Understanding DVLAN (Single/Dual tag) for Subscriber Services Scaling (Junos Evolved for ACX7100-48L, ACX7332, and ACX7348 Devices)
DDOS Policers Configuration for Juniper BNG CUPS
The default DDOS policer feature provides configuration options for the BBE DDOS protocols DHCPv4, DHCPv6, PPPoE, PPP, and L2TP. These configuration are supported on ACX7100-48L as a BNG User Plane with the desired scale and performance required to bring support BBE subscribers.
This configuration of DVLAN (single and dual tag) for subscriber services performance scaling supports the following:
- DHCP (IP-DEMUX and IP-DEMUX lite) and PPPoE subscribers (IPv4, IPV6, and dual stack) with CoS lawful intercept and filter support.
- DVLAN (Single and dual tag) with L2TP LAC DDOS policers configuration for BBE protocols. Individual BBE protocol and DDOS protocol group configuration is enabled. Only the aggregate DDOS protocol DHCPv6 is active.
- Subscriber scale qualification with Class of Support (CoS) for L2TP access concentrator (LAC) subscriber interfaces for IPV4, IPV6 and dual stack.
The combined DDOS policer protocol group dhcpv4v6 is supported on ACX
series devices. This policer group supports the aggregated traffic of BBE protocols (DHCPv4,
DHCPv6, PPPoE, PPP and L2TP).
Following are the BBE DDOS protocol group configurations supported on ACX7100-48L, ACX7332,
and ACX7348 devices using the set system ddos-protection protocols command
:
-
user@root# set system ddos-protection protocols dhcpv6
-
user@root# set system ddos-protection protocols l2tp -
For individual policers you can configure the DDOS parameters like bandwidth, burst as follows:
user@root# set system ddos-protection protocols dhcpv4 aggregate
Support for BNG PPP and L2TP-LAC on Non-default Routing Interfaces
BBE is disabled by default. You can enable the BBE protocols by using the following configurations:
BNG User Plane Mode
You can configure the subscriber management mode as a BNG User Plane by using the following configuration.
system {
services {
subscriber-management {
enable;
mode {
user-plane {
user-plane-name bng-user-plane-name;
transport
inet user-plane-ip-address;
}
control-plane {
bng-controller-name bng-cups-controller-name;
transport {
inet control-plane-ip-address;
}
}
}
}
}
}An additional PPPoE underlying configuration option is available for the BBE support in the
control-plane mode. See the following configuration:
[edit system services subscriber-management interfaces interface-name unit logical-unit-number]
pppoe-underlying-options {
auto-configure;
}In the above DDOS protocol group, there is one aggregate policer and one or more per-packet type policers. Aggregate policer runs for all packet traffic belonging to that protocol, while per-packet type policers run for traffic belonging to an individual packet type of that protocol, for example, PPPoE or L2TP.
Configurations related to different subscriber-management features are enabled.
Subscriber Stacking over PWHT Interface (ACX7100-48L, ACX7332, ACX7348)
Subscriber access models using DHCP Server and Relay dual-stack and PPPoE dual-stack configurations are supported over Layer-2 pseudowire headend termination (PWHT) interfaces. This feature includes support for:
- Firewall Filters
- Hierarchical CoS
- Lawful Intercept
- Multicast.
Use the show user-plane subscribers command in BNG User Plane mode to view
the subscriber stacking configuration details. (See Understanding DVLAN (Single/Dual tag) for Subscriber
Services Scaling (Junos Evolved for ACX Series Devices) and show user-plane subscribers.)