Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

DHCP Access Profiles for Subscriber Authentication and Accounting Parameters

Access Profiles for the DHCP Relay Agent and DHCP Local Server Overview

Starting in Junos OS Release 14.2, access profiles enable you to specify subscriber access authentication and accounting parameters. After access profiles are created, you can attach them at the [edit system services dhcp-local-server] hierarchy level on a DHCP local server for DHCP or DHCPv6 subscribers and at the [edit forwarding-options dhcp-relay] hierarchy level on a DHCP relay agent for DHCP or DHCPv6 subscribers, group of subscribers, or group of interfaces.

If you configured a global access profile at the [edit access profile profile-name] hierarchy level for all DHCP or DHCPv6 clients on a router that functions as a DHCP local server or a DHCP relay agent, the access profile configured at the [edit system services dhcp-local-server] hierarchy level on a DHCP local server for DHCP or DHCPv6 subscribers and at the [edit forwarding-options dhcp-relay] hierarchy level on a DHCP relay agent for DHCP or DHCPv6 subscribers take precedence over the global access profile.

Configuring an access profile for DHCP subscribers at the DHCP relay agent level or the DHCP local server level provide you with the flexibility and effectiveness of enabling DHCP authentication and accounting for specific subscribers instead of enabling them at a global level. If no access profile is configured at the DHCP relay agent level or the DHCP local server level, the global access profile becomes effective.

Attaching Access Profiles to DHCP Subscriber Interfaces or DHCP Client Interfaces

Starting in Junos OS Release 14.2, you can attach an access profile to a DHCP subscriber interface, to a DHCP client interface, to a group of subscriber interfaces, and to a specific subscriber or groups of subscribers. When a DHCP subscriber or DHCP client logs in, the specified access profile is instantiated and the services defined in the profile are applied to the interface, subscriber, or the group of interfaces or subscribers.

This topic contains the following sections:

Attaching an Access Profile to All DHCP Subscriber or All DHCP Client Interfaces

To attach an access profile to all DHCP subscribers or all DHCP client interfaces:

    • For DHCP local server:

    • For DHCP relay agent:

Attaching an Access Profile to a Group of DHCP Subscribers or a Group of DHCP Clients

You use the group feature to group together a set of subscriber access profiles and then apply a common DHCP configuration to the named subscriber profile group. The extended DHCP local server, DHCPv6 local server, DHCP relay agent, and DHCPv6 relay agent all support groups.

Before you begin:

  • Configure the group by entering the group group-name statement at the [edit system services dhcp-local-server] or the [edit forwarding-options dhcp-relay] hierarchy level. For DHCPv6 subscriber profiles, use the dhcpv6 option at this hierarchy level.

To attach an access profile to a group of subscribers:

  • At the DHCP configuration hierarchy, specify the name of the group and the access profile to attach to the group.

    • For DHCP local server:

    • For DHCP relay agent:

    • For DHCPv6 local server:

    • For DHCPv6 relay agent:

Attaching an Access Profile to a Group of DHCP Subscriber Interfaces or a Group of DHCP Client Interfaces

Before you begin:

To attach an access profile to a group of interfaces:

  • At the DHCP configuration hierarchy, specify the name of the interface group and the access profile to attach to the group.

    • For DHCP local server:

    • For DHCP relay agent:

    • For DHCPv6 local server:

    • For DHCPv6 relay agent:

Related Documentation

Release History Table
Release
Description
14.2
Starting in Junos OS Release 14.2, access profiles enable you to specify subscriber access authentication and accounting parameters.
14.2
Starting in Junos OS Release 14.2, you can attach an access profile to a DHCP subscriber interface, to a DHCP client interface, to a group of subscriber interfaces, and to a specific subscriber or groups of subscribers.