Example: Configuring Dynamic LNS MLPPP Subscribers

Step-by-Step Procedure

The following example requires that you navigate various levels in the configuration hierarchy.

To configure a tunnel group with a pool of service interfaces and L2TP access profile attributes for dynamic LNS MLPPP subscribers:

1. Create the access profile.

   [edit access]user@host# set profile ce-l2tp-profile2

2. Configure an L2TP (LAC) access client.

   [edit access profile ce-l2tp-profile2]user@host# set client ce-lac-3

3. Associate a group profile containing PPP attributes to apply for the PPP sessions being tunneled from this LAC client.

   [edit access profile ce-l2tp-profile2 client ce-lac-3]user@host# set user-group-profile ce-lac-1-gp

4. Configure the following L2TP access profile attributes for this example:

   • L2TP client is multilink (MLPPP)-capable for subscribers. The multilink statement in the L2TP access client profile determines whether MLPPP is supported for subscribers coming in from the LAC peer.

   • Maximum number of sessions allowed in a tunnel from the client (LAC).

   • Tunnel password used to authenticate the client (LAC).

   • Dynamic profile name in the L2TP access client profile for dynamic LNS MLPPP subscribers.

     Note:

     If the dynamic-profile name is defined in the L2TP access client profile, it is used to create the dynamic LNS MLPPP member link; otherwise, the dynamic-profile name defined in the tunnel group is used. If neither profile contains the family mlppp statement, then the incoming LNS session fails.

   [edit access profile ce-l2tp-profile2 client ce-lac-3]user@host# set l2tp multilinkuser@host# set l2tp maximum-sessions-per-tunnel 2000user@host# set l2tp shared-secret passworduser@host# set dynamic-profile ml-lns-member-prof

5. Create the tunnel group.

   [edit services l2tp]user@host# set tunnel-group dyn-l2tp-tunnel-group

6. Set the tunnel access profile equal to the setting you defined for the access profile.

   [edit services l2tp tunnel-group dyn-l2tp-tunnel-group]user@host# set l2tp-access-profile ce-l2tp-profile2

7. Set the L2TP AAA access profile.

   Note:

   You can specify the L2TP AAA access profile in either the [edit access] or [edit services] hierarchy levels, using the LNS access client profile or tunnel-group statements, respectively. An L2TP AAA access profile defined using the [edit access] hierarchy level overrides the L2TP AAA access profile defined for the tunnel-group using the [edit services] hierarchy level.

   [edit services l2tp tunnel-group dyn-l2tp-tunnel-group]user@host# set aaa-access-profile ce-authenticator

8. Set the local gateway address for the L2TP tunnel.

   [edit services l2tp tunnel-group dyn-l2tp-tunnel-group]user@host# set local-gateway address 10.1.1.1

9. Specify the pool of service interfaces for the dynamic LNS MLPPP subscribers.

   [edit services l2tp tunnel-group dyn-l2tp-tunnel-group]user@host# set service-device-pool pool1

10. Specify the dynamic profile used to create the dynamic LNS MLPPP member link.

    [edit services l2tp tunnel-group dyn-l2tp-tunnel-group]user@host# set dynamic-profile ml-lns-member-prof

11. If you are done configuring the device, commit the configuration.

Step-by-Step Procedure

The following example requires that you navigate various levels in the configuration hierarchy.

You can configure the dynamic-profile name used to create the dynamic LNS member link IFL in either the L2TP client access profile or in the tunnel-group. See Configuring a Tunnel Group with a Pool of Service Interfaces and L2TP Access Profile Attributes.

The following example shows dynamic-profile configuration for LNS MLPPP and PPP subscribers. The family mlppp statement contains the dynamic-profile name, and either the service-interface or the service-device-pool, used to create the dynamic bundle IFL. If you configure a service-device-pool, an inline services (si) interface is selected from the pool to create the dynamic bundle IFL using a round-robin method.

