ON THIS PAGE
Configuring Assignment of TDF Subscriber Properties and Policy-Control Properties to IP-Based Subscribers
You must configure the criteria that Junos OS uses to
select a TDF domain for an IP-based subscriber, which determines how
the subscriber session is set up and how the subscriber traffic is
treated. (The domain-selection process does not apply to IFL-based
subscribers, who are automatically assigned to the TDF domain in which
they are configured.) You configure a term
to identify
conditions that must be matched in the incoming RADIUS request in
order to select a particular TDF domain.
You configure the selection of the policy-control properties by selecting a PCEF profile. The PCEF profile can be identified in the selected TDF domain, or you can independently configure the criteria for the selection of a PCEF profile.
Before you begin to configure TDF domain or PCEF profile selection, make sure that you have done the following:
Configured a TDF gateway.
Configured the TDF domains.
Configured the PCEF profiles.
Configured the RADIUS client.
To configure a term for TDF domain or PCEF profile selection, perform the following tasks and repeat this process for each term you want to configure:
Configuring the Term Name
To configure the name for the term
that contains
the from
statements and the then
statement:
[edit unified-edge gateways tdf gateway-name domain-selection] user@host# set term term-name
Configuring Match Conditions for the RADIUS Client
Before you begin to configure a match condition
for a RADIUS client, you must ensure that you have configured the
RADIUS client at the [edit access radius clients]
hierarchy
level, and specified it as the aaa-client
at the [edit
unified-edge gateways tdf gateway-name]
hierarchy level.
To configure a match condition for the RADIUS client that sent the incoming RADIUS request:
[edit unified-edge gateways tdf gateway-name domain-selection term term-name] user@host# set from client client-name
Configuring Match Conditions for Snoop Segments
For RADIUS requests that were snooped, the domain-selection configuration can identify the snoop segment that matched the request.
To configure a match condition for the snoop segment:
[edit unified-edge gateways tdf gateway-name domain-selection term term-name] user@host# set from snoop-segment snoop-segment-name
Configuring Match Conditions for Predefined AVPs
To configure match conditions for the called-station-id, calling-station-id, class, framed-ip-address, framed-ipv6-prefix, 3gpp-imsi, nas-ip-address, or user-name AVP in the incoming RADIUS request from the subscriber:
Configuring Match Conditions for Custom AVP Attributes
To configure match conditions for up to five custom AVP attributes (other than the called-station-id, calling-station-id, class, framed-ip-address, framed-ipv6-prefix, 3gpp-imsi, nas-ip-address, or user-name) in the incoming RADIUS request from the subscriber:
Configuring the TDF Domain to Select
To specify the TDF domain to select when the from
conditions in the term
have been matched:
[edit unified-edge gateways tdf gateway-name domain-selection term term-name] user@host# set then domain tdf-domain-name
Configuring the PCEF Profile to Select
If a particular TDF domain does not specify a PCEF profile
or you want different members of the same TDF domain to have different
PCEF profiles, you must specify the PCEF profile under the [edit
unified-edge gateways tdf gateway-name domain-selection]
hierarchy level.
To specify the PCEF profile to select when the from
conditions in the term
have been matched, use one of
the following methods: