- play_arrow AAA for Subscriber Management
- play_arrow AAA for Subscriber Management
- play_arrow RADIUS for Subscriber Management
- RADIUS Servers and Parameters for Subscriber Access
- Storage and Reporting of Interface Descriptions to Uniquely Identify Subscribers
- Session Options for Subscriber Access
- RADIUS NAS Port Attributes and Options
- RADIUS Logical Line Identification
- RADIUS Authentication and Accounting Basic Configuration
- RADIUS Reauthentication As an Alternative to RADIUS CoA for DHCP Subscribers
- Configuring RADIUS Reauthentication for DHCP Subscribers
- RADIUS Accounting for Subscriber Access
- Verifying and Managing Subscriber AAA Information
- Session Termination Causes and RADIUS Termination Cause Codes
- AAA Termination Causes and Code Values
- DHCP Termination Causes and Code Values
- L2TP Termination Causes and Code Values
- PPP Termination Causes and Code Values
- VLAN Termination Causes and Code Values
- play_arrow Domain Maps for Subscriber Management
- play_arrow Testing and Troubleshooting AAA
- play_arrow RADIUS Dictionary Files
- Junos OS Release 15.1 Subscriber Management RADIUS Dictionary [DCT]
- Junos OS Release 16.1 Subscriber Management RADIUS Dictionary [DCT]
- Junos OS Release 16.2 Subscriber Management RADIUS Dictionary [DCT]
- Junos OS Release 17.1 Subscriber Management RADIUS Dictionary [DCT]
- Junos OS Release 17.4 Subscriber Management RADIUS Dictionary [DCT]
- Junos OS Release 18.2 Subscriber Management RADIUS Dictionary [DCT]
- Junos OS Release 18.4 Subscriber Management RADIUS Dictionary [DCT]
-
- play_arrow IPv6 for Subscriber Management
- play_arrow IPv6 for Subscriber Management
- Introduction to IPv6 Addresses
- Migration to IPv6 Using IPv4 and IPv6 Dual Stack
- IPv6 WAN Link Addressing with NDRA
- IPv6 WAN Link Addressing with DHCPv6 IA_NA
- Subscriber LAN Addressing with DHCPv6 Prefix Delegation
- WAN and LAN Addressing Using DHCPv6 IA_NA and DHCPv6 Prefix Delegation
- Designs for IPv6 Addressing in a Subscriber Access Network
- Dual-Stack Access Models in a DHCP Network
- Dual-Stack Access Models in a PPPoE Network
- Best Practices for Configuring IPv4 and IPv6 Dual Stack in a PPPoE Access Network
- Dual Stack for PPPoE Access Networks Using DHCP
- Dual Stack for PPPoE Access Networks Using NDRA
- IP Demultiplexing Interfaces on Packet-Triggered Subscriber Services
- Conservation of IPv4 Addresses for Dual-Stack PPP Subscribers Using On-Demand IPv4 Address Allocation
- Dual Stack Subscribers Monitoring and Management
-
- play_arrow DHCPv6 for Subscriber Management
- play_arrow Packet Triggered Subscriber Services
- play_arrow Packet Triggered Subscriber Services
-
- play_arrow Address-Assignment Pools for Subscriber Management
- play_arrow Address-Assignment Pools for Subscriber Management
-
- play_arrow DNS Addresses for Subscriber Management
- play_arrow DNS Addresses for Subscriber Management
-
- play_arrow M:N Subscriber Redundancy
- play_arrow Access Node Control Protocol and the ANCP Agent for Subscriber Services
- play_arrow Access Node Control Protocol and the ANCP Agent for Subscriber Services
-
- play_arrow Diameter Base Protocol and its Applications
- play_arrow Diameter Base Protocol and its Applications
- Diameter Base Protocol
- Gx-Plus for Provisioning Subscribers
- 3GPP Policy and Charging Control for Wireline Provisioning and Accounting
- NASREQ for Authentication and Authorization
- JSRC for Subscriber Provisioning and Accounting
- JSRC and Subscribers on Static Interfaces
- Monitoring and Management Diameter Information
- Tracing Diameter Base Protocol Events for Troubleshooting
- Troubleshooting Diameter Networks
- Monitoring and Managing Static Subscriber Information
- Tracing Static Subscriber Events for Troubleshooting
-
- play_arrow Configuration Statements and Operational Commands
DHCP Access Profiles for Subscriber Authentication and Accounting Parameters
Access Profiles for the DHCP Relay Agent and DHCP Local Server Overview
Starting in Junos OS Release
14.2, access profiles enable you to specify subscriber access authentication
and accounting parameters. After access profiles
are created, you can attach them at the [edit system services
dhcp-local-server] hierarchy level on a DHCP local server for
DHCP or DHCPv6 subscribers and at the [edit forwarding-options
dhcp-relay] hierarchy level on a DHCP relay agent for DHCP or
DHCPv6 subscribers, group of subscribers, or group of interfaces.