You must also configure the family inet statement in the si member link dynamic profile interface for tunneled subscribers. The family inet statement enables the L2TP long route to be installed and supported for the lookup engine to steer control packets to the Routing Engine.

1. Specify the dynamic profile that you used to create the dynamic LNS MLPPP member link previously in Configuring a Tunnel Group with a Pool of Service Interfaces and L2TP Access Profile Attributes.

   [edit dynamic-profiles]user@host# set ml-lns-member-prof

2. Configure the interface for the dynamic profile by setting the predefined dynamic interface variable $junos-interface-ifd-name, and the logical interface unit by setting the predefined unit number variable $junos-interface-unit. The interface and unit number variables are dynamically replaced with the interface and unit number that the subscriber accesses when connecting to the MX Series.

   Note:

   The interface setting for a dynamic profile for PPPoE sessions can use either of the following code formats:

   • set interfaces pp0

     or

   • set interfaces “$junos-interface-ifd-name”

   This example uses set interfaces “$junos-interface-ifd-name”.

   [edit dynamic-profiles ml-lns-member-prof]user@host# set interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”

3. For the $junos-interface-ifd-name interface, set the L2TP interface dial options to specify that the logical interface can host one session at a time (dedicated).

   [edit dynamic-profiles ml-lns-member-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set dial-options l2tp-interface-id dont care dedicated

4. Enable MLPPP support for LNS MLPPP subscribers and configure the dynamic bundle interface (IFL) by setting the predefined dynamic bundle interface variable $junos-bundle-interface-name.

   Note:

   The family mlppp statement determines whether MLPPP is supported for subscribers coming in from the underlying interface.

   [edit dynamic-profiles ml-lns-member-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set family mlppp bundle “$junos-bundle-interface-name”

5. Specify the pool of service interfaces for the dynamic LNS MLPPP subscribers.

   [edit dynamic-profiles ml-lns-member-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit” family mlppp]user@host# set service-device-pool pool1

6. Specify the dynamic profile name for the bundle.

   [edit dynamic-profiles ml-lns-member-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit” family mlppp]user@host# set dynamic-profile ml-bundle-prof

7. Enable support for LNS subscribers and the LNS long route.

   [edit dynamic-profiles ml-lns-member-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set family inet

8. If you are done configuring the device, commit the configuration.

Step-by-Step Procedure

The following example requires that you navigate various levels in the configuration hierarchy.

Optionally, you can configure the dynamic profile to support mixed mode to enable PPP subscribers to successfully log in using the dynamic profile.

The following example shows the additional configurations required to support mixed mode for dynamic profiles.

1. Specify the dynamic profile that you used to create the dynamic LNS MLPPP member link previously in Configuring a Tunnel Group with a Pool of Service Interfaces and L2TP Access Profile Attributes.

   [edit dynamic-profiles]user@host# set ml-lns-member-prof

2. When the customer premises equipment (CPE) is for a dynamic virtual routing and forwarding (VRF) PPP subscriber, you must configure the routing instance and its interface.

   [edit dynamic-profiles ml-lns-member-prof]user@host# set routing-instances "$junos-routing-instance" interface "$junos-interface-name"

3. Configure the access route for the routing options.

   [edit dynamic-profiles ml-lns-member-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name"]user@host# set routing-options access route $junos-framed-route-ip-address-prefix

4. Configure the next-hop, metric, and preference for the router.

   [edit dynamic-profiles ml-lns-member-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name" routing-options access route $junos-framed-route-ip-address-prefix]user@host# set next-hop $junos-framed-route-nexthopuser@host# set metric $junos-framed-route-costuser@host# set preference $junos-framed-route-distance

5. Configure the internal access route for the routing options.

   [edit dynamic-profiles ml-lns-member-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name"]user@host# set routing-options access-internal route $junos-subscriber-ip-address

6. Configure the qualified next-hop for the internal route..

   [edit dynamic-profiles ml-lns-member-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name" routing-options access-internal route $junos-subscriber-ip-address ]user@host# set qualified-next-hop $junos-interface-name

7. Follow the procedure described in Configuring a Dynamic Profile for Dynamic LNS Member Link IFL Without Mixed Mode Support to configure the basic settings for the dynamic profile.

