close
keyboard_arrow_left
Table of Contents
- play_arrow Subscriber Service Activation and Management
- play_arrow Subscriber Service Activation and Management
- Dynamic Service Management with RADIUS
- Service Activation and Deactivation Using the CLI Instead of RADIUS
- Management of Subscriber Services with Multiple Instances
- Subscriber Management Redundancy for PFE During Graceful OIR
- Broadband Network Gateway (BNG) Subscriber Redundancy on Aggregated Ethernet (AE) Interfaces with Disabled PFEs (MX304, MX960, and MX10004)
-
- play_arrow Configuring Dynamic Filters and Policers
- play_arrow Dynamic Firewall Filters Overview
- play_arrow Configuring Static Firewall Filters That Are Dynamically Applied
- play_arrow Streamlining Processing of Chains of Static Filters
- play_arrow Dynamically Attaching Static or Fast Update Filters to an Interface
- play_arrow Configuring Filters That Are Created Dynamically
- Parameterized Filters Overview
- Unique Identifiers for Firewall Variables
- Configuring Unique Identifiers for Parameterized Filters
- Sample Dynamic-Profile Configuration for Parameterized Filters
- Dynamic Profile After UID Substitutions for Parameterized Filters
- Multiple Parameterized Filters
- Parameterized Filter Processing Overview
- Parameterized Filters Configuration Considerations
- Guidelines for Creating and Applying Parameterized Filters for Subscriber Interfaces
- Parameterized Filter Match Conditions for IPv4 Traffic
- Parameterized Filter Match Conditions for IPv6 Traffic
- Parameterized Filter Nonterminating and Terminating Actions and Modifiers
- Firewall Filter Match Conditions for Protocol-Independent Traffic in Dynamic Service Profiles
- Firewall Filter Terminating and Nonterminating Actions for Protocol-Independent Traffic in Dynamic Service Profiles
- Interface-Shared Filters Overview
- Dynamically Attaching Filters Using RADIUS Variables
- Example: Implementing a Filter for Households That Use ACI-Based VLANs
- Example: Dynamic-Profile Parsing
- Example: Firewall Dynamic Profile
- Example: Configuring a Filter to Exclude DHCPv6 and ICMPv6 Control Traffic for LAC Subscriber
- play_arrow Using Ascend Data Filters to Implement Firewalls Based on RADIUS Attributes
- Ascend-Data-Filter Policies for Subscriber Management Overview
- Ascend-Data-Filter Attribute Fields
- Dynamically Applying Ascend-Data-Filter Policies to Subscriber Sessions
- Example: Configuring Dynamic Ascend-Data-Filter Support for Subscriber Access
- Example: Configuring Static Ascend-Data-Filter Support for Subscriber Access
- Verifying and Managing Dynamic Ascend-Data-Filter Policy Configuration
- play_arrow Configuring Fast Update Filters to Provide More Efficient Processing Over Classic Static Filters
- Fast Update Filters Overview
- Basic Fast Update Filter Syntax
- Configuring Fast Update Filters
- Example: Configuring Fast Update Filters for Subscriber Access
- Match Conditions and Actions in Fast Update Filters
- Configuring the Match Order for Fast Update Filters
- Fast Update Filter Match Conditions
- Fast Update Filter Actions and Action Modifiers
- Configuring Terms for Fast Update Filters
- Configuring Filters to Permit Expected Traffic
- Avoiding Conflicts When Terms Match
- Associating Fast Update Filters with Interfaces in a Dynamic Profile
- play_arrow Defending Against DoS and DDoS Attacks Using Unicast RPF and Fail Filters
- play_arrow Improving Scaling and Performance of Filters on Static Subscriber Interfaces
- play_arrow Configuring Dynamic Service Sets
- play_arrow Configuring Rate-Limiting Premium and Non-Premium Traffic on an Interface Using Hierarchical Policers
- play_arrow Monitoring and Managing Firewalls for Subscriber Access
-
- play_arrow Configuring Dynamic Multicast
- play_arrow Configuring Dynamic IGMP to Support IP Multicasting for Subscribers
- play_arrow Configuring Dynamic MLD to Enable Subscribers to Access Multicast Networks
-
- play_arrow Configuring Application-Aware Policy Control and Reporting
- play_arrow Configuring Application-Aware Policy Control
- Understanding Application-Aware Policy Control for Subscriber Management
- Understanding PCC Rules for Subscriber Management
