Understanding DVLAN (Single/Dual tag) for Subscriber Services Scaling (Junos Evolved for ACX7100-48L, ACX7332, and ACX7348 Devices)

DDOS Policers Configuration for Broadband Edge

Starting Junos Evolved release 24.4R1, the default DDOS policer support feature provides configuration options for BBE DDOS protocol groups namely – DHCPv4, DHCPv6, PPPoE, PPP, L2TP. These configuration values are supported on ACX7100-48L with the desired scale and performance required to bring up BBE subscribers.

This configuration of DVLAN (single and dual tag) for subscriber services performance scaling also supports:

• DHCP (IP-DEMUX and IP-DEMUX lite) & PPPoE subscribers (IPv4, IPV6, and dual stack) with CoS lawful intercept and filter support.
• DVLAN (Single and dual tag) with L2TP LAC DDOS policers configuration for BBE protocols. Individual BBE protocol and DDOS protocol group configuration is enabled. Only the aggregate DDOS protocol group dhcpv4v6 is active.
• Subscriber scale qualification with Class of Support (CoS) for L2TP access concentrator (LAC) subscriber interfaces for IPV4, IPV6 and dual stack.

The combined DDOS policer protocol group dhcpv4v6 is supported on ACX series devices. This policer group supports the aggregated traffic of BBE protocols (DHCPv4, DHCPv6, PPPoE, PPP and L2TP).

Following are the different BBE-related DDOS protocol groups CLI configurations supported on ACX7100-48L, ACX7332, and ACX7348 devices using the set system ddos-protection protocols command:

• user@root# set system ddos-protection protocols dhcpv6 ?
• content_copy zoom_out_map

  user@root# set system ddos-protection protocols l2tp ?     
        

• For individual policers you can configure the DDOS parameters like bandwidth, burst as follows:

  content_copy zoom_out_map

  user@root# set system ddos-protection protocols dhcpv4 aggregate
       

Support for BNG PPP and L2TP-LAC on Non-default Routing Interfaces

BBE is disabled by default. The BBE protocols can be enabled using the following configurations:

• User Plane BBE Mode

User Plane BBE Mode

The subscriber-management mode can be configured as user-plane with following configuration.

   
system 
{
  services 
  {
    subscriber-management
    {         
      enable;
      mode
      {              
        user-plane
        {                  
        user-plane-name bng-user-plane-name;                   
        transport
        {                       
        inet <user-plane-ip>;                 
        }                  
        control-plane {                     
        bng-controller-name bng-cups-controller-name;                       
        transport {                        
          inet <control-plane-ip>;                       
        }                 
        }             
      } 
   }
}
}

An additional PPPoE underlying configuration option is available for the BBE support in the control-plane mode as follows:

[edit system services subscriber-management] interfaces <interface name>
        {  
        unit <unit #> 
        
        {                               
             pppoe-underlying-options 
               {
                  ….
               }
                                                                           
        }
          auto-configure 
        {
         …
        }
   }

In the above DDOS protocol group, there is one aggregate policer and one or more per-packet type policers. Aggregate policer runs for all packet traffic belonging to that protocol, while per-packet type policers run for traffic belonging to an individual packet type of that protocol, for example, PPPoE or L2TP.

Configurations related to different subscriber-management features are enabled. All BBE protocol feature specific configurations are enabled, starting Junos Evolved release 23.4R1.

Subscriber Stacking over PWHT Interface (ACX7100-48L, ACX7332, ACX7348)

Starting in Junos OS Evolved release 24.4R1, subscriber access models using DHCP Server and Relay dual-stack and PPPoE dual-stack configurations are supported over Layer-2 pseudowire headend termination (PWHT) interfaces. This feature includes support for:

• Firewall Filters
• Hierarchical CoS
• Lawful Intercept
• Multicast.

Use the show user-plane subscribers command in user-plane BBE mode to view the subscriber stacking configuration details. [See Understanding DVLAN (Single/Dual tag) for Subscriber Services Scaling (Junos Evolved for ACX Series Devices), and show user-plane subscribers (ACX Series Devices).]