   Note:

   To enable mixed mode support, when the CPE is a PPP subscriber, you must also add an unnumbered address, and input and output filters to the family inet statement.

   [edit dynamic-profiles ml-lns-member-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set family inet unnumbered-address $junos-loopback-interfaceuser@host# set family inet filter input "$junos-input-filter" output "$junos-output-filter”

8. When the CPE is a PPP subscriber, you must also configure class of service and define the traffic control profile.

   [edit dynamic-profiles ml-lns-member-prof class-of-service]user@host# set traffic-control-profiles tc-profile

9. For the traffic-control profile, define the following settings: scheduler map, shaping rate, overhead accounting, guaranteed rate, and delay buffer rate.

   [edit dynamic-profiles ml-lns-member-prof class-of-service traffic-control-profiles tc-profile]user@host# set scheduler-map "$junos-cos-scheduler-map"user@host# set shaping-rate "$junos-cos-shaping-rate"user@host# set overhead-accounting "$junos-cos-shaping-mode" bytes "$junos-cos-byte-adjust"user@host# set guaranteed-rate "$junos-cos-guaranteed-rate"user@host# set delay-buffer-rate "$junos-cos-delay-buffer-rate"

10. Configure the interface for the dynamic profile by setting the predefined dynamic interface variable $junos-interface-ifd-name, and the logical interface unit by setting the predefined unit number variable $junos-interface-unit.

    [edit dynamic-profiles ml-lns-member-prof class-of-service]user@host# set interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”

11. For the dynamic profile interface, define the following settings: output traffic control profile, classifiers, and rewrite rules.

    [edit dynamic-profiles ml-lns-member-prof class-of-service interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set output-traffic-control-profile tc-profileuser@host# set classifiers dscp GEN-CLASSIFIER-INuser@host# set rewrite-rules dscp GEN-RW-OUT-DSCP

12. If you are done configuring the device, commit the configuration.

Step-by-Step Procedure

The following example requires that you navigate various levels in the configuration hierarchy.

To configure the dynamic profile for the dynamic bundle IFL, you specify the encapsulation multilink-ppp statement within the dynamic profile. The dynamic profile for the dynamic bundle IFL is referenced from the dynamic profile for dynamic PPPoE and LNS member link IFLs.

You must configure the fragmentation-maps statement statically using class-of-service and assign them in the bundle dynamic profile. You can also set these optional MLPPP parameters: MRRU, short sequence, and fragment-threshold. The following example shows how to configure the dynamic profile for the dynamic bundle IFL.

1. Specify the dynamic profile name for the bundle.

   [edit dynamic-profiles}user@host# set ml-bundle-prof

2. Although MLPPP member links process authentication and routing-instance assignments, if a non-default routing-instance is assigned, you must configure the bundle IFL under the assigned routing-instance. As a result, you must also configure routing-instances in the bundle dynamic-profile.

   [edit dynamic-profiles ml-bundle-prof]user@host# set routing-instances "$junos-routing-instance" interface "$junos-interface-name"

3. Configure the access route for the routing options.

   [edit dynamic-profiles ml-bundle-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name"]user@host# set routing-options access route $junos-framed-route-ip-address-prefix

4. Configure the next-hop, metric, and preference for the router.

   [edit dynamic-profiles ml-bundle-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name" routing-options access route $junos-framed-route-ip-address-prefix]user@host# set next-hop $junos-framed-route-nexthopuser@host# set metric $junos-framed-route-costuser@host# set preference $junos-framed-route-distance

5. Configure the internal access route for the routing options.

   [edit dynamic-profiles ml-bundle-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name"]user@host# set routing-options access-internal route $junos-subscriber-ip-address

6. Configure the qualified next-hop for the internal route.

   [edit dynamic-profiles ml-bundle-prof routing-instances "$junos-routing-instance" interface "$junos-interface-name" routing-options access-internal route $junos-subscriber-ip-address]user@host# set qualified-next-hop $junos-interface-name

7. Configure the interface for the dynamic profile by setting the predefined dynamic interface variable $junos-interface-ifd-name, and the logical interface unit by setting the predefined unit number variable $junos-interface-unit. The interface and unit number variables are dynamically replaced with the interface and unit number that the subscriber accesses when connecting to the MX Series.

