subscr manage config dsi

7/29/2019 Subscr Manage Config DSI

1/10

Overview 263

Chapter 1 0

Configuring Subscriber Management

Th is c ha p te r d e sc rib e s h o w to s et u p s ub s cr ib e r m a n a ge m e n t o n t he E-s e rie s ro u te r.

Subscriber m anagem ent in tegra tes a var ie ty of route r f ea tures an d en ables you to

m anage your cons tant ly chan ging sub scr iber en vironm ent wi thout a ffec t ing the

per form ance you provide to your cus tom ers .

The following section s discuss subscr iber m an agem en t:

Overview on page 263

Subscriber Manage m en t Attr ibute s on page 264

Subscriber Managem ent Exam ple on page 265

Subsc ribe r M a na ge me n t Comm a nds on page 268

Monitor ing Subscr iber Management on page 271

Overview

The E-ser ies route r enab les cus tom ers to c rea te a unified subscr iber m anagem ent ,

provision ing, and service delivery en vironm en t. The flexibili ty of the router

provides a var ie ty of m ethods and configura t ions th a t ena ble cus tom ers to

dyn am ically provision new subscr ibers an d qu ickly create new value-add ed

services.

Two m ajor aspec ts of subscr iber m anagem ent a re subscr iber provis ioning an d

differentiated se rvice d elivery. The E-ser ies router e na bles you to use both stat ic

and dynam ic m ethods to add an d de le te subscr iber s . Im por tant subscr iber

m anagem ent concepts provided by JUNOSe subscriber man agem ent inc lude :

Subscriber use o f a shared m edium

Multiple subscr ibers can use th e sam e pr im ary interface

User authen t ica t ion and account ing

Differentiated services for individual subscribers


2/10

JUNOSe 6.0.x Broadband Access Configuration Guide

264 Subscriber Management Attributes

A s u b sc rib e r m a n a g em e n t e n v ir on m e n t c a n in c lu d e t h e fo llo w in g c o m p o n e n t s. Yo u

e m p lo y t he c om p o n e n t s y ou n e e d in a va rie ty o f c on fi gu ra tio n s, d e p en d in g o n yo u r

spec ific requi remen ts :

Loca l Dyn am ic Host Con figuration Protoco l (DHCP) serve r

External DHCP server

RADIUS serve r

Service De ploym en t System (SDX) app licat ion

Subscriber Management Attributes

The E-ser ies router takes ad vantage o f ma ny o f the JUNOSe features to en able you

to crea te the subscr iber m anagem ent envi ronm ent tha t bes t m ee ts your

requirem en ts. These features include :

Authe nticat ion Uses RADIUS to determ ine wh ethe r a user can access a

specific service o r resource.

Accoun tingUses RADIUS an d p olicy m an agem en t to track service usage that

can b e used for volum e-base d b illing.

Dynam ic address assignm en tUses RADIUS, DHCP, an d p rofiles to

dyn am ically al locate IP add resses to sub scr ibers.

Dynam ic policy m an agem en tUses policy and q uality of service (QoS)

m anagem ent to ass ign an d m oni tor subscr iber ban dwidth res t ric t ions .

Secur ityUses p olicy m anagem ent , source a ddress va l ida t ion, and m edia

access co ntrol (MAC) add ress validation to grant subscr iber a ccess an d to

en able the use of classification w hen m on itor ing subscr iber traffic flows.

Dynam ic interfacesAutom atically creates an interface colum n ba sed on a

catalyst packet or even t .

Ma r kin g Us e s p o lic y m a n a g em e n t m a r kin g t o e n a b le d iffe re n t ia l t re a tm e n t o f

specific packets.

Policy routingUses policy m an agem en t routing policies to ass ign s ubscr iber

routes that are based on classification.

Dynamic IP Subscriber Interfaces

You can se t up your subscr iber m anagem ent en vironm ent to c rea te dynam ic IP

subscr iber interfaces in two si tuationswh en a DHCP event occurs or when a

packe t i s de tec ted.

