Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

Example: Configuring an ANCP Network with Interface Sets and N:1 Static Demux VLANs over Aggregated Ethernet

This example describes how to configure an ANCP network topology that manages subscriber access for several households by grouping individual devices into interface sets, providing access and services through one dedicated C-VLAN per household, and shaping traffic on a per-household basis. In this N:1 configuration, dual-tagged VLANs are configured over a single, underlying, static VLAN demux interfaces over aggregated Ethernet.

Requirements

This example uses the following hardware and software components:

  • MX Series 3D Universal Edge Router with only MPCs installed for VLAN demux support
  • RADIUS server
  • DSLAM access node
  • Junos OS Release 12.2 or later

Before you begin configuring the example, be sure you have:

Overview

ANCP provides a means to configure, maintain, and monitor local access lines between access nodes (DSLAMs) and subscribers. Associated CoS configurations shape the downstream subscriber traffic. ANCP can enable more accurate traffic shaping by adjusting net data rates to discount the packet overhead of the access lines and then providing these adjusted rates to CoS.

The network topology in this example includes a dual-tagged (C-VLAN/S-VLAN) VLAN configuration over a static VLAN demux interface that is in turn configured over aggregated Ethernet for redundancy. This topology is an N:1 configuration model because—although each C-VLAN corresponds to one subscriber household—all the C-VLANs are configured over the same underlying VLAN demux interface. Multiple end-user devices in each household—or rather the dynamic PPPoE sessions established by each device—are grouped by household into interface sets. The grouping is accomplished by a separate dynamic profile configured for each C-VLAN. The ANCP agent configuration maps the ACI for the household’s access line to an interface set. CoS applies a traffic control profile to each interface set to shape the subscriber-directed traffic on a per-household basis. The CoS shaping rate is dynamically updated based upon the DSL attributes provided by the access node for each household’s access line.

Figure 1 shows S-VLAN 103, configured on demux0, servicing the access node. C-VLANs 1, 2, and 3 each service a single household (subscriber). The respective households are identified by unique ACIs. The dynamic PPPoE sessions for devices in each household are grouped for monitoring and traffic shaping into interface sets 10301, 10302, and 10303.

Figure 1: N:1 ANCP Topology with Interface Sets and VLAN Demux Interface over Aggregated Ethernet

N:1 ANCP Topology with Interface Sets and VLAN Demux Interface over Aggregated Ethernet

Table 1 describes the configuration components used in this example.

Table 1: Configuration Components used in ANCP N:1 Topology Example with Interface Sets

Configuration Component or Property

Component Name or Setting

Description

Dynamic profiles

ancp-10301

ancp-10302

ancp-10303

Each profile defines the dynamic PPPoE session created when any of the devices for a particular subscriber household accesses the network.

Each profile specifies the following:

  • A set of interfaces in which the sessions are created.
  • Dynamic instantiation of both the logical interfaces for the sessions and the underlying PPPoE logical interfaces on which the subscribers log in.
  • CHAP and PAP authentication for the sessions.
  • The interval between successive PPP keepalive messages.
  • The loopback address for the dynamic PPPoE logical interfaces.

Predefined variables

$junos-interface-unit

Instantiates the logical interface for each PPPoE session.

$junos-underlying-interface

Instantiates the logical underlying PPP interface on which each dynamic PPPoE logical interface is created when a subscriber logs in.

Interfaces

ae0

Aggregated Ethernet interface that is the underlying interface for the VLAN demux interfaces.

The interface includes the following configuration:

  • CoS hierarchical scheduling.
  • Stacked VLAN tagging for all logical interfaces on top of ae0.
  • Link protection.

demux0

VLAN demux interface that runs over the underlying aggregated Ethernet interface.

demux0.10301

demux0.10302

demux0.10303

VLAN demux logical interfaces that correspond to the C-VLANs for individual subscriber households.

Each logical interface includes the following configuration:

  • Inner (C-VLAN) and outer VLAN (S-VLAN) tags.
  • The underlying physical interface, ae0.
  • The dynamic profile that creates PPPoE sessions on the C-VLAN.
  • Downstream and upstream advisory traffic rates.
  • Proxy ARP and protection against duplicate sessions on the interface.

ge-1/0/1

Primary member link in the aggregated Ethernet bundle.

ge-1/0/2

Backup member link in the aggregated Ethernet bundle.

lo0.0

Loopback interface for use in the access network. The loopback interface is automatically used for unnumbered interfaces.

pp0

PPP interface on which the PPPoE subscriber logical interfaces are created.