   [edit dynamic-profiles ml-bundle-prof]user@host# set interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”

8. Configure the encapsulation multilink-ppp statement to enable MLPPP bundling for the dynamic profile.

   [edit dynamic-profiles ml-bundle-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set encapsulation multilink-ppp

9. Configure the following MLPPP options for this example:

   • mrru—Specifies the maximum received reconstructed unit value ranging from 1500 through 4500 bytes.

   • fragment-threshold—Applies to all packets and forwarding classes, ranging from 128 through 16,320 bytes.

   • short-sequence—Determines the header format for the MLPPP. Default is long-sequence.

   [edit dynamic-profiles ml-bundle-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set mrru 1500user@host# set fragment-threshold 320user@host# set short-sequence

10. Enable support for MLPP subscribers.

    [edit dynamic-profiles ml-bundle-prof interfaces “$junos-interface-ifd-name” unit “$junos-interface-unit”]user@host# set family inet

11. To enable fragmentation-maps support, you must configure class-of-service and define the traffic control profile.

    [edit dynamic-profiles ml-bundle-prof class-of-service]user@host# set traffic-control-profiles tcp2

12. For the traffic-control profile, define the following settings: scheduler map, shaping rate, guaranteed rate, and delay buffer rate.

    [edit dynamic-profiles ml-bundle-prof class-of-service traffic-control-profiles tcp2]user@host# set scheduler-map "$junos-cos-scheduler-map"user@host# set shaping-rate "$junos-cos-shaping-rate"user@host# set guaranteed-rate "$junos-cos-guaranteed-rate"user@host# set delay-buffer-rate "$junos-cos-delay-buffer-rate"

13. Configure the underlying interface for the dynamic profile by setting the predefined dynamic interface variable $junos-interface-ifd-name, and the logical interface unit by setting the predefined unit number variable $junos-interface-unit. The interface and unit number variables are dynamically replaced with the interface and unit number that the subscriber accesses when connecting to the MX Series.

    [edit dynamic-profiles ml-bundle-prof class-of-service]user@host# set interfaces “$junos-interface-ifd-name” unit "$junos-interface-unit"

14. For the dynamic profile interface, define the output traffic control profile.

    [edit dynamic-profiles ml-bundle-prof class-of-service interfaces “$junos-interface-ifd-name” unit "$junos-interface-unit"]user@host# set output-traffic-control-profile tcp2

15. Define the fragmentation-map required for dynamic profile bundles and used to enable link fragmentation and interleaving (LFI).

    [edit dynamic-profiles ml-bundle-prof class-of-service interfaces “$junos-interface-ifd-name” unit "$junos-interface-unit"]user@host# set fragmentation-map fragmap-2

16. If you are done configuring the device, commit the configuration.

Purpose

Verify that the subscriber information for dynamic MLPPP over LNS is correct.

Action

Meaning

Subscriber information for interface si-1/0/0.1073741824 has been configured for MLPPP with interface type of dynamic.

Purpose

Verify that mixed mode interfaces negotiated correctly for the single link PPP using a dynamic MLPPP-capable subscriber.

Action

Meaning

When a dynamic MLPPP-capable subscriber negotiates a single link PPP, the results are the same as a non-MLPPP subscriber; no bundle IFL or SDB session is created.

Purpose

Verify that the MLPPP over LAC member link IFL is correct.

Action

Meaning

When a PPPoE MLPPP session is tunneled, the bundle and member link binding remains. Although the bundle IFL does not participate in the control and forwarding path, it remains in the user-interface.