In t he fi rs t c as e, t he in t er fa ce is c re a te d w h e n a n e xt er n al D HCP s er ve r o r t he D HCP

local server respon ds to a subscr iber requ est . In the s econ d case, the subs cr iber

interface is created wh en th e router receives a pa cket (the p acket detect feature)

with a source IP address th at is not in the d em ult iplexer table. In th is second cas e

the pr im ary IP in te r face m ust be in autoconfigura t ion m ode .


3/10

Subscriber Management Example 265

Chapter 10 : Configuring Subscriber Management

Subscriber m an agem en t uses the fol lowing process wh en validating the IP source

address of the p acke t :

If t he a d d re ss in n o t va lid , n o s ub s cr ib e r in t er fa ce is c re a te d . A d is ca rd e n tr y is

added to the dem ult ip lexer table , and an e r ror me ssage is genera ted.

If the ad dress is valid with respect to the ad dress ran ges configured o n the

p r im a r y IP in t e rfa c e, s u b sc rib e r m a n a g em e n t u s es p a c ke t in fo rm a t io n t o s e le c t

the ap propr ia te dyn am ic subscr iber in te r face profile . The com m and s

correspon ding to the profile are then used to create th e subscr iber interface.

Subscriber Management Example

F igure 21 shows a subscriber m anagem ent envi ronm ent tha t inc ludes an exte rna l

DHCP server, a RADIUS server, the SDX application, and the DHCP external server

app licat ion run ning o n the E-ser ies router.

The E-series routers DHCP external server application is used with other JUNOSe

features to provide subscr iber management. Using the routers DHCP external

s er ve r a p p lic at io n fo r s ub s cr ib e r m a n a ge m e n t e n a b le s y ou to ta ke a d va n ta ge o f t he

following feature s:

P ro file a s sig n m e n t A d y n a m i c s u b sc rib e r in t e rfa c e p r ofi le is a s so c ia t ed w it h a

specific source add ress by the rou ters packet d etect feature.

D yna mic subscr ibe r in t e r fa c e pa c ke t de t e c tion a nd ina c t iv it y t im e r Subsc ribe r

interfaces are dyn am ically created base d on p acket inform ation that is

identified by the p acket detection feature. The inactivity t im er dete rm ines

when a dyn am ic subscr iber in te r face expi res and need s to be de le ted.

DHCP externa l server applicat ionDHCP packets are exam ined to determ ine

the state of subscr ibers.

Figure 21 : DHCP External Server

In F igure 21, t h e s u b sc rib e r r eq u e st s a n a d d re s s fr om t h e D HCP s e rv er. Th e E-s e rie s

routers DHCP external server app licat ion m onitors all DHCP com m un ications

betw een the su bscr iber an d the DHCP server. Once th e sub scr iber receives its IP

address , the subscr iber can access the Inte rne t and use the va lue-added se rvices

provided b y the SDX app licat ion. The following p aragraph s de scr ibe the var ious

procedures per formed in the subscr iber management envi ronment .

ERX

(with DHCP externalserver application)

g013393

InternetEdge network

with

DHCP relay

SDXRADIUSserver

DHCPserver

SubscriberXYZ


4/10


266 Subscriber Management Example

Subscriber PC

Requests an IP add ress f rom the DHCP server

E-series Router

Monitors DHCP traffic betwee n th e sub scr iber a nd the DHCP server :

Iden tifies the sub scribers IP ad dres s, MAC add ress, GiAdd r, an d Clien t

identifier

Extracts the lease t im e, creates a sha dow lease, and star ts its own lease

timer that is associated with the subscr iber

Views the subscr iber as act ive on ce the sub scr iber sen ds a pa cket af ter

receiving an IP ad dress f rom DHCP. The rou ter then :

Processes the su bscr ibers IP add ress by using a route m ap

Extracts the d yna m ic subs cr iber interface profile (optiona l)

The profile is used to authen ticate the sub scr iber with auth en ticat ion,

auth orizat ion, accoun ting, an d ad dress assignm en t (AAAA) an d

RADIUS to ob tain inform ation for th e sub scribers IP interface.

