DHCP Access Profiles for Subscriber Authentication and Accounting Parameters
Access Profiles for the DHCP Relay Agent and DHCP Local Server Overview
Starting in Junos OS Release
14.2, access profiles enable you to specify subscriber access authentication
and accounting parameters. After access profiles
are created, you can attach them at the [edit system services
dhcp-local-server]
hierarchy level on a DHCP local server for
DHCP or DHCPv6 subscribers and at the [edit forwarding-options
dhcp-relay]
hierarchy level on a DHCP relay agent for DHCP or
DHCPv6 subscribers, group of subscribers, or group of interfaces.
If you configured a global access profile at the [edit
access profile profile-name]
hierarchy
level for all DHCP or DHCPv6 clients on a router that functions as
a DHCP local server or a DHCP relay agent, the access profile configured
at the [edit system services dhcp-local-server
] hierarchy
level on a DHCP local server for DHCP or DHCPv6 subscribers and at
the [edit forwarding-options dhcp-relay]
hierarchy level
on a DHCP relay agent for DHCP or DHCPv6 subscribers take precedence
over the global access profile.
Configuring an access profile for DHCP subscribers at the DHCP relay agent level or the DHCP local server level provide you with the flexibility and effectiveness of enabling DHCP authentication and accounting for specific subscribers instead of enabling them at a global level. If no access profile is configured at the DHCP relay agent level or the DHCP local server level, the global access profile becomes effective.
Attaching Access Profiles to DHCP Subscriber Interfaces or DHCP Client Interfaces
Starting in Junos OS Release 14.2, you can attach an access profile to a DHCP subscriber interface, to a DHCP client interface, to a group of subscriber interfaces, and to a specific subscriber or groups of subscribers. When a DHCP subscriber or DHCP client logs in, the specified access profile is instantiated and the services defined in the profile are applied to the interface, subscriber, or the group of interfaces or subscribers.
This topic contains the following sections:
- Attaching an Access Profile to All DHCP Subscriber or All DHCP Client Interfaces
- Attaching an Access Profile to a Group of DHCP Subscribers or a Group of DHCP Clients
- Attaching an Access Profile to a Group of DHCP Subscriber Interfaces or a Group of DHCP Client Interfaces
Attaching an Access Profile to All DHCP Subscriber or All DHCP Client Interfaces
To attach an access profile to all DHCP subscribers or all DHCP client interfaces:
-
For DHCP local server:
[edit system services dhcp-local-server] user@host# set access-profile profile-name
For DHCP relay agent:
[edit forwarding-options dhcp-relay] user@host# set access-profile profile-name
Attaching an Access Profile to a Group of DHCP Subscribers or a Group of DHCP Clients
You use the group feature to group together a set of subscriber access profiles and then apply a common DHCP configuration to the named subscriber profile group. The extended DHCP local server, DHCPv6 local server, DHCP relay agent, and DHCPv6 relay agent all support groups.
Before you begin:
Configure the group by entering the
group group-name
statement at the[edit system services dhcp-local-server]
or the[edit forwarding-options dhcp-relay]
hierarchy level. For DHCPv6 subscriber profiles, use thedhcpv6
option at this hierarchy level.
To attach an access profile to a group of subscribers:
At the DHCP configuration hierarchy, specify the name of the group and the access profile to attach to the group.
For DHCP local server:
[edit system services dhcp-local-server] user@host# set group boston access-profile profile-name
For DHCP relay agent:
[edit forwarding-options dhcp-relay] user@host# set group quebec access-profile profile-name
For DHCPv6 local server:
[edit system services dhcp-local-server dhcpv6] user@host# set group boston access-profile profile-name
For DHCPv6 relay agent:
[edit forwarding-options dhcp-relay dhcpv6] user@host# set group quebec access-profile profile-name
Attaching an Access Profile to a Group of DHCP Subscriber Interfaces or a Group of DHCP Client Interfaces
Before you begin:
Configure the interface group.
To attach an access profile to a group of interfaces:
At the DHCP configuration hierarchy, specify the name of the interface group and the access profile to attach to the group.
For DHCP local server:
[edit system services dhcp-local-server] user@host# set group boston interface interface-name access-profile profile-name
For DHCP relay agent:
[edit forwarding-options dhcp-relay] user@host# set group quebec interface interface-name access-profile profile-name
For DHCPv6 local server:
[edit system services dhcp-local-server dhcpv6] user@host# set group boston interface interface-name access-profile profile-name
For DHCPv6 relay agent:
[edit forwarding-options dhcp-relay dhcpv6] user@host# set group quebec interface interface-nameaccess-profile profile-name
Change History Table
Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.