Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Activating and Deactivating Subscriber Services Locally with the CLI

Subscriber management enables you to use the Junos OS CLI to locally activate or deactivate dynamic subscriber services for subscribers who are currently logged in to the network. You can activate an initial service for the subscriber, provide an additional service, or deactivate the subscriber’s current service.

A CLI-based activation or deactivation of a subscriber service fails if any of the following conditions exist: A RADIUS CoA operation or a previous CLI-based activation or deactivation is active for the subscriber. A unified in-service software upgrade (unified ISSU) operation is active. The specified service could not be activated or deactivated. Note: A CLI-based activation or deactivation of a subscriber service also fails if a PCRF has successfully activated any services for the subscriber. You must override the PCRF provisioning to be able to activate or deactivate services for such a subscriber. For more information, see Disabling PCRF Control of a Subscriber Session.

1. (Optional) Verify the subscriber’s ID, and ensure that provisioning is not enabled. To display the session IDs of all current subscribers, use the show subscribers detail or show network-access aaa subscribers command.
   user@host> show network-access aaa subscribers session-id 55 detail

   Type: dhcp
   Username: larry@isp5.net 
   Stripped username: larry
   AAA Logical system/Routing instance: default:default
   Target Logical system/Routing instance: default:retail-onlinecompany-ca
   Access-profile:retailer-onlinecompany-sjc
   Session ID: 55
   Accounting Session ID: 55
   Multi Accounting Session ID: 0
   IP Address: 192.168.44.104
   Authentication State: AuthStateActive
   Accounting State: Acc-Start-Send
   Provisioning-type: none
   Service name: basic-service
    Service State: SvcActive
    Session ID: 56
    Session uptime: 00:01:45
   

2. Activate the service for the subscriber.
   user@host> request network-access aaa subscriber add session-id 55 service-profile gold-service
3. (Optional) Verify that the new service is activated for the subscriber. (The initial basic-service is also listed because it has not been deactivated.)
   user@host> show network-access aaa subscribers session-id 55 detail

   Type: dhcp
   Username: larry@isp5.net 
   Stripped username: larry
   AAA Logical system/Routing instance: default:default
   Target Logical system/Routing instance: default:retail-onlinecompany-ca
   Access-profile:retailer-onlinecompany-sjc
   Session ID: 55
   Accounting Session ID: 55
   Multi Accounting Session ID: 0
   IP Address: 192.168.44.104
   Authentication State: AuthStateActive
   Accounting State: Acc-Start-Send
   Provisioning-type: none
   Service name: basic-service
    Service State: SvcActive
    Session ID: 56
    Session uptime: 00:02:15
   Service name: gold-service
    Service State: SvcActive
    Session ID: 57
    Session uptime: 00:00:30
   

1. Display the active services for the specified subscriber. The following example shows that the basic-service and gold-service are active.
   user@host> show network-access aaa subscribers session-id 55 detail

   Type: dhcp
   Username: larry@isp5.net 
   Stripped username: larry
   AAA Logical system/Routing instance: default:default
   Target Logical system/Routing instance: default:retail-onlinecompany-ca
   Access-profile:retailer-onlinecompany-sjc
   Session ID: 55
   Accounting Session ID: 55
   Multi Accounting Session ID: 0
   IP Address: 192.168.44.104
   Authentication State: AuthStateActive
   Accounting State: Acc-Start-Send
   Provisioning-type: none
   Service name: basic-service
    Service State: SvcActive
    Session ID: 56
    Session uptime: 00:02:15
   Service name: gold-service
    Service State: SvcActive
    Session ID: 57
    Session uptime: 00:00:30
   

2. Deactivate the service for the subscriber. The following example deletes the subscriber’s basic-service service.
   user@host> request network-access aaa subscriber delete session-id 55 service-profile basic-service
3. (Optional) Verify that the deleted service is no longer active for the subscriber. (The gold-service is still listed because it has not been deactivated.)
   user@host> show network-access aaa subscribers session-id 55 detail

   Type: dhcp
   Username: larry@isp5.net 
   Stripped username: larry
   AAA Logical system/Routing instance: default:default
   Target Logical system/Routing instance: default:retail-onlinecompany-ca
   Access-profile:retailer-onlinecompany-sjc
   Session ID: 55
   Accounting Session ID: 55
   Multi Accounting Session ID: 0
   IP Address: 192.168.44.104
   Authentication State: AuthStateActive
   Accounting State: Acc-Start-Send
   Provisioning-type: none
   Service name: gold-service
    Service State: SvcActive
    Session ID: 57
    Session uptime: 00:00:30