Creates the s ubscr ibers dyn am ic subscr iber interface (DSI)

If the SDX software is configured, th e route r also aler ts the SDX program that

the su bscr ibers DSI an d a ddres s exist .

The DHCP extern al server applicat ion con tinu es to m on itor al l t raffic betwe en

t he s ub s cr ib e r a n d t he D HCP s er ve r, a n d p e rio d ic ally re se ts t he s h ad o w le a se itor igina l ly c rea ted w hen the sub scr iber firs t r eques ted a n IP ad dress . When the

subscr iber disconn ects, the sha dow lease eventu ally expires at wh ich t ime th e

E-ser ies route r p erform s th e fol lowing:

Deletes the DSI

Aler ts the SDX program that the DSI has b een deleted

Aler ts the SDX program that the su bscr ibers add ress has b een deleted

SDX Program

Provides en han ced services to the subscr iber.


5/10

Subscriber Management Example 267


Configuring Subscriber M anagement with a n External DHCP Server

To con figure subscr iber m an agem en t for clients by using an extern al DHCP server,

as in F igure 21, use the fol lowing proce dure o n th e E-ser ies router :

1 . Ena b l e the D H CP e x t e rna l se r ve r a pp lic a tion .

host1(config)#service dhcp-ext ernal

2. Spec ify each DHCP server for which to m oni tor tr a ffic. You can spec ify a

m aximum of four DHCP servers.

host1(config)# ip dhcp-ext ernal server-address 10 .10 .10 .1

3. Configure a default pol icy for subscr iber s , us ing a p revious ly configured

classifier group .

host1(config)#policy-list filterAll

host1(config-policy)# classifier-group filterGroupAhost1(config-policy)# exit

4 . Configure a dyna m ic subsc ribe r in t e r fa c e po lic y.

host1(config)#profile disableUserhost1(config-profile)# ip policy input filterAllhost1(config-profile)# ip policy output filt erAllhost1(config-profile)# exit

5 . Co n figu re a ro ut e m a p .

host1(config)# route-map routeMapWest21host1(config-route-map)# set ip int erface-profile disableUserhost1(config-route-map)# exit

6 . En a b le a uto co n fi gu ra t io n m o d e .

host1(config)# interface gigabitEthernet 12/ 0host1(config-if)# ip address 192.168.1.1 255.255.255.0host1(config-if)# ip auto-configure ip-subscriberhost1(config-if)# ip rout e-map ip-subscriber routeM apWest1 1host1(config-if)# ip aut o-detect ip-subscriberhost1(config-profile)# exit


6/10


268 Subscriber Management Commands

Subscriber Management Commands

This sec tion descr ibes the com m and s tha t you use to configure subscr iber

m anagem ent . For comm and s re la ted to a spec ific com pon ent , see the appropr ia te

doc ume nta t i on .

DHCPChapter 8 , Configur ing DHCP

PoliciesJUN OSe P olicy an d QoS Con fi gu r atio n Gu id e , Ch ap ter 1 , Con fi gu ri n g

Policy Management

QoSJUNO S e P olic y an d QoS Con fi gu r atio n Gu id e , Chap ter 2 , Con fi gu ri n g

Quali ty o f Service

Route Ma psJUNO Se Rou tin g Prot oco ls Con fi gu r atio n Gu id e , Vol. 1 , Chap ter 1 ,

Configuring R outing Policy

SDX softwareSDX app licat ion docum en tation set

clear ip demux

Us e t o c le a r a ll d y n a m i ca lly c re a te d d e m u lt ip le x er t ab le e n t rie s a s so c ia t ed w it h

the route -m ap process ing of the se t ip so u rce -pre fi x c o m m a n d .

denyDrop add resses tha t appear in the source address range

prim aryAssociate the so urce prefix with the pr im ary IP inte rface

Example

host1(config-if)# clear ip demux

There is no n o version.

ip auto-configure ip-subscriber

Use to configure a p r ima ry IP interface to enab le dyn am ic creation of

subscr iber interfaces.