- Configuring Application-Aware Policy Control for Subscriber Management
- Installing Services Packages for Subscriber Management Application-Aware Policy Management
- Configuring Service Data Flow Filters
- Configuring Policy and Charging Control Action Profiles for Subscriber Management
- Configuring Policy and Charging Control Rules
- Configuring a Policy and Charging Control Rulebase
- Configuring a Policy and Charging Enforcement Function Profile for Subscriber Management
- Identifying the Service Interface That Handles Subscriber Management Application-Aware Policy Control
- Configuring PCC Rule Activation in a Subscriber Management Dynamic Profile
- Enabling Direct PCC Rule Activation by a PCRF for Subscriber Management
- play_arrow Configuring Application Identification
- play_arrow Configuring Reporting for Application-Aware Data Sessions
- Logging and Reporting Function for Subscribers
- Log Dictionary for Template Types
- Configuring Logging and Reporting for Subscriber Management
- Installing Services Packages for Subscriber Management Logging and Reporting
- Configuring an LRF Profile for Subscribers
- Applying Logging and Reporting Configuration to a Subscriber Management Service Set
- Configuring the Activation of an LRF Rule by a PCC Rule
-
- play_arrow Configuring HTTP Redirect Services
- play_arrow Configuring Captive Portal Content Delivery Services for Redirected Subscribers
- HTTP Redirect Service Overview
- Remote HTTP Redirect Server Operation Flow
- Local HTTP Redirect Server Operation Flow (MX Series, ACX7100-48L, ACX7332 and ACX7348)
- Configuring MS-MPC-Based or MX-SPC3-Based Static HTTP Redirect Services
- Configuring MS-MPC-Based or MX-SPC3-Based Converged HTTP Redirect Services
- Configuring Routing Engine-Based, Static HTTP Redirect Services
- Configuring Routing Engine-Based, Converged HTTP Redirect Services
- Adding Subscriber Information to HTTP Redirect URLs
- How to Automatically Remove the HTTP Redirect Service After the Initial Redirect
- Example: Configuring HTTP Redirect Services Using a Next-Hop Method and Attaching It to a Static Interface
-
- play_arrow Configuring Subscriber Secure Policy
- play_arrow Configuring Subscriber Secure Policy Traffic Mirroring Overview
- play_arrow Configuring RADIUS-Initiated Subscriber Secure Policy Traffic Mirroring
- RADIUS-Initiated Subscriber Secure Policy Overview
- Subscriber Secure Policy Traffic Mirroring Architecture Using RADIUS
- RADIUS-Initiated Traffic Mirroring Interfaces
- RADIUS-Initiated Traffic Mirroring Process at Subscriber Login
- RADIUS-Initiated Traffic Mirroring Process for Logged-In Subscribers
- RADIUS Attributes Used for Subscriber Secure Policy
- Using the Packet Header to Track Subscribers on the Mediation Device
- Configuring RADIUS-Initiated Subscriber Secure Policy Mirroring Overview
- Guidelines for Configuring Subscriber Secure Policy Mirroring
- Configuring Support for Subscriber Secure Policy Mirroring
- Configuring RADIUS Server Support for Subscriber Secure Policy Mirroring
- Terminating RADIUS-Initiated Subscriber Traffic Mirroring
- play_arrow Configuring DTCP-Initiated Subscriber Secure Policy Traffic Mirroring
- DTCP-Initiated Subscriber Secure Policy Overview
- Subscriber Secure Policy Traffic Mirroring Architecture Using DTCP
- DTCP-Initiated Traffic Mirroring Interfaces
- DTCP-Initiated Traffic Mirroring Process
- DTCP Messages Used for Subscriber Secure Policy
- Packet Header for Mirrored Traffic Sent to Mediation Device
- Configuring DTCP-Initiated Subscriber Secure Policy Mirroring Overview
- Guidelines for Configuring Subscriber Secure Policy Mirroring
- Configuring Support for Subscriber Secure Policy Mirroring
- Configuring the Mediation Device as a User on the Router
- Configuring a DTCP-over-SSH Connection to the Mediation Device
- Configuring the Mediation Device to Provision Traffic Mirroring
- Disabling RADIUS-Initiated Subscriber Secure Policy Mirroring
- Example: Configuring Traffic That Is Mirrored Using DTCP-Initiated Subscriber Secure Policy
- Terminating DTCP-Initiated Subscriber Traffic Mirroring Sessions
- play_arrow Configuring DTCP Messages Used for DTCP-Initiated Subscriber Secure Policy Mirroring
