Configuring VLAN Interfaces for the Layer 2 Wholesale Solution

date_range 06-Dec-23

arrow_backward

arrow_forward

Clients access the Layer 2 Wholesale network through a specific interface. After they access this interface, and when they are authenticated, VLANs are dynamically created to carry the client traffic.

Note:

To support Layer 2 access profiles the RADIUS server must provide VLAN authentication.

To configure a VLAN interface for dynamic client access:

Access the physical interface that you want to use for dynamically creating VLAN interfaces.
```
[edit interfaces]
user@host# edit ge-2/3/0
```

Specify the encapsulation type for the VLAN interfaces.

content_copy zoom_out_map
[edit interfaces ge-2/3/0]
user@host# set encapsulation flexible-ethernet-services

Specify the desired VLAN tagging.
Note:
This example uses flexible VLAN tagging to simultaneously support transmission of 802.1Q VLAN single-tag and dual-tag frames on logical interfaces on the same Ethernet port.
```
[edit interfaces ge-2/3/0]
user@host# set flexible-vlan-tagging
```
Specify that you want to automatically configure VLAN interfaces.
```
[edit interfaces ge-2/3/0]
user@host# edit auto-configure
```
Specify that you want to configure stacked VLANs.
```
[edit interfaces ge-2/3/0 auto-configure]
user@host# edit stacked-vlan-ranges
```

Create the dynamic VLAN profile that you want the interface to use.

content_copy zoom_out_map
[edit interfaces ge-2/3/0 auto-configure stacked-vlan-ranges]
user@host# edit dynamic-profile Subscriber_Profile_Retail1

Define the VLAN ranges for the dynamic profile.

content_copy zoom_out_map
[edit interfaces ge-2/3/0 auto-configure stacked-vlan-ranges dynamic-profile “Subscriber_Profile_Retail1”]
user@host# set accept any
user@host# set ranges any,any

Move up two levels in the configuration hierarchy to define the VLAN authentication profile.

content_copy zoom_out_map
[edit interfaces ge-2/3/0 auto-configure stacked-vlan-ranges dynamic-profile “Subscriber_Profile_Retail1”]
user@host# up 2 
[edit interfaces ge-2/3/0 auto-configure stacked-vlan-ranges]
user@host# set authentication password abc123
user@host# set authentication username-include user-prefix user1
user@host# set authentication username-include interface-name
user@host# set access-profile access-profile-1

Define a simple access profile that specifies the RADIUS server used to provide VLAN authentication. Use the top command to position yourself at the edit hierarchy.
```
[edit]
user@host# set access profile access-profile-1 radius-server 10.10.10.1 secret abc123 
```
Repeat steps for any other interfaces that you want to use for creating VLANs.

The configuration of the VLAN Interface for the Layer 2 wholesale dynamic profile is displayed in curly brace format:

content_copy zoom_out_map
[edit]
user@host# show interfaces
ge-2/3/0 {
    flexible-vlan-tagging;
    auto-configure {
        stacked-vlan-ranges {
            dynamic-profile Subscriber_Profile_Retail1 {
                accept any;
                ranges {
                    any,any;
                }
            }
            authentication {
                password abc123;
                username-include {
                    user-prefix user1;
                    interface-name;
                }
            }
            access-profile access-profile-1;
        }
    }
}

arrow_backward PREVIOUS Stacking and Rewriting VLAN Tags for the Layer 2 Wholesale Solution

NEXT arrow_forward Configuring Encapsulation for Layer 2 Wholesale VLAN Interfaces

Broadband Subscriber Management Wholesale User Guide

Configuring VLAN Interfaces for the Layer 2 Wholesale Solution

Related Documentation