The router creates the required dynamic subscr iber interfaces when the IP

a d d re s s is a s sig n e d to t h e a s so c ia t ed s u b sc rib e r. Th e a d d re s s m ig h t b e a s sig n e d

b y a n e x te r n a l D H CP s e rve r, t h e D HCP lo c al s e rv er, o r t h e p a c ke t d e t ec t fe a tu re .

You can issue th is com m and f rom e i ther Inte r face Configura t ion m ode or

Subinterface Configuration mode.

Example

host1(config-if)# ip auto-configure ip-subscriber

Use the n o version to disable dyna m ic creation of subscr iber inte rfaces

associated w ith this pr ima ry IP interface.
http://dhcp-server-config.pdf/http://../swconfig-policy-qos/policy-mgmt-config.pdfhttp://../swconfig-policy-qos/policy-mgmt-config.pdfhttp://../swconfig-policy-qos/qos-config.pdfhttp://../swconfig-policy-qos/qos-config.pdfhttp://../swconfig-routing-vol1/routing-policy-config.pdfhttp://../swconfig-routing-vol1/routing-policy-config.pdfhttp://../swcmdref/c-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/c-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swconfig-routing-vol1/routing-policy-config.pdfhttp://../swconfig-routing-vol1/routing-policy-config.pdfhttp://../swconfig-policy-qos/qos-config.pdfhttp://../swconfig-policy-qos/qos-config.pdfhttp://../swconfig-policy-qos/policy-mgmt-config.pdfhttp://../swconfig-policy-qos/policy-mgmt-config.pdfhttp://dhcp-server-config.pdf/


7/10

Subscriber Management Commands 269


ip a uto-dete ct ip-subscriber

Use to set the rou ters pa cket detect feature a nd spe cify that IP autom atically

de tec t packe ts tha t do not m atch any en t r ies in the dem ult ip lexer table . When

an un m atched packe t is de tec ted, an event is genera ted tha t de te rm ineswhether a dyn am ic subscr iber in te r face should be c rea ted.

Example

host1(config-if)# ip aut o-detect ip-subscriber

Us e t he n o ve rs io n t o r es to re t h e d e fa u lt , in w h ic h p a c ke t d e t ec tio n is d is a b le d .

ip destinat ion-prefix

Use to specify a de st ination add ress for a sub scr iber interface or for a pr im ary

IP in terface.

Use the d e n y keyword to drop a ll packe ts tha t match the com m and .

Example

host1(config-if)# ip destination-prefix 10.0.0 .0 25 5.0.0.0

Use the n o vers ion to rem ove the assoc ia t ion be tween the in te r face an d the

spec ified IP des t ina t ion add ress and m ask.

ip inactivity-timer

Use to configure the ina ctivity t ime r value. A dynam ically created subscr iber

interface is d eleted if it is inactive for a per iod lon ger tha n the inactivi ty t im er

value.

The t im er va lue can be f rom 1 through 6533 5 m inutes .

A t im er value of 0 specifies that d yna m ically created subscr iber interfaces arenever d eleted by th e inactivity t im er.

Example

host1(config-if)# ip inactivity-timer 1 00

Use the n o version to restore the default , in wh ich inactivi ty t im er feature is

disabled.

ip route -ma p ip-subscriber

Use to configure an interface to perform route-ma p process ing, and to specify

the route m ap th at is applied to the IP interface sub scr iber . If no route m ap is

specified, the n a ll packets w ill t r igger the creation o f a dyna m ic subscr iber

interface.