- play_arrow Configuring Subscriber Secure Policy Support for IPv4 Multicast Traffic
- play_arrow Configuring Intercept-Related Information for Subscriber Secure Policy
-
- play_arrow Configuring Stateless, Rule-Based Services Using Application-Aware Access Lists
- play_arrow AACL Overview
- play_arrow Configuring AACL Rules
- play_arrow Example: Configuring AACL Rules
- play_arrow Example: Configuring AACL Rule Sets
- play_arrow Configuring Logging of AACL Flows
-
- play_arrow Remote Device and Service Management
- play_arrow Configuring Remote Device Services Management
- play_arrow Configuring TCP Port Forwarding for Remote Subscriber Services
- play_arrow Configuring IPFIX Mediation for Remote Device Monitoring
- play_arrow Collection and Export of Local Telemetry Data on the IPFIX Mediator
-
- play_arrow Troubleshooting
- play_arrow Contacting Juniper Networks Technical Support
- play_arrow Knowledge Base
-
- play_arrow Configuration Statements and Operational Commands
list Table of Contents
Example: Configuring a Dynamic Interface Set of VLAN Subscribers
date_range
06-Dec-23
Requirements
This example uses the following software and hardware components:
MX Series Router with MPCs
Overview
In this example, the network administrator groups dynamic VLAN interfaces in an interface set. The interface set is configured in a dynamic profile, and enables hierarchical scheduling for the VLAN interfaces for a multiplay service.
DHCP is used as the access method, and RADIUS is used as the authentication method for the interfaces associated with the interface set.
Configuring the Dynamic VLANs
- CLI Quick Configuration
- Configuring the Dynamic Profile for the Autoconfigured VLANs
- Configuring the VLAN Interfaces
- Configuring the Loopback Interface
CLI Quick Configuration
To quickly configure the dynamic VLANs, copy the following commands and paste them into the router terminal window:
content_copy zoom_out_map
[edit] edit dynamic-profiles vlan-prof edit interfaces $junos-interface-ifd-name unit $junos-interface-unit set vlan-id $junos-vlan-id set demux-source inet set family inet unnumbered-address lo0.0 preferred-source-address 203.0.113.32 top edit interfaces ge-1/0/0 set hierarchical-scheduler set vlan-tagging edit auto-configure vlan-ranges dynamic-profile vlan-prof set ranges any set accept inet top set interfaces lo0 unit 0 family inet address 203.0.113.32/32
Configuring the Dynamic Profile for the Autoconfigured VLANs
Step-by-Step Procedure
In this section, you create a dynamic profile for the VLAN IDs to be automatically assigned when subscribers log in.
To configure the dynamic profile for the VLANs:
Configure the dynamic profile.
content_copy zoom_out_map[edit] user@host#edit dynamic-profile vlan-prof
Configure the interfaces.
content_copy zoom_out_map[edit dynamic-profiles vlan-prof] user@host#edit interfaces $junos-interface-ifd-name unit $junos-interface-unit
Add the VLAN ID variable.
content_copy zoom_out_map[edit dynamic-profiles vlan-prof interfaces $junos-interface-ifd-name unit $junos-interface-unit] user@host#set vlan-id $junos-vlan-id
Configure the demux source as IPv4.
content_copy zoom_out_map[edit dynamic-profiles vlan-prof interfaces $junos-interface-ifd-name unit $junos-interface-unit] user@host#set demux-source inet
Configure the family.
content_copy zoom_out_map[edit dynamic-profiles vlan-prof interfaces $junos-interface-ifd-name unit $junos-interface-unit] user@host#set family inet unnumbered-address lo0.0 preferred-source-address 203.0.113.32
Configuring the VLAN Interfaces
Step-by-Step Procedure
To configure the VLAN interfaces:
Create the VLAN interface.
content_copy zoom_out_map[edit] user@host# edit interfaces ge-1/0/0
Enable hierarchical scheduling.
content_copy zoom_out_map[edit interfaces ge-1/0/0] user@host# set hierarchical-scheduler
Configure VLAN tagging.
content_copy zoom_out_map[edit interfaces ge-1/0/0] user@host# set vlan-tagging
Configure auto-configuration for the dynamic profile.
content_copy zoom_out_map[edit interfaces ge-1/0/0] user@host# edit auto-configure vlan-ranges dynamic-profile vlan-prof
Configure any VLAN ID range.