Interface sets

10301

10302

10303

Set of interfaces in which the sessions for the devices in a particular household are created. Each interface set is specified in a dynamic profile for that household. ANCP associates each interface set with an ACI and a VLAN demux logical interface (C-VLAN). CoS applies a traffic control profile to each interface set.

Advisory traffic rates

downstream-rate

Recommended rate for downstream traffic in the absence of traffic rate information from the access node.

upstream-rate

Recommended rate for upstream traffic in the absence of traffic rate information from the access node.

Traffic control profile

tcp1

CoS profile that shapes the downstream subscriber traffic rate; in this example, shaping is adjusted for ATM packet overhead. The profile is applied to the interface sets.

IP addresses

10.0.0.1

Address of the ANCP access node that monitors the subscriber households.

100.0.0.1/32

Address of the loopback interface, lo0.

172.28.32.191

Address of the RADIUS accounting server and authentication server.

Access circuit loop identifiers

192.168.61.65/0.0.0.0 eth 1/1:7;

192.168.61.65/0.0.0.0 eth 1/2:7;

192.168.61.65/0.0.0.0 eth 1/3:7;

Identifier for the local access circuit from the access node to the subscriber household. It identifies the household. ANCP associates each identifier with an interface set.

The ANCP agent configuration includes the following elements:

  • The IP address for the access node (DSLAM) is specified as 10.0.0.1. The interval between ANCP adjacency messages sent between neighbors is set to 5 seconds.
  • The ANCP agent is enabled to report adjusted data rates to CoS to improve the accuracy of downstream traffic shaping. The ANCP agent adjusts the net data rates for ADSL lines by ninety percent and for ADSL2 lines by ninety-five percent.
  • Each interface set is associated with both the ACI unique to the subscriber household and the relevant underlying VLAN demux interface.

The RADIUS configuration on the router includes the following elements:

  • The IP address (172.28.32.191) for the authentication and accounting server, as well as the secret password for accessing the server.
  • The subscriber access profile, radius-profile, specifies that RADIUS is used for authentication.
  • Juniper Networks DSL VSAs are included in RADIUS request messages, but the DSL Forum VSA attributes are excluded from RADIUS messages
  • Accounting sessions are configured to be recognized in decimal format.

Configuration

The following example requires you to navigate various levels in the configuration hierarchy. For instructions on how to do that, see Using the CLI Editor in Configuration Mode.

To configure an ANCP network with static N:1 demux VLANs to the subscriber households, perform these tasks:

CLI Quick Configuration

To quickly configure the ANCP network described in this example, copy the following commands, paste them in a text file, remove any line breaks, and then copy and paste the commands into the CLI.

