close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Configuring DHCP Layer 3 Wholesale Networks
play_arrow Configuring PPPoE Layer 3 Wholesale Networks
- play_arrow Subscriber Management PPPoE Wholesale Overview
- play_arrow Configuring PPPoE Layer 3 Wholesale Networks
play_arrow Configuring Layer 2 Wholesale Networks
- play_arrow Subscriber Management Layer 2 Wholesale Overview
- play_arrow Configuring Layer 2 Wholesale Networks
play_arrow Configuring ANCP-Triggered Layer 2 Wholesale Services
- play_arrow ANCP-Triggered Layer 2 Wholesale Service Overview
  - Layer 2 Wholesale with ANCP-Triggered VLANs Overview
- play_arrow Configuring ANCP-Triggered Layer 2 Wholesale Services
- play_arrow Configuring Flat-File Accounting for Layer 2 Wholesale Services
- play_arrow Configuring Five-Level and Four-Level Heterogeneous Networks
  - Five-Level and Four-Level Heterogeneous Networks
  - OLT Migration to Using PON TLVs Instead of DSL TLVs
play_arrow Configuration Statements and Operational Commands
- dynamic-profile (DHCP Local Server)
- Junos CLI Reference Overview

list Table of Contents

English

keyboard_arrow_right

Configuring a Username for Authentication of Out-of-Band Triggered Dynamic VLANs

date_range 06-Dec-23

arrow_backward

arrow_forward

When a subscriber logs in, the Access-Request message that is sent to the RADIUS server includes a username and optionally a password generated locally on the router to authenticate the subscriber during the VLAN authorization process. For a Layer 2 network that is wholesaled to a retailer where the dynamic VLANs are instantiated by out-of-band ANCP Port Up messages, you can configure the router to create a unique username with the value of the ANCP TLVs—Access-Loop-Circuit-ID, Access-Loop-Remote-Id, or both—as received in the ANCP Port Up message from the access node.

This configuration assumes the following:

The ANCP agent is configured to notify AAA when it receives ANCP Port Up and Port Down messages.
The dynamic profile is configured to instantiate a dynamic VLAN when notified by the ANCP agent that it has received an out-of-band ANCP Port Up message.
The RADIUS authentication server is properly configured.

To include ANCP TLVs in the authentication username

(Optional) Specify inclusion of the Access-Loop-Circuit-ID TLV value.

[edit interfaces ge-0/0/0 auto-configure vlan-ranges username-include (Interfaces)]
user@host# set circuit-id

(Optional) Specify inclusion of the Access-Loop-Remote-ID TLV value.

[edit interfaces ge-0/0/0 auto-configure vlan-ranges username-include (Interfaces)]
user@host# set remote-id

Note:

This ANCP information is not supported in stacked VLANs.

Note:

You can use any of the attributes available to the username-include statement, except: mac-address, option-18, option-37, and option-82.

You can include other information in the username as for conventional autosensed dynamic VLANs. Alternatively, if you configure the router to convey ANCP-sourced access loop attributes as Juniper Networks VSAs—in this case Acc-Loop-Cir-Id (26-110) and Acc-Loop-Remote-Id (26-182)—the Access-Request message includes sufficient unique access line information for the RADIUS server to determine whether the access loop is wholesaled to a retailer or retained for the wholesaler.

arrow_backward PREVIOUS Configuring the ANCP Agent for ANCP-Triggered, Autosensed Dynamic VLANs

NEXT arrow_forward Configuring Out-of-Band ANCP Messages to Trigger Dynamic VLAN Instantiation

Broadband Subscriber Management Wholesale User Guide

Configuring a Username for Authentication of Out-of-Band Triggered Dynamic VLANs

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Broadband Subscriber Management Wholesale User Guide

Configuring a Username for Authentication of Out-of-Band Triggered Dynamic VLANs

Related Documentation

Stay in touch