content_copy zoom_out_map[edit interfaces ge-1/0/0 auto-configure vlan-ranges dynamic-profile vlan-prof] user@host# set ranges any
Specify IPv4 traffic for the VLAN.
content_copy zoom_out_map[edit interfaces ge-1/0/0 auto-configure vlan-ranges dynamic-profile vlan-prof] user@host# set accept inet
Configuring the Loopback Interface
Step-by-Step Procedure
To configure the loopback interface:
Create the loopback interface.
content_copy zoom_out_map[edit] user@host# edit interfaces lo0
Configure the unit and the family.
content_copy zoom_out_map[edit intefaces lo0] user@host# set unit 0 family inet address 203.0.113.32/32
Configuring Dynamic Traffic Scheduling and Shaping
- CLI Quick Configuration
- Configuring the Schedulers in the Dynamic Profile
- Configuring the Scheduler Map in the Dynamic Profile
- Configuring the Traffic-Control Profile in the Dynamic Profile
CLI Quick Configuration
To quickly configure the traffic scheduling and shaping parameters, copy the following commands and paste them into the router terminal window:
content_copy zoom_out_map
[edit] edit dynamic-profiles multiplay class-of-service schedulers be_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit ef_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit af_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit nc_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit voice_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit video_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit game_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up edit data_sch set transmit-rate percent 12 set buffer-size percent 12 set priority low up 2 edit scheduler-maps all_smap set forwarding-class be scheduler be_sch set forwarding-class ef scheduler ef_sch set forwarding-class af scheduler af_sch set forwarding-class nc scheduler nc_sch set forwarding-class voice scheduler voice_sch set forwarding-class video scheduler video_sch set forwarding-class game scheduler game_sch set forwarding-class data scheduler data_sch up 2 edit traffic-control-profiles multiplay set scheduler-map all_smap set shaping-rate 100m set guaranteed-rate 20m
Configuring the Schedulers in the Dynamic Profile
Step-by-Step Procedure
In this section, you create a dynamic profile for the multiplay service and configure scheduling and shaping.
To configure the schedulers:
Create the
multiplaydynamic profile.content_copy zoom_out_map[edit] user@host# edit dynamic-profiles multiplay class-of-service schedulers
Configure the best effort scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit be_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the expedited forwarding scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit ef_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the assured forwarding scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit af_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the network control scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit nc_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the voice scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit voice_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the video scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit video_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the gaming scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit game_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configure the data scheduler.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service schedulers] user@host# edit data_sch user@host# set transmit-rate percent 12 user@host# set buffer-size percent 12 user@host# set priority low
Configuring the Scheduler Map in the Dynamic Profile
Step-by-Step Procedure
To configure the scheduler map:
Configure the scheduler map for all of the services.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service] user@host# edit scheduler-maps all_smap
Configure the forwarding classes for each service in the scheduler map.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service scheduler-maps all_smap] user@host# set forwarding-class be scheduler be_sch user@host# set forwarding-class ef scheduler ef_sch user@host# set forwarding-class af scheduler af_sch user@host# set forwarding-class nc scheduler nc_sch user@host# set forwarding-class voice scheduler voice_sch user@host# set forwarding-class video scheduler video_sch user@host# set forwarding-class game scheduler game_sch user@host# set forwarding-class data scheduler data_sch
Configuring the Traffic-Control Profile in the Dynamic Profile
Step-by-Step Procedure
To configure the traffic-control profile the interface set:
Configure the traffic-control profile.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service] user@host# edit traffic control-profiles multiplay
Configure the scheduler map.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service traffic control-profiles multiplay] user@host# set scheduler-map all_smap
Configure the shaping rate.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service traffic control-profiles multiplay] user@host# set shaping-rate 100m
Configure the guaranteed rate.
content_copy zoom_out_map[edit dynamic-profiles multiplay class-of-service traffic control-profiles multiplay] user@host# set guaranteed-rate 20m
Configuring the Interface Set in the Dynamic Profile
- CLI Quick Configuration
- Configuring the Interfaces for the Interface Set
- Configuring the Interface Set
- Applying the Traffic-Control Profile to the Interface Set
CLI Quick Configuration
To quickly configure the interface set, copy the following commands and paste them into the router terminal window:
content_copy zoom_out_map
[edit] edit dynamic-profiles multiplay edit interfaces interface-set $junos-interface-set-name set interface $junos-interface-ifd-name unit $junos-underlying-interface-unit top edit class-of-service interfaces interface-set set output-traffic-control-profile multiplay
Configuring the Interfaces for the Interface Set
Step-by-Step Procedure
To configure the interface variable for the interface set:
Configure the dynamic profile for the interface set.
