Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

ANCP Operations in Different Network Configurations

This topic describes different types of supported network configurations and the sequence of events for ANCP operations in representative sample network topologies.

You can configure ANCP for any of the following interface types:

  • Static VLAN (over Ethernet) and VLAN demux (over aggregated Ethernet) interfaces and interface sets.
  • Dynamic VLAN and VLAN demux interfaces and interface sets
  • Dynamic VLAN-tagged interface sets
  • Dynamic ACI interface sets
  • Dynamic DHCP IP demux subscriber interfaces
  • Dynamic PPPoE subscriber interfaces

Subscriber sessions are dynamically created as needed for each of the devices in a household. Each household can include multiple CPE devices that access the Internet. In all cases, each household is identified by a unique ACI that is assigned by the access node. Additional identifiers are used in some configurations.

The 1:1 and N:1 configuration models determine how VLANs are correlated with households. A network can include one or both of the models:

  • 1:1 model—A household has only one PPPoE or DHCP IP demux subscriber session. One or more such households can exist on a single VLAN or VLAN demux interface. In the case of a single household, either the subscriber interface or its underlying VLAN or VLAN demux interface can represent the household. In the case of multiple households, the corresponding subscriber interfaces represent the households. In either case, the interface representing a household must be mapped to the ACI for its access line.

    Table 1 describes the types of interfaces supported for the ANCP 1:1 access model when interface sets are not involved, and whether the PPPoE or DHCP IP demux discovery packets must include the ACI for the subscriber access lines.

    Table 1: ACI Mapping by Interface Type for the ANCP 1:1 Model

    Interface Type

    Description

    Presence of ACI in Discovery Packets

    Dynamic PPPoE or DHCP IP demux interface

    When ACI is present in discovery packets, the ANCP agent maps the ACI to the subscriber interface. The name of the interface is automatically generated and nondeterministic.

    Required.

    Static VLAN or VLAN demux interface

    The name of the interface is statically configured. The ANCP configuration must include the access-identifier statement to statically map the ACI to the interface.

    Not present.

  • N:1 model—A household can have more than one PPPoE or DHCP IP demux subscriber session. The household can have more than one VLAN or VLAN demux interface. In either case, all the interfaces must be grouped into an interface set. The interface set in turn must be mapped to the ACI for the household’s access line.

    An interface set groups the dynamic PPPoE or DHCP IP demux sessions for a household. The subscribers are placed into interface sets by one several methods. Table 2 describes the types of interface sets supported in the ANCP 1:1 access model, how they are created, and how the ACI is mapped to the interface set.

    Table 2: ACI Mapping by Interface Set Type for the ANCP N:1 Access Model

    Type of Interface Set

    Description

    Interface Type

    Presence of ACI in Discovery Packets

    ACI-based VLAN interface sets

    When the router receives a DHCP or PPPoE discovery packet that includes an ACI embedded within the DSL Forum vendor-specific tag, it dynamically creates the VLAN and the interface set. The router generates a nondeterministic name for the interface set, such as aci-1003-ge-1/0/0.1073741832.

    The ANCP agent automatically maps the ACI from the discovery packet to the dynamically created interface set.

    All DHCP IP demux or PPPoE sessions that have the same ACI are mapped to the same interface set.

    Dynamic VLAN and VLAN demux interfaces.

    Required.

    Dynamic interface sets

    A dynamic profile dynamically creates the interface set and places interfaces in the set. The profile can either have the name of the interface set explicitly configured or a variable that represents the interface set name. If a variable is used, then the interface set name is provided by RADIUS when it returns an Access-Accept message for the subscriber.

    The ANCP configuration must include the access-identifier statement to statically map the ACI to the interface set.

    All DHCP IP demux and PPPoE sessions are mapped to an interface set according to the rules of the dynamic profile.

    DHCP IP demux subscriber interfaces, PPPoE subscriber interfaces, or VLAN interfaces.

    Irrelevant.

    Static interface sets

    The interface set and set name are statically configured and include multiple static interfaces.

    The ANCP configuration must include the access-identifier statement to statically map the ACI to the interface set.

    Static VLAN and VLAN demux interfaces.

    Irrelevant.

    VLAN-tagged interface sets

    When the router receives a DHCP or PPPoE discovery packet that includes a VLAN ID, it dynamically creates the VLAN and the interface set. The interface set is given a deterministic name consisting of the physical interface name and the VLAN tags, for example, ge-1/0/0-101.

    The ANCP configuration must include the access-identifier statement to statically map the ACI to the interface set.

    All DHCP IP demux or PPPoE sessions that have the same VLAN ID tag are mapped to the same interface set.

    Dynamic VLAN and VLAN demux interfaces.

    Irrelevant.