Example

host1(config-if)# ip rout e-map ip-subscriber bost onRouteM ap

Use the n o vers ion to de le te the route m ap.
http://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdf


8/10


270 Subscriber Management Commands

ip service-profile

Us e to s p ec ify a s er vic e p ro file n a m e a n d to e n te r Se rv ic e P ro file Co n fig ura tio n

m o d e . Se rv ic e p ro file s c on ta in u se r a n d p a ss wo rd in fo rm a t io n , a n d a re u se d in

route m aps for subscr iber m anagem ent an d to authen t ica te subscr iber s wi thRADIUS.

You can specify a service profile n am e with up to 8 0 cha racters.

Example

host1(config-route-map)# set ip service-profile class1Servicehost1(config-service-profile)#

Use the n o version to delete th e service profile.

ip source-prefix

Use to specify a sou rce add ress for a subscr iber interface.

Use the d e n y keyword to drop a ll packe ts tha t match the com m and .

Example

host1(config-if)# ip source-prefix 10.0.0 .0 2 55.0.0 .0

Use the n o vers ion to rem ove the assoc ia t ion be tween the in te r face an d the

spec ified IP source address and m ask.

password

Use to specify the p asswo rd for an IP service profile.The p asswo rd is used a s

the dyn am ica lly c rea ted password by JUNOSe subscr iber m anagem ent .

Example

host1(config-service-profile)# password mypassword

Use the n o version to rem ove the pa ssword from the IP service profile.

set ip interface-profile

Use to specify a dyn am ic subscr iber interface profile that is used in th e route

m a p .

Example

host1(config)# route-map mapForEPorthost1(config-route-map)# set ip int erface-profile disableUser

Use the n o version to de lete the interface profile f rom the route m ap.
http://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/opqr-commands.pdfhttp://../swcmdref/s-commands.pdfhttp://../swcmdref/opqr-commands.pdfhttp://../swcmdref/s-commands.pdfhttp://../swcmdref/i-commands.pdfhttp://../swcmdref/i-commands.pdf


9/10

Monitoring Subscriber Management 271


set ip source-prefix

Use to specify a source ad dress ran ge that w ill be inse r ted into a spe cific

interface, and th e act ion to take with the ran ge.

denyDrop add resses tha t appear in the source address range

prim aryAssociate the so urce prefix with the pr im ary IP inte rface

Example

host1(config-route-map)# set ip source-prefix 1 0.10.3 0.0 25 5.255 .255.0 primary

Use the n o vers ion to rem ove the source add ress range f rom the route m ap.

user-name

Use to spe cify the use rnam e for an IP service profile. The us erna m e is used as

the dyn am ica lly c rea ted usern am e by JUNOSe subscr iber m anagem ent .

Example

host1(config-service-profile)# user-name west ford211

Use the n o version to rem ove the user n am e from the IP service profile.

Monitor ing Subscriber Management

This sec tion descr ibes com m and s you can use to display s ta tus informat ion an d

sta t is t ics for the subscr iber m anagem ent en vironm ent .

show ip service-profile

Use to display inform ation for all IP service p rofiles or for a spe cific profile.

Field des cr ipt ions

ip service-profileNam e of profile

user-nam eUserna m e used to retr ieve inform ation from RADIUS for

subs cr iber interfaces

pass wordPasswo rd use d to retr ieve inform ation from RADIUS for

subs cr iber interfaces

Example

host1(config-service-profile)# show ip service-profile

ip service-profile west500

user-name: finance11

password: 3498aa

ip service-profile boston

user-name: boston1

password: 88boston
http://../swcmdref/s-commands.pdfhttp://../swcmdref/tuvwxyz-commands.pdfhttp://../swcmdref/s-commands.pdfhttp://../swcmdref/s-commands.pdfhttp://../swcmdref/s-commands.pdfhttp://../swcmdref/tuvwxyz-commands.pdf


10/10


272 Monitoring Subscriber Management

subscr manage config dsi

Documents