configuration statements
- extranet clients, modifying
- invalid subscriptions
- modifying
- routing schemes
- using NAT
- validating
Download This Guide
Verifying and Updating Configuration of Extranets for VPNs
From the SRC CLI, you can correct errors in extranet configuration when these errors result from directory or portal errors. In the extranet configuration, an extranet client of an object must be imported by that object.
In the SRC configuration for a subscriber that is the client of an extranet client, you specify a VPN for the imported extranet client. Typically, you add the extranet client and specify the imported extranet from the Enterprise Manager Portal. You can use the SRC CLI to verify the configuration and to make updates to the existing configuration.
To view information about extranet configuration and update it:
- From configuration mode, access the configuration statement
that represents the configuration for the VPN.[edit]user@host# edit subscribers retailer name vpn vpn-id
or
[edit]user@host# edit subscribers retailer name subscriber-folder folder-name enterprise name vpn vpn-idwhere vpn-id is the name of the routing instances on a device running Junos OS that implements the VPN.
- View the configuration for the VPN. For example:
[edit subscribers retailer Acme vpn 1234] user@host# show extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users, o=umc" "enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];
- (Optional) Change or add the distinguished name (DN) of
a retailer or an enterprise that is an extranet client of this VPN. [edit subscribers retailer name vpn vpn-id ]user@host# set extranet-client extranet-client
For example:
[edit subscribers retailer name vpn vpn-id ]user@host# set extranet-client enterpriseName=Acme2,ou=local,retailername=default, o=Users, o=umc - (Optional) Change or add extranets to be imported by specifying
the DN of the extranet.[edit subscribers retailer name vpn vpn-id ]user@host# set imported-extranets imported-extranets
You can specify one or more extranets.
- Verify that the updated configuration is correct.
[edit subscribers retailer name vpn vpn-id ] user@host# show [edit subscribers retailer Acme vpn 1234] user@host# show extranet-client [ "enterpriseName=Acme, ou=local, retailername=default, o=Users, o=umc" "enterpriseName=Acme2, ou=local, retailername=default, o=Users, o=umc""enterpriseName=WidgetCo, ou=local, retailername=default, o=Users, o=UMC "];
Related Documentation
- Before You Add a Junos OS VPN to the SRC Configuration
- Configuration Statements for Adding VPNs and Extranet Clients
- Adding VPNs for Retailers and Enterprises
- Locating and Removing Inactive Subscriptions to a VPN