CoS traffic shaping is based on the subscriber downstream traffic rate that the ANCP agent receives from the access node and then passes to CoS. CoS can shape subscriber traffic at the level of the household or the session:

  • Household shaping—Only aggregate traffic to the household is shaped. Household shaping results from applying a CoS traffic control profile to the static VLAN or VLAN demux interface or to the interface set.
  • Session shaping—The traffic rate to individual devices in the household is shaped. Session shaping results from specifying a CoS traffic control profile in the dynamic PPPoE profile that creates the subscriber session. Depending on the network configuration, session shaping may employ shared priority queues to shape all sessions identically or individual priority queues to shape the sessions separately.

The following sections illustrate several possible configurations and lists the sequence of events for the ANCP operations in each case. Not every possible configuration is presented.

ANCP Network Using N:1 and 1:1 Configuration Models without Interface Sets

In this sample topology, two households are configured for one underlying static VLAN or VLAN demux interface (N:1; dual-tagged VLAN) and a single household is configured for another underlying interface (1:1; single-tagged VLAN) (Figure 1). In addition to the unique ACI assigned by the access node, each household is further identified by the VLAN, which is mapped to the identifier in the ANCP agent configuration. CoS traffic shaping for sessions can employ only shared priority queues to shape all sessions identically; individual priority queues to shape the sessions separately are not supported.

Figure 1: Sample ANCP Topology Without Interface Sets (1:1 and N:1 Model)

Sample ANCP
Topology Without Interface Sets (1:1 and N:1 Model)

Sequence of ANCP Events: Static VLAN or VLAN Demux Interfaces over Ethernet Without Interface Sets

The following sequence of events is for the topology in Figure 1 with static VLAN interfaces over Ethernet without interface sets.

  1. A network device in the household initiates PPPoE discovery.
  2. PPPoE creates a dynamic PPPoE session on the underlying static VLAN or VLAN demux interface and applies the advisory options configured on the VLAN to the session.
  3. The access node independently provides the ANCP agent with the ANCP DSL attributes for an access line identified by an ACI.
  4. The ANCP agent sends CoS the adjusted downstream data rate for the static VLAN or demux VLAN mapped to the ACI. The ANCP agent stores all DSL attributes, including the adjusted upstream data rate, in the router’s shared database.
  5. AAA correlates the dynamic PPPoE session with the access line by matching the underlying interface of the session to the static VLAN or VLAN demux interface associated with the ACI in the ANCP agent configuration.
  6. AAA retrieves the ANCP DSL attributes for the access line from the router’s shared database and maps them to the Juniper Networks DSL VSAs in the RADIUS Access-Request and Accounting-Request messages. If the DSL attributes are unavailable, the session’s advisory upstream and downstream data rates are mapped to the Upstream-Calculated-Qos-Rate VSA (26-142) and Downstream-Calculated-Qos-Rate (26–141) VSAs, respectively. These VSAs are then included in the RADIUS messages.

ANCP Network Using N:1 Configuration Model with Interface Sets

In this topology, multiple households are configured for each underlying static VLAN or VLAN demux interface (Figure 2). The VLANs are dual-tagged. Each household includes several CPE devices that access the Internet. In addition to the unique ACI assigned by the access node, the household is further identified by the interface set. The interface set groups the dynamic PPPoE sessions for the individual subscriber devices. It is either explicitly configured in the dynamic PPPoE profile or specified in the RADIUS Access-Accept message during PPPoE session authentication. Session shaping can employ shared priority queues to shape all sessions identically or individual queues to shape the sessions separately.

Figure 2: Sample ANCP Topology with Interface Sets (N:1 Model)

Sample ANCP Topology
with Interface Sets (N:1 Model)

In this N:1 model with interface sets, the access node must add the DSL Forum VSA to the PPPoE PADI and PADR discovery packets that it passes to the router during the establishment of dynamic PPPoE sessions. The VSA includes the ACI for the household. This inclusion enables AAA to correlate the PPPoE sessions with their respective subscriber access lines and DSL attributes during RADIUS authentication and accounting. If the ACI is not present, AAA cannot make the correlation and subsequently reports only the advisory upstream and downstream data rates to RADIUS Authentication and Accounting.

When the dynamic PPPoE profile is configured with the $junos-interface-set-name predefined variable, the configuration of the access node, router, and RADIUS server must be synchronized with regard to the ACI and interface set:

  • The RADIUS Access-Accept message must contain the Juniper Networks Qos-Interface-Set-Name VSA (26-130).
  • The CoS Layer 2 configuration must explicitly identify the interface set that is named in the Qos-Interface-Set-Name VSA (26-130).
  • The ANCP agent configuration must map an ACI to the interface set that is named in the Qos-Interface-Set-Name VSA (26-130).

Sequence of ANCP Events: Static VLAN Interfaces over Ethernet with Interface Sets

The following sequence of events is for the topology in Figure 2 with static VLAN interfaces over Ethernet with interface sets.