# Dynamic Profilesedit dynamic-profiles ancp-10301set interfaces interface-set 10301 interface pp0 unit "$junos-interface-unit"edit interfaces pp0 unit "$junos-interface-unit"set ppp-options chapset ppp-options papset pppoe-options underlying-interface "$junos-underlying-interface"set keepalives interval 30set family inet unnumbered-address lo0.0topedit dynamic-profiles ancp-10302set interfaces interface-set 10302 interface pp0 unit "$junos-interface-unit"edit interfaces pp0 unit "$junos-interface-unit"set ppp-options chapset ppp-options papset pppoe-options underlying-interface "$junos-underlying-interface"set keepalives interval 30set family inet unnumbered-address lo0.0topedit dynamic-profiles ancp-10303set interfaces interface-set 10303 interface pp0 unit "$junos-interface-unit"edit interfaces pp0 unit "$junos-interface-unit"set ppp-options chapset ppp-options papset pppoe-options underlying-interface "$junos-underlying-interface"set keepalives interval 30set family inet unnumbered-address lo0.0top## Aggregated Ethernet Interfaces and VLAN Demux Interfacesset interfaces ge-1/0/1 hierarchical-schedulerset interfaces ge-1/0/1 gigether-options 802.3ad ae0set interfaces ge-1/0/1 gigether-options 802.3ad primaryset interfaces ge-1/0/2 hierarchical-schedulerset interfaces ge-1/0/2 gigether-options 802.3ad ae0set interfaces ge-1/0/2 gigether-options 802.3ad backupset interfaces ae0 hierarchical-schedulerset interfaces ae0 stacked-vlan-taggingset interfaces ae0 aggregated-ether-options link-protectionset interfaces demux0 unit 10301 proxy-arpset interfaces demux0 unit 10301 vlan-tags outer 103set interfaces demux0 unit 10301 vlan-tags inner 1set interfaces demux0 unit 10301 demux-options underlying-interface ae0set interfaces demux0 unit 10301 family pppoe duplicate-protectionset interfaces demux0 unit 10301 family pppoe dynamic-profile ancp-10301set interfaces demux0 unit 10301 advisory-options downstream-rate 16mset interfaces demux0 unit 10301 advisory-options upstream-rate 1mset interfaces demux0 unit 10302 proxy-arpset interfaces demux0 unit 10302 vlan-tags outer 103set interfaces demux0 unit 10302 vlan-tags inner 2set interfaces demux0 unit 10302 demux-options underlying-interface ae0set interfaces demux0 unit 10302 family pppoe duplicate-protectionset interfaces demux0 unit 10302 family pppoe dynamic-profile ancp-10302set interfaces demux0 unit 10302 advisory-options downstream-rate 16mset interfaces demux0 unit 10302 advisory-options upstream-rate 1mset interfaces demux0 unit 10303 proxy-arpset interfaces demux0 unit 10303 vlan-tags outer 103set interfaces demux0 unit 10303 vlan-tags inner 3set interfaces demux0 unit 10303 demux-options underlying-interface ae0set interfaces demux0 unit 10303 family pppoe duplicate-protectionset interfaces demux0 unit 10303 family pppoe dynamic-profile ancp-10303set interfaces demux0 unit 10303 advisory-options downstream-rate 16mset interfaces demux0 unit 10303 advisory-options upstream-rate 1mset interfaces lo0 unit 0 family inet address 100.0.0.1/32top## Class of Serviceedit class-of-serviceset traffic-control-profiles tcp1 shaping-rate 16mset traffic-control-profiles tcp1 overhead-accounting cell-modeset interfaces interface-set 10301 output-traffic-control-profile tcp1set interfaces interface-set 10302 output-traffic-control-profile tcp1set interfaces interface-set 10303 output-traffic-control-profile tcp1top## ANCPedit protocols ancpset traceoptions file ancpdset traceoptions file size 512mset traceoptions flag configset traceoptions flag cosset qos-adjustset adjacency-timer 5set maximum-helper-restart-time 90set qos-adjust-adsl 90set qos-adjust-adsl2 95set interfaces interface-set 10301 access-identifier "192.168.61.65/0.0.0.0 eth 1/1:7;"set interfaces interface-set 10302 access-identifier "192.168.61.65/0.0.0.0 eth 1/2:7;"set interfaces interface-set 10303 access-identifier "192.168.61.65/0.0.0.0 eth 1/3:7;"set interfaces interface-set 10301 underlying-interface demux0.10301set interfaces interface-set 10302 underlying-interface demux0.10302set interfaces interface-set 10303 underlying-interface demux0.10303set neighbor 10.0.0.1top## RADIUSedit accessset radius-server 172.28.32.191 secret "$9$MUeL7VgoGqmTwYmTz3tpWLx"edit access profile radius-profileset authentication-order radiusset radius authentication-server 172.28.32.191set radius accounting-server 172.28.32.191set radius options accounting-session-id-format decimal set radius options juniper-dsl-attributesset radius attributes exclude dsl-forum-attributes access-requestset radius attributes exclude dsl-forum-attributes accounting-startset radius attributes exclude dsl-forum-attributes accounting-stoptop

Configuring the Dynamic PPPoE Profiles

Step-by-Step Procedure

In this procedure, you configure a dynamic profile for each C-VLAN: ancp-10301, ancp-10302, and ancp-1033.

