Related Documentation
- MX Series
- Configuring a Basic Dynamic Profile
- Configuring a Dynamic Profile for Client Access
- Configuring a Dynamic Profile for Various Levels of Services
- Enabling Dynamic Profiles to use Multiple Versions
- Dynamic Variables Overview
- Subscriber Interface Overview
- Use Cases for Dynamic Profiles for VPLS Pseudowires
Dynamic Profiles Overview
A dynamic profile is a set of characteristics, defined in a type of template, that you can use to provide dynamic subscriber access and services for broadband applications. These services are assigned dynamically to interfaces. The dynamic-profiles hierarchy appears at the top level of the CLI hierarchy and contains many Juniper Networks configuration statements that you normally define statically.
Dynamic profile statements appear in the following subhierarchies within the [edit dynamic-profiles] hierarchy:
- class-of-service
- firewall
- interfaces
- predefined-variable-defaults
- protocols
- routing-instances
- routing-options
- variables
This topic covers:
Dynamic Profile Interface Support
You can identify subscribers statically or dynamically. To identify subscribers statically, you can reference a static VLAN interface in a dynamic profile. To identify subscribers dynamically, you create variables for demux interfaces that are dynamically created when subscribers log in.
What Dynamic Profiles Do
A dynamic profile acts as a kind of template that enables you to create, update, or remove a configuration that includes client access (for example, interface or protocol) or service (for example, class of service (CoS)) attributes or objects that are created dynamically (for example pseudowire). Using these profiles enables you to consolidate all of the common attributes of a client (and eventually a group of clients) and apply the attributes or dynamically created objects simultaneously.
How Dynamic Profiles Work
After profiles are created, they reside on the router in a profile library. These profiles can contain various configurations. For example, you can create a client network access configuration, a services activation configuration, or both. When a router interface receives a join message from a client, the router applies the values configured in the specified dynamic profile to that router interface. The profile can contain interface, CoS, and protocol values that are applied directly to the interface. In addition, the dynamic profile can call input or output firewall filters that reside outside of the dynamic profiles hierarchy.
Dynamic Profile Version Creation
You can create new versions of dynamic profiles that are currently in use by subscribers. Dynamic profile version creation is enabled at the [edit system] hierarchy level. When enabled, you can create multiple versions of any dynamic profiles on the router. Any subscriber that logs in following a dynamic profile modification uses the latest version of the dynamic profile. Subscribers that are already active continue to use the older version of the dynamic profile until they log out or their session terminates.
When creating versions of dynamic profiles, keep the following in mind:
- You must enable or disable dynamic profile version creation
before creating or using any dynamic profiles on the router. Enabling
or disabling dynamic profile version creation after dynamic profiles
are configured is not supported.
Note: Before you can enable or disable dynamic profile version creation for a router on which any dynamic profiles are configured, you must first remove all dynamic profiles from the router configuration.
- Each version of a dynamic profile is stored in the profile database as a new profile.
- The name of the new profile version is derived by appending a string to the original base dynamic profile name. This string contains two dollar sign ($) characters to identify the version field of the profile name. These two characters are followed by numerical characters that represent the “version number” of the dynamic profile (for example, 01).
- The version number of the dynamic profile is automatically generated by the system.
- The dynamic profile that you modify is always stored as the latest version. You cannot create a modified dynamic profile and save it as an earlier version. For example, if you modify version three of a dynamic profile while it is in use, the dynamic profile is saved as version four.
- You can only modify the latest version of a dynamic profile.
- The maximum value for the version number is 99999. However, for each profile, only 10 active versions are supported at a time.
- If the dynamic profile version that you modify is not in use by any subscriber, the profile is overwritten with committed changes without creating a new version.
- After reaching the 99999th modified version of a dynamic profile, any further modifications to the dynamic profile result in overwriting that final version. If the final version is in use, any modification attempts fail upon commit.
- You can delete a dynamic profile only when none of its versions are in use.
- The dynamic profile version feature supports graceful restart and unified ISSU.
Dynamic Profile Semantic Checking
Variables are applied to dynamic profiles dynamically and cannot be checked with existing CLI commands. Semantic checking validates some variables in dynamic profiles to help identify potential configuration errors.
Semantic checks are performed during commit and during profile instantiation. Commit time checks ensure that variables appear in the correct location within the dynamic profile. Checks performed before profile instantiation ensure that the values that replace the variables are correct. The checks performed on the values include the following:
- Range validation
- Variable type validation
- Existence of variables where they are mandatory
- Variable matching to regular expressions
A commit time check failure results in an error message being displayed and logged in the /var/log/messages file and the commit failing. An instantiation failure results in an error being logged in the /var/log/messages file and the profile instantiation failing.
Related Documentation
- MX Series
- Configuring a Basic Dynamic Profile
- Configuring a Dynamic Profile for Client Access
- Configuring a Dynamic Profile for Various Levels of Services
- Enabling Dynamic Profiles to use Multiple Versions
- Dynamic Variables Overview
- Subscriber Interface Overview
- Use Cases for Dynamic Profiles for VPLS Pseudowires
Published: 2013-07-31
Related Documentation
- MX Series
- Configuring a Basic Dynamic Profile
- Configuring a Dynamic Profile for Client Access
- Configuring a Dynamic Profile for Various Levels of Services
- Enabling Dynamic Profiles to use Multiple Versions
- Dynamic Variables Overview
- Subscriber Interface Overview
- Use Cases for Dynamic Profiles for VPLS Pseudowires