  1. A network device in the household initiates PPPoE discovery.
  2. The access node adds the DSL Forum VSA tag with the ACI for the household to the PPPoE PADI and PADR discovery packets. (The identifier is known to PPPoE as the agent circuit identifier.)
  3. PPPoE creates a dynamic PPPoE session with the provided ACI on the underlying static VLAN and applies the advisory options configured on the VLAN to the session.
  4. The access node independently provides the ANCP agent with the ANCP DSL attributes for an access line identified by an ACI.
  5. The ANCP agent provides CoS with the adjusted downstream data rate for the interface set mapped to the ACI. The ANCP agent stores all ANCP DSL attributes, including the adjusted upstream and downstream data rates, in the router’s shared database.
  6. AAA correlates the dynamic PPPoE session with the access line by matching the session identifier received in the DSL Forum VSA to the ACI configured for the interface set in the ANCP agent configuration.
  7. AAA retrieves the ANCP DSL attributes for the access line from the router’s shared database and maps them to the Juniper Networks DSL VSAs in the RADIUS Access-Request and Accounting-Request messages. If the DSL attributes are unavailable, the session’s advisory upstream and downstream data rates are mapped to the Upstream-Calculated-Qos-Rate VSA (26-142) and Downstream-Calculated-Qos-Rate (26–141) VSAs, respectively. These VSAs are then included in the RADIUS messages.
  8. When authentication is completed, the dynamic PPPoE session is placed into the interface set configured in the dynamic PPPoE profile. The profile specifies a named interface set or the $junos-interface-set-name predefined variable, which indicates that the interface set is named in the RADIUS Access-Accept message.

ANCP Network Using 1:1 Configuration Model with Interface Sets

In this topology, a single household is configured for each underlying static VLAN or VLAN demux interface (Figure 3). The VLANs are dual-tagged. Each household includes several CPE devices that access the Internet. In addition to the unique ACI assigned by the access node, the household is further identified by the interface set. The interface set is either explicitly configured in the dynamic PPPoE profile or specified in the RADIUS Access-Accept message during PPPoE session authentication. Session shaping can employ shared priority queues to shape all sessions identically or individual queues to shape the sessions separately.

Figure 3: Sample ANCP Topology with Interface Sets (1:1 Model)

Sample ANCP Topology
with Interface Sets (1:1 Model)

In this 1:1 model with interface sets, the ANCP agent configuration must map the underlying interface for the PPPoE sessions in an interface set to both the ACI and the interface set. This configuration enables AAA to correlate the PPPoE sessions with their respective subscriber access lines and DSL attributes during RADIUS authentication and accounting.

When the dynamic PPPoE profile is configured with the $junos-interface-set-name predefined variable, the configuration of the access node, router, and RADIUS server must be synchronized with regard to the ACI and interface set:

  • The RADIUS Access-Accept message must contain the Juniper Networks Qos-Interface-Set-Name VSA (26-130).
  • The CoS Layer 2 configuration must explicitly identify the interface set that is named in the Qos-Interface-Set-Name VSA (26-130).
  • The ANCP agent configuration must map an ACI to the interface set that is named in the Qos-Interface-Set-Name VSA (26-130).

Sequence of ANCP Events: Static VLAN Demux Interfaces over Aggregated Ethernet with Interface Sets

The following sequence of events is for the topology in Figure 3 with static VLAN demux interfaces over aggregated Ethernet with interface sets.

  1. A network device in the household initiates PPPoE discovery.
  2. PPPoE creates a dynamic PPPoE session with the provided ACI on the underlying static VLAN demux interface and applies the advisory options configured on the VLAN to the session.
  3. The access node independently provides the ANCP agent with the ANCP DSL attributes for an access line identified by an ACI.
  4. The ANCP agent provides CoS with the adjusted downstream data rate for the interface set mapped to the ACI. The ANCP agent stores all ANCP DSL attributes, including the adjusted upstream and downstream data rates, in the router’s shared database.
  5. AAA correlates the dynamic PPPoE session with the access line by matching the underlying interface of the session to the underlying interface configured for the interface set in the ANCP agent configuration.
  6. AAA retrieves the ANCP DSL attributes for the access line from the router’s shared database and maps them to the Juniper Networks DSL VSAs in the RADIUS Access-Request and Accounting-Request messages. If the DSL attributes are unavailable, the session’s advisory upstream and downstream data rates are mapped to the Upstream-Calculated-Qos-Rate VSA (26-142) and Downstream-Calculated-Qos-Rate (26–141) VSAs, respectively. These VSAs are then included in the RADIUS messages.
  7. When authentication is completed, the dynamic PPPoE session is placed into the interface set configured in the dynamic PPPoE profile. The profile specifies a named interface set or the $junos-interface-set-name predefined variable, which indicates that the interface set is named in the RADIUS Access-Accept message.

Published: 2013-07-31