  1. Configure the interface set that the PPPoE sessions on this C-VLAN are placed in.
    [edit dynamic-profiles ancp-10301]user@host1# edit interfaces interface-set 10301
  2. Configure the logical interfaces to be dynamically instantiated for the interface set.
    [edit dynamic-profiles ancp-10301 interfaces interface-set 10301]user@host1# set interface pp0 unit “$junos-interface-unit”
  3. Configure CHAP and PAP authentication as properties of the dynamic PPPoE logical interfaces.
    [edit dynamic-profiles ancp-10301 interfaces pp0 unit “$junos-interface-unit”]user@host1# set ppp-options chapuser@host1# set ppp-options pap
  4. Configure the logical underlying interface on which the router creates the dynamic PPPoE logical interface; this is the interface on which the subscriber logs in.
    [edit dynamic-profiles ancp-10301 interfaces pp0 unit “$junos-interface-unit”]user@host1# set pppoe-options underlying-interface “$junos-underlying-interface”
  5. Specify the interval between successive keepalive requests.
    [edit dynamic-profiles ancp-10301 interfaces pp0 unit “$junos-interface-unit”]user@host1# set keepalives interval 30
  6. Configure the IPv4 protocol family and that the local (unnumbered) address can be derived from the loopback address for the dynamic PPPoE logical interfaces.
    [edit dynamic-profiles ancp-10301 interfaces pp0 unit “$junos-interface-unit”]user@host1# set family inet unnumbered-address lo0.0
  7. Repeat Steps 1 through 6 for the second dynamic profile, ancp-10302, and the third dynamic profile, ancp-10303.

Results

From configuration mode, confirm the dynamic profile configuration by entering the show dynamic-profiles command.

[edit]user@host# show dynamic-profiles
ancp-10301 {interfaces {interface-set 10301 {interface pp0 {unit "$junos-interface-unit";}}pp0 {unit "$junos-interface-unit" {ppp-options {chap;pap;}pppoe-options {underlying-interface "$junos-underlying-interface";}keepalives interval 30;family inet {unnumbered-address lo0.0;}}}}}
ancp-10302 {interfaces {interface-set 10302 {interface pp0 {unit "$junos-interface-unit";}}pp0 {unit "$junos-interface-unit" {ppp-options {chap;pap;}pppoe-options {underlying-interface "$junos-underlying-interface";}keepalives interval 30;family inet {unnumbered-address lo0.0;}}}}}
ancp-10303 {interfaces {interface-set 10303 {interface pp0 {unit "$junos-interface-unit";}}pp0 {unit "$junos-interface-unit" {ppp-options {chap;pap;}pppoe-options {underlying-interface "$junos-underlying-interface";}keepalives interval 30;family inet {unnumbered-address lo0.0;}}}}}

When you are done configuring the device, enter commit from configuration mode.

