User manual JUNIPER NETWORKS JUNOSE SOFTWARE 11.1.X BROADBAND ACCESS CONFIGURATION GUIDE 6-6-2010

[. . . ] JUNOSeTM Software for E SeriesTM Broadband Services Routers Broadband Access Configuration Guide Release 11. 1. x Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www. juniper. net Published: 2010-04-06 Juniper Networks, the Juniper Networks logo, JUNOS, NetScreen, ScreenOS, and Steel-Belted Radius are registered trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. [. . . ] Use the show l2tp and show l2tp destination lockout commands to view information about the L2TP configuration and statistics. Modifying the Lockout Procedure 367 JUNOSe 11. 1. x Broadband Access Configuration Guide Verifying That a Locked-Out Destination Is Available You can use the l2tp destination lockout-test command to configure L2TP to test locked-out destinations; this verifies that a previously locked-out destination is available before the router changes the destination's status. To verify the availability of locked out destinations: host1(config)#l2tp destination lockout-test Configuring a Lockout Timeout You use the l2tp destination lockout-timeout command to configure the amount of time (in seconds) between when an L2TP destination is found to be unavailable and when it is eligible for unlocking. When the timeout period expires, L2TP either begins the lockout test procedure (if configured to do so) or immediately returns the destination to available state. BEST PRACTICE: Always configure the lockout timeout to be shorter than the destruct timeout. The destruct timeout (as described in "Specifying a Destruct Timeout for L2TP Tunnels and Sessions" on page 345) overrides the lockout timeout--when the destruct timeout expires, all information about the locked out destination is deleted, including the time remaining on the destination's lockout timeout and the requirement to run a lockout test prior to returning the destination to service. You can specify a lockout timeout in the range 60­3600 seconds (1 minute­1 hour). The router uses a timeout value of 300 seconds by default. To configure an L2TP lockout timeout: host1(config)#l2tp destination lockout-timeout 500 The new lockout timeout only affects future locked-out destinations; it does not affect destinations that are currently locked out. Unlocking a Destination that is Currently Locked Out You use the l2tp unlock destination command to force L2TP to immediately unlock the specified L2TP destination, which is currently locked out and unavailable. Any remaining lockout time and the lockout test setting (if configured) are not taken into account. You must be at privilege level 10 or higher to use this command. To unlock a currently locked-out destination: host1(config)#l2tp unlock destination ip 192. 168. 1. 98 368 Verifying That a Locked-Out Destination Is Available Chapter 12: Configuring an L2TP LAC Starting an Immediate Lockout Test You use the l2tp unlock-test destination command to force L2TP to immediately start the lockout test for the specified destination--any remaining lockout time for the destination is ignored. You must be at privilege level 10 or higher to use this command. NOTE: If lockout testing is not configured, this command immediately unlocks the destination and L2TP then considers the destination to be available To force an immediate lockout test for a specific destination: host1(config)#l2tp unlock-test destination ip 192. 169. 110. 8 Managing Address Changes Received from Remote Endpoints A remote endpoint can use the Start-Control-Connection-Reply (SCCRP) packets that it sends to the E Series LAC to change the address that the LAC uses to communicate with the endpoint. By default, the LAC accepts the change and uses the new address to communicate with the endpoint. However, you can configure the LAC to ignore or reject the requested change. Setting up the LAC to ignore address changes in SCCRP packets enables the router to construct tunnels with separate receive and transmit addresses and to avoid problems due to a misconfiguration. Three possible configurations are available: Default configuration--The E Series LAC accepts the change from the endpoint. The LAC then sends all subsequent packets to, and accepts packets from, the new address. Ignore configuration (specified by the l2tp ignore-transmit-address-change command)--The LAC continues to send packets to the original address but accepts packets from the new address. host1(config)#l2tp ignore-transmit-address-change Use the ip-address or udp-port keyword to ignore the specific address component. Omit the keywords to ignore the entire address change in the SCCRP packet. Reject configuration (specified by the l2tp reject-transmit-address-change command)--The LAC sends a Stop-Control-Connection-Notification (StopCCN) to the original address, then terminates the connection to the endpoint. host1(config)#l2tp reject-transmit-address-change ip-address Use the ip-address or udp-port keyword to reject the specific address component. Omit the keywords to reject the entire address change in the SCCRP packet. The reject specification takes precedence over the ignore specification. Starting an Immediate Lockout Test 369 JUNOSe 11. 1. x Broadband Access Configuration Guide The router accepts a change in receive address only once, during the tunnel establishment phase, and only on an SCCRP packet. Use the show l2tp command to display the SCCRP address change configuration. Related Topics l2tp ignore-transmit-address-change l2tp reject-transmit-address-change Configuring LAC Tunnel Selection Parameters This section presents the capabilities of the LAC's tunnel selection process. Preference indicates the order in which the router attempts to connect to the destinations specified for a domain. Up to 31 destinations for a single preference level. For information about setting up destinations and preference levels for a domain, see "Mapping a User Domain Name to an L2TP Tunnel Overview" on page 358. When the E Series LAC determines that a PPP session should be tunneled, it selects a tunnel from a set of tunnels associated with either the PPP user or the PPP user's domain. The router provides the following methods for selecting tunnels: Tunnel selection failover between preference levels (the default behavior) Tunnel selection failover within a preference level Maximum sessions per tunnel Weighted load balancing 1. [. . . ] See specific feature, product, or protocol Connect-Info (RADIUS attribute 77). . . . . . . . . . . . . . . . . . . . . . . . . . . . 212 conventions notice icons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxvii text and syntax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii COPS (Common Open Policy Service). . . . . . . . . . 94, 136, 138 COPS(Common Open Policy Service). . . . . . . . . 101, 136, 138 COPS-PR (COPS usage for policy provisioning). . . . . . . . . . . . 94 customer support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxix contacting JTAC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxix D Deactivate-Service (RADIUS attribute 26-66). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 663, 666, 696 deadtime command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 default domain name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 default-router command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 default-upper-type mlppp command. . . . . . . . . . . . . . . . . . . . . . . . . . 378 Delegated-Ipv6-Prefix