If you configured a global access profile at the [edit
access profile profile-name] hierarchy
level for all DHCP or DHCPv6 clients on a router that functions as
a DHCP local server or a DHCP relay agent, the access profile configured
at the [edit system services dhcp-local-server] hierarchy
level on a DHCP local server for DHCP or DHCPv6 subscribers and at
the [edit forwarding-options dhcp-relay] hierarchy level
on a DHCP relay agent for DHCP or DHCPv6 subscribers take precedence
over the global access profile.
Configuring an access profile for DHCP subscribers at the DHCP relay agent level or the DHCP local server level provide you with the flexibility and effectiveness of enabling DHCP authentication and accounting for specific subscribers instead of enabling them at a global level. If no access profile is configured at the DHCP relay agent level or the DHCP local server level, the global access profile becomes effective.
Attaching Access Profiles to DHCP Subscriber Interfaces or DHCP Client Interfaces
Starting in Junos OS Release 14.2, you can attach an access profile to a DHCP subscriber interface, to a DHCP client interface, to a group of subscriber interfaces, and to a specific subscriber or groups of subscribers. When a DHCP subscriber or DHCP client logs in, the specified access profile is instantiated and the services defined in the profile are applied to the interface, subscriber, or the group of interfaces or subscribers.
This topic contains the following sections:
- Attaching an Access Profile to All DHCP Subscriber or All DHCP Client Interfaces
- Attaching an Access Profile to a Group of DHCP Subscribers or a Group of DHCP Clients
- Attaching an Access Profile to a Group of DHCP Subscriber Interfaces or a Group of DHCP Client Interfaces
Attaching an Access Profile to All DHCP Subscriber or All DHCP Client Interfaces
To attach an access profile to all DHCP subscribers or all DHCP client interfaces:
-
For DHCP local server:
content_copy zoom_out_map[edit system services dhcp-local-server] user@host# set access-profile profile-name
For DHCP relay agent:
content_copy zoom_out_map[edit forwarding-options dhcp-relay] user@host# set access-profile profile-name
Attaching an Access Profile to a Group of DHCP Subscribers or a Group of DHCP Clients
You use the group feature to group together a set of subscriber access profiles and then apply a common DHCP configuration to the named subscriber profile group. The extended DHCP local server, DHCPv6 local server, DHCP relay agent, and DHCPv6 relay agent all support groups.
Before you begin:
Configure the group by entering the
group group-namestatement at the[edit system services dhcp-local-server]or the[edit forwarding-options dhcp-relay]hierarchy level. For DHCPv6 subscriber profiles, use thedhcpv6option at this hierarchy level.
To attach an access profile to a group of subscribers:
At the DHCP configuration hierarchy, specify the name of the group and the access profile to attach to the group.
For DHCP local server:
content_copy zoom_out_map[edit system services dhcp-local-server] user@host# set group boston access-profile profile-name
For DHCP relay agent:
content_copy zoom_out_map[edit forwarding-options dhcp-relay] user@host# set group quebec access-profile profile-name
For DHCPv6 local server:
content_copy zoom_out_map[edit system services dhcp-local-server dhcpv6] user@host# set group boston access-profile profile-name
For DHCPv6 relay agent:
content_copy zoom_out_map[edit forwarding-options dhcp-relay dhcpv6] user@host# set group quebec access-profile profile-name
Attaching an Access Profile to a Group of DHCP Subscriber Interfaces or a Group of DHCP Client Interfaces
Before you begin:
Configure the interface group.
To attach an access profile to a group of interfaces:
At the DHCP configuration hierarchy, specify the name of the interface group and the access profile to attach to the group.
For DHCP local server:
content_copy zoom_out_map[edit system services dhcp-local-server] user@host# set group boston interface interface-name access-profile profile-name
For DHCP relay agent:
content_copy zoom_out_map[edit forwarding-options dhcp-relay] user@host# set group quebec interface interface-name access-profile profile-name
For DHCPv6 local server:
content_copy zoom_out_map[edit system services dhcp-local-server dhcpv6] user@host# set group boston interface interface-name access-profile profile-name
For DHCPv6 relay agent:
content_copy zoom_out_map[edit forwarding-options dhcp-relay dhcpv6] user@host# set group quebec interface interface-nameaccess-profile profile-name
Change History Table
Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.