Configuring the Static VLAN Demux Interface over Aggregated Ethernet

Step-by-Step Procedure

  1. Enable hierarchical scheduling on this interface.
    [edit interfaces ge-1/0/1]user@host1# set hierarchical-scheduler
  2. Specify this interface as the primary member of the aggregated Ethernet bundle.
    [edit interfaces ge-1/0/1]user@host1# set gigether-options 802.3ad ae0 primary
  3. Enable hierarchical scheduling on a second interface.
    [edit interfaces ge-1/0/2]user@host1# set hierarchical-scheduler
  4. Specify this interface as the backup member of the aggregated Ethernet bundle.
    [edit interfaces ge-1/0/2]user@host1# set gigether-options 802.3ad ae0 backup
  5. Enable hierarchical scheduling on the aggregated Ethernet interface.
    [edit interfaces ae0]user@host1# set hierarchical-scheduler
  6. Enable stacked VLAN tagging for all logical interfaces on the aggregated Ethernet interface.
    [edit interfaces ae0]user@host1# set stacked-vlan-tagging
  7. Enable link protection as a property of the aggregated Ethernet interface.
    [edit interfaces ae0]user@host1# set aggregated-ether-options link-protection
  8. Configure VLAN demux interface demux0.10301.
    1. Configure the router to respond to ARP requests on the interface.
      [edit interfaces demux0 unit 10301]user@host1# set proxy-arp
    2. Configure the outer VLAN tag to identify the access node (S-VLAN) and the inner VLAN tag to identify the subscriber port on the access node (C-VLAN).
      [edit interfaces demux0 unit 10301]user@host1# set vlan tags outer 103 inner 1
    3. Specify that the VLAN demux interface runs on the underlying aggregated Ethernet interface.
      [edit interfaces demux0 unit 10301]user@host1# set demux-options underlying-interface ae0
    4. Prevent multiple PPPoE sessions from being created for the same PPPoE subscriber on this VLAN demux interface.
      [edit interfaces demux0 unit 10301]user@host1# set family pppoe duplicate-protection
    5. Configure the dynamic profile that is instantiated on the VLAN demux interface.
      [edit interfaces demux0 unit 10301]user@host1# set family pppoe dynamic-profile ancp-10301
    6. Configure the recommended upstream and downstream traffic rates.
      [edit interfaces demux0 unit 10301]user@host1# set advisory-options upstream-rate 1muser@host1# set advisory-options downstream-rate 16m
  9. Configure VLAN demux interface demux0.10302.
    1. Configure the router to respond to ARP requests on the interface.
      [edit interfaces demux0 unit 10302]user@host1# set proxy-arp
    2. Configure the outer VLAN tag to identify the access node (S-VLAN) and the inner VLAN tag to identify the subscriber port on the access node (C-VLAN).
      [edit interfaces demux0 unit 10302]user@host1# set vlan tags outer 103 inner 2
    3. Specify that the VLAN demux interface runs on the underlying aggregated Ethernet interface.
      [edit interfaces demux0 unit 10302]user@host1# set demux-options underlying-interface ae0
    4. Prevent multiple PPPoE sessions from being created for the same PPPoE subscriber on this VLAN demux interface.
      [edit interfaces demux0 unit 10302]user@host1# set family pppoe duplicate-protection
    5. Configure the dynamic profile that is instantiated on the VLAN demux interface.
      [edit interfaces demux0 unit 10302]user@host1# set family pppoe dynamic-profile ancp-10302
    6. Configure the recommended upstream and downstream traffic rates.
      [edit interfaces demux0 unit 10302]user@host1# set advisory-options upstream-rate 1muser@host1# set advisory-options downstream-rate 16m
  10. Configure VLAN demux interface demux0.10303.
    1. Configure the router to respond to ARP requests on the interface.
      [edit interfaces demux0 unit 10303]user@host1# set proxy-arp
    2. Configure the outer VLAN tag to identify the access node (S-VLAN) and the inner VLAN tag to identify the subscriber port on the access node (C-VLAN).
      [edit interfaces demux0 unit 10303]user@host1# set vlan tags outer 103 inner 3
    3. Specify that the VLAN demux interface runs on the underlying aggregated Ethernet interface.
      [edit interfaces demux0 unit 10303]user@host1# set demux-options underlying-interface ae0
    4. Prevent multiple PPPoE sessions from being created for the same PPPoE subscriber on this VLAN demux interface.
      [edit interfaces demux0 unit 10303]user@host1# set family pppoe duplicate-protection
    5. Configure the dynamic profile that is instantiated on the VLAN demux interface.
      [edit interfaces demux0 unit 10303]user@host1# set family pppoe dynamic-profile ancp-10303
    6. Configure the recommended upstream and downstream traffic rates.
      [edit interfaces demux0 unit 10303]user@host1# set advisory-options upstream-rate 1muser@host1# set advisory-options downstream-rate 16m
  11. Configure the IPv4 protocol family and the address of the loopback interface.
    [edit interfaces lo0]user@host1# set unit 0 family inet address 100.0.0.1/32

Results

From configuration mode, confirm the static VLAN demux configuration by entering the show interfaces command.