content_copy zoom_out_map[edit] user@host#edit dynamic-profiles multiplay
Configure the interface using the Junos OS predefined variable.
content_copy zoom_out_map[edit dynamic-profiles multiplay] user@host#edit interfaces $junos-interface-ifd-name unit $junos-underlying-interface-unit
Configure the family.
content_copy zoom_out_map[edit dynamic-profiles multiplay interfaces $junos-interface-set-name unit $junos-underlying-interface-unit] user@host#set family inet unnumbered-address lo0.0 preferred-source-address 203.0.113.32
Configuring the Interface Set
Step-by-Step Procedure
To configure the interface set:
Configure the interface set using the Junos OS predefined variable.
content_copy zoom_out_map[edit dynamic-profiles multiplay] user@host#edit interfaces interface-set $junos-interface-set-name
Add the dynamic VLAN interfaces to the interface set.
content_copy zoom_out_map[edit dynamic-profiles multiplay interfaces $junos-interface-set-name] user@host#set interface $junos-interface-ifd-name unit $junos-underlying-interface-unit
Applying the Traffic-Control Profile to the Interface Set
Step-by-Step Procedure
You apply the traffic-control profile outside of the
dynamic profile in the [edit class-of-service] hierarchy.
To apply the traffic-control profile:
Specify the interface set to which you want to apply the traffic-control profile.
content_copy zoom_out_map[edit class-of-service] user@host#edit interfaces interface-set dynamic-set
Attach the output traffic-control profile defined in the dynamic profile to the interface set.
content_copy zoom_out_map[edit class-of-service interfaces] user@host#set output-traffic-control-profile multiplay
Configuring DHCP Access
CLI Quick Configuration
To quickly configure DHCP access, copy the following commands and paste them into the router terminal window:
content_copy zoom_out_map
[edit] edit system services dhcp-local-server authentication set password $ABC123 set username-include user-prefix multiplay up 1 set dynamic-profile dhcp-vlan-prof aggregate-clients replace set group vlans interface ge-1/0/0 top edit access address-assignment pool v4 family inet set network 203.0.113.0/16 set range limited low 203.0.113.10 set range limited high 203.0.113.250 set dhcp-attributes maximum-lease-time 84600
Configuring the DHCP Local Server
Step-by-Step Procedure
To configure DHCP access:
Configure the DHCP local server.
content_copy zoom_out_map[edit system] user@host# edit services dhcp-local-server authentication
Set the password.
content_copy zoom_out_map[edit system services dhcp-local-server authentication] user@host# set password $ABC123
Specify that you want to include optional information in the username.
content_copy zoom_out_map[edit system services dhcp-local-server authentication] user@host# set username-include user-prefix multiplay
Attach the dynamic profile with the interface set.
content_copy zoom_out_map[edit system services dhcp-local-server] user@host# set dynamic-profile dhcp-vlan-prof aggregate-clients replace
Configure a group for the VLAN interface.
content_copy zoom_out_map[edit system services dhcp-local-server] user@host# set group vlans interface ge-1/0/0
Configuring Address Assignment Pools
Step-by-Step Procedure
To configure address assignment pools:
Configure the pool of IPv4 addresses.
content_copy zoom_out_map[edit access] user@host#edit address-assignment pool v4 family inet
Configure the family of interfaces in the pool.
content_copy zoom_out_map[edit access address-assignment pool v4] user@host#set network 203.0.113.0/16
Configure the upper and lower bounds of the address range.
content_copy zoom_out_map[edit access address-assignment pool v4] user@host#set range limited low 203.0.113.10 user@host#set range limited high 203.0.113.250
Configure the maximum length of time in seconds for which a subscriber can request and hold a lease.
content_copy zoom_out_map[edit access address-assignment pool v4] user@host#set dhcp-attributes maximum-lease-time 84600
Configuring RADIUS Authentication
CLI Quick Configuration
To quickly configure RADIUS authentication, copy the following commands and paste them into the router terminal window:
content_copy zoom_out_map
[edit] edit access radius-server 192.51.100.108 set secret $ABC123ABC123ABC123 set timeout 5 set retry 5 up 2 edit profile acc-prof set authentication-order radius set radius authentication-server 192.51.100.108
Configuring RADIUS Access
Step-by-Step Procedure
To configure RADIUS access:
Configure the RADIUS server.