[edit]user@host# show interfaces
ge-1/0/1 {hierarchical-scheduler;gigether-options {802.3ad {ae0;primary;}}}
ge-1/0/2 {hierarchical-scheduler;gigether-options {802.3ad {ae0;backup;}}}
ae0 {hierarchical-scheduler;stacked-vlan-tagging;aggregated-ether-options {link-protection;}}
demux0 {unit 10301 {proxy-arp;vlan-tags outer 103 inner 1;demux-options {underlying-interface ae0;}family pppoe {duplicate-protection;dynamic-profile ancp-10301;}advisory-options {downstream-rate 16m;upstream-rate 1m;}}unit 10302 {proxy-arp;vlan-tags outer 103 inner 2;demux-options {underlying-interface ae0;}family pppoe {duplicate-protection;dynamic-profile ancp-10302;}advisory-options {downstream-rate 16m;upstream-rate 1m;}}unit 10303 {proxy-arp;vlan-tags outer 103 inner 3;demux-options {underlying-interface ae0;}family pppoe {duplicate-protection;dynamic-profile ancp-10303;}advisory-options {downstream-rate 16m;upstream-rate 1m;}}lo0 {unit 0 {family inet {address 100.0.0.1/32;}}}}

When you are done configuring the device, enter commit from configuration mode.

Configuring Class of Service

Step-by-Step Procedure

  1. Configure the traffic control profile with the shaping rate and specify the overhead accounting mode to account for ATM cell encapsulation.
    [edit class-of-service]user@host1# set traffic-control-profiles tcp1 shaping-rate 16muser@host1# set traffic-control-profiles tcp1 overhead-accounting cell-mode
  2. Apply the traffic control profile to the interface sets.
    [edit class-of-service]user@host1# set interfaces interface-set 10301 output-traffic-control-profile tcp1user@host1# set interfaces interface-set 10302 output-traffic-control-profile tcp1user@host1# set interfaces interface-set 10303 output-traffic-control-profile tcp1

Results

From configuration mode, confirm the class of service configuration by entering the show class-of-service command.

[edit]user@host# show class-of-service
traffic-control-profiles {tcp1 {shaping-rate 16m;overhead-accounting cell-mode;}}
interfaces {interface-set 10301 {output-traffic-control-profile tcp1;}interface-set 10302 {output-traffic-control-profile tcp1;}interface-set 10303 {output-traffic-control-profile tcp1;}}

When you are done configuring the device, enter commit from configuration mode.

Configuring ANCP

Step-by-Step Procedure

  1. Configure the access node address.
    [edit protocols ancp]user@host1# set neighbor 10.0.0.1
  2. Configure the ANCP agent to report adjusted downstream traffic rates to CoS.
    [edit protocols ancp]user@host1# set qos-adjust
  3. Specify an overhead adjustment of the traffic on ADSL and ADSL2 lines to 90 percent and 95 percent, respectively, of the net data rate.
    [edit protocols ancp]user@host1# set qos-adjust-adsl 90user@host1# set qos-adjust-adsl2 95
  4. Specify an interval of 5 seconds between adjacency messages sent to all ANCP neighbors.
    [edit protocols ancp]user@host1# set adjacency-timer 5
  5. Associate the ACI with the interface sets for each C-VLAN.
    [edit protocols ancp]user@host1# set interfaces interface-set 10301 access-identifier "192.168.61.65/0.0.0.0 eth 1/1:7;"user@host1# set interfaces interface-set 10302 access-identifier "192.168.61.65/0.0.0.0 eth 1/2:7;"user@host1# set interfaces interface-set 10303 access-identifier "192.168.61.65/0.0.0.0 eth 1/3:7;"
  6. Specify the underlying interface for the interface sets.
    [edit protocols ancp]user@host1# set interfaces interface-set 10301 underlying-interface demux0.10301user@host1# set interfaces interface-set 10302 underlying-interface demux0.10302user@host1# set interfaces interface-set 10303 underlying-interface demux0.10303
  7. Configure the size of the ANCP trace log files.
    [edit protocols ancp traceoptions]user@host1# set file ancpd size 512m
  8. Configure flags for tracing ANCP configuration and CoS operations.
    [edit protocols ancp traceoptions]user@host1# set flag configuser@host1# set flag cos

Results

From configuration mode, confirm the ANCP agent configuration by entering the show ancp command.

[edit]user@host# show ancp
traceoptions {file ancpd size 512m;flag config;flag cos;}
qos-adjust;adjacency-timer 5;qos-adjust-adsl 90;qos-adjust-adsl2 95;
interfaces {interface-set {10301 {access-identifier "192.168.61.65/0.0.0.0 eth 1/1:7;";underlying-interface demux0.10301;}10302 {access-identifier "192.168.61.65/0.0.0.0 eth 1/2:7;";underlying-interface demux0.10302;}10303 {access-identifier "192.168.61.65/0.0.0.0 eth 1/3:7;";underlying-interface demux0.10303;}}}
neighbor 10.0.0.1;

When you are done configuring the device, enter commit from configuration mode.

Configuring RADIUS Authentication and Accounting

Step-by-Step Procedure

  1. Configure the password for the RADIUS server.
    [edit access]user@host1# set radius-server 172.28.32.191 secret "$9$MUeL7VgoGqmTwYmTz3tpWLx"
  2. Specify that RADIUS is used to authenticate subscribers.
    [edit access]user@host1# set profile radius-profile authentication-order radius
  3. Configure the RADIUS authentication and accounting server.
    [edit access]user@host1# set profile radius-profile radius authentication-server 172.28.32.191user@host1# set profile radius-profile radius accounting-server 172.28.32.191
  4. Configure options for the RADIUS server: The format used to identify the accounting session and that Juniper Networks DSL VSAs are added to RADIUS request messages.
    [edit access]user@host1# set profile radius-profile radius options accounting-session-id-format decimaluser@host1# set profile radius-profile radius options juniper-dsl-attributes
  5. Exclude DSL Forum VSA attributes from being included in RADIUS messages.
    [edit access]user@host1# set profile radius-profile radius attribute exclude dsl-forum-attributes access-requestuser@host1# set profile radius-profile radius attribute exclude dsl-forum-attributes accounting-startuser@host1# set profile radius-profile radius attribute exclude dsl-forum-attributes accounting-stop

Results

From configuration mode, confirm the RADIUS configuration by entering the show access command.

[edit]user@host# show access
radius-server {172.28.32.191 secret "$9$MUeL7VgoGqmTwYmTz3tpWLx"; ## SECRET-DATA}
profile radius-profile {radius {authentication-server 172.28.32.191;accounting-server 172.28.32.191;options {accounting-session-id-format decimal;juniper-dsl-attributes;}attributes {exclude {dsl-forum-attributes [ access-request accounting-start accounting-stop ];}}}}

When you are done configuring the device, enter commit from configuration mode.

Verification

To confirm that the configuration is working properly, perform these tasks:

Verifying the Aggregated Ethernet Interface Configuration

Purpose

Verify that the interface values match your configuration, the link is up, and traffic is flowing.

Action

From operational mode, enter the show interfaces redundancy command.

user@host> show interfaces redundancy
Interface  State            Last change  Primary      Secondary    Current status
ae0        On primary                    ge-1/0/1     ge-1/0/2     both up

From operational mode, enter the show interfaces ae0 command.

user@host> show interfaces ae0
Physical interface: ae0, Enabled, Physical link is Up
  Interface index: 128, SNMP ifIndex: 606
  Link-level type: Ethernet, MTU: 1522, Speed: 1Gbps, BPDU Error: None,
  MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled,
  Flow control: Disabled, Minimum links needed: 1, Minimum bandwidth needed: 0
  Device flags   : Present Running
  Interface flags: SNMP-Traps Internal: 0x4000
  Current address: 00:1f:12:b8:ef:c0, Hardware address: 00:1f:12:b8:ef:c0
  Last flapped   : 2012-03-11 13:24:18 PST (2d 03:34 ago)
  Input rate     : 1984 bps (2 pps)
  Output rate    : 0 bps (0 pps)

  Logical interface ae0.32767 (Index 69) (SNMP ifIndex 709)
    Flags: SNMP-Traps 0x4004000 VLAN-Tag [ 0x0000.0 ]  Encapsulation: ENET2
    Statistics        Packets        pps         Bytes          bps
    Bundle:
        Input :        371259          2      46036116         1984
        Output:             0          0             0            0
    Protocol multiservice, MTU: Unlimited
      Flags: Is-Primary

Meaning

The show interfaces redundancy output shows the redundant link configuration and that both link interfaces are up. The show interfaces ae0 output shows that the aggregated Ethernet interface is up and that traffic is being received on the logical interface.

Verifying the Traffic Scheduling and Shaping Parameters for the Interface Set

Purpose

Verify that the traffic scheduling and shaping parameters are configured and applied properly.