content_copy zoom_out_map[edit access] user@host#edit radius-server 192.51.100.108
Configure the required secret (password) that the local router or switch passes to the RADIUS client.
content_copy zoom_out_map[edit access radius-server 192.51.100.108] user@host# set secret $ABC123ABC123ABC123
Configure the length of time that the local router or switch waits to receive a response from a RADIUS server.
content_copy zoom_out_map[edit access radius-server 192.51.100.108] user@host# set timeout 5
Configure the number of times that the router or switch attempts to contact a RADIUS accounting server.
content_copy zoom_out_map[edit access radius-server 192.51.100.108] user@host# set retry 5
Configure the access profile.
content_copy zoom_out_map[edit access] user@host#edit profile acc-prof
Configure the authentication order.
content_copy zoom_out_map[edit access profile acc-prof ] user@host# set authentication-order radius
Configure the authentication server.
content_copy zoom_out_map[edit access profile acc-prof] user@host#set radius authentication-server 192.51.100.108
Results
content_copy zoom_out_map
dynamic-profiles {
vlan-prof {
interfaces {
“$junos-interface-ifd-name” {
unit "$junos-interface-unit" {
vlan-id "$junos-vlan-id";
demux-source inet;
family inet {
unnumbered-address lo0.0 preferred-source-address 203.0.113.32;
}
}
}
}
}
multiplay {
class-of-service {
traffic-control-profiles {
multiplay {
scheduler-map all_smap;
shaping-rate 100m;
guaranteed-rate 20m;
}
}
interfaces {
interface-set “$junos-interface-set-name” {
interface “$junos-interface-ifd-name” {
unit “$junos-underlying-interface-unit”;
}
}
“$junos-interface-ifd-name” {
unit "$junos-interface-unit" {
output-traffic-control-profile multiplay;
}
}
}
scheduler-maps {
all_smap {
forwarding-class be scheduler be_sch;
forwarding-class ef scheduler ef_sch;
forwarding-class af scheduler af_sch;
forwarding-class nc scheduler nc_sch;
forwarding-class voice scheduler voice_sch;
forwarding-class video scheduler video_sch;
forwarding-class game scheduler game_sch;
forwarding-class data scheduler data_sch;
}
}
schedulers {
be_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
ef_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
af_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
nc_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
voice_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
video_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
game_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
data_sch {
transmit-rate percent 12;
buffer-size percent 12;
priority low;
}
}
}
}
access {
radius-server {
192.51.100.108 {
secret "$ABC123ABC123ABC123"; ## SECRET-DATA
timeout 5;
retry 5;
}
}
profile acc-prof {
authentication-order radius;
radius {
authentication-server 192.51.100.108;
}
}
address-assignment {
pool v4 {
family inet {
network 203.0.113.0/16;
range limited {
low 203.0.113.10;
high 203.0.113.250;
}
dhcp-attributes {
maximum-lease-time 84600;
}
}
}
}
}
class-of-service {
interfaces {
interface-set dynamic-set {
output-traffic-control-profile multiplay;
}
}
}
interfaces {
interface-set “$junos-interface-set-name” {
interface "$junos-interface-ifd-name" {
unit "$junos-underlying-interface-unit";
}
}
"$junos-interface-ifd-name" {
unit "$junos-underlying-interface-unit" {
family inet {
unnumbered-address lo0.0 preferred-source-address 203.0.113.32;
}
}
}
}
}
}
interfaces {
ge-1/0/0 {
hierarchical-scheduler;
vlan-tagging;
auto-configure {
vlan-ranges {
dynamic-profile vlan-prof {
accept inet;
ranges {
any;
}
}
}
}
}
lo0 {
unit 0 {
family inet {
address 203.0.113.32/32;
}
}
}
}
system {
services {
dhcp-local-server {
authentication {
password $ABC123;
username-include {
user-prefix multiplay;
}
}
dynamic-profile multiplay aggregate-clients replace;
group vlans {
interface ge-1/0/0.0;
}
}
}
}
Verification
To confirm that the configuration is correct, perform these tasks:
- Verifying the Interfaces that are Included in the Interface Set
- Verifying the Traffic Scheduling and Shaping Parameters for the Interface Set
Verifying the Interfaces that are Included in the Interface Set
Purpose
Verify the interfaces included in the interface set.
Action
content_copy zoom_out_map
user@host> show interfaces interface-set dynamic-set terse