Action

user@host> show class-of-service 
Verifying the demux0 Interface Configuration
Purpose
Verify that the VLAN demux interface displays the configured
PPPoE family attributes and the member links in the aggregated Ethernet
bundle.
Action
From operational mode, enter the show interfaces demux0 command for each VLAN.
user@host> show interfaces demux0.10301
Logical interface demux0.10301 (Index 76) (SNMP ifIndex 61160)
    Flags: SNMP-Traps 0x4000 VLAN-Tag [ 0x8100.100 ]
    Encapsulation: ENET2
    Demux:
      Underlying interface: ae0 (Index 199)
    Link:
      ge-1/0/1
      ge-1/0/2
    Input packets : 2
    Output packets: 18575
    Protocol pppoe
      Dynamic Profile: ancp-10301,
      Service Name Table: None,
      Max Sessions: 16000, Duplicate Protection: On, 
      AC Name: pppoe-server-1
Alternatively, you can enter show pppoe underlying-interfaces detail to display the state and PPPoE family configuration for
all configured underlying interfaces.
Meaning
The output shows the name of the underlying interface,
the member links of the aggregated bundle, and the PPPoE family configuration.
The output shows packet counts when traffic is present on the logical
interface.
Verifying the pp0 Interface Configuration
Purpose
Verify that the interface values match your configuration. 
Action
From operational mode, enter the show interfaces pp0 command.
user@host> show interfaces pp0.100
  Logical interface pp0.100 (Index 71) (SNMP ifIndex 710)
    Flags: Point-To-Point SNMP-Traps 0x4000 Encapsulation: PPPoE
    PPPoE:
      State: SessionUp, Session ID: 1,
      Session AC name: pppoe-server-1, Remote MAC address: 00:90:1a:00:18:34,
      Underlying interface: demux0.10301 (Index 70)
    Link:
      ge-5/0/3.32767
      ge-5/1/2.32767
    Input packets : 18572
    Output packets: 18572
  Keepalive settings: Interval 10 seconds, Up-count 1, Down-count 3
  Keepalive: Input: 0 (never), Output: 18566 (00:00:02 ago)
  LCP state: Opened
  NCP state: inet: Opened, inet6: Not-configured, iso: Not-configured, mpls:
  Not-configured
  CHAP state: Closed
  PAP state: Success
    Protocol inet, MTU: 1500
      Flags: Sendbcast-pkt-to-re
      Addresses, Flags: Is-Primary
        Local: 45.63.24.1
Meaning
This output shows information about the PPPoE logical
interface created on the underlying VLAN demux interface. The output
includes the PPPoE family and aggregated Ethernet redundant link information,
and shows input and output traffic for the PPPoE interface.
Verifying the ANCP Agent Configuration
Purpose
Verify that the ANCP values match your configuration
and that traffic is flowing. 
Action
From operational mode, enter the show ancp subscriber command.
user@host> show ancp subscriber detail
Interface  State            Last change  Primary      Secondary    Current status
ae0        On primary                    ge-1/0/1     ge-1/0/2     both up
From operational mode, enter the show ancp cos command.
user@host> show ancp cos
Qos Adjust Flag:         TRUE
Keepalive Timer:         30 secs
Cos State:               WRITE_READY
Connect Time:            Mon Mar 19 15:03:01 2012
Session Time:            Mon Mar 19 15:03:13 2012
Routing Instance Time:   Mon Mar 19 15:03:14 2012
Keepalive Time:          Not Set
Rate Update Time:        Mon Mar 19 15:03:15 2012


Type      Name             Index         Pending Update      Last Update
iflset    10301              1             None                    64 Kbps
iflset    10302              2             None                    64 Kbps
iflset    10303             71             None                    64 Kbps

Meaning
The show ancp subscriber output shows subscriber
line information such as state and the various traffic rates collected
by the ANCP agent—displayed for each subscriber as identified
by the ACI. The show ancp cos output shows that the ANCP
agent is configured to send adjusted rate data to CoS, that keepalives
are configured for a 30-second interval, and that the interface sets
10301, 10302, and 10303 are configured and their traffic rates are
updating
 
Related Documentation
 
Published: 2013-07-31

						















    

        
        
    











    

        Previous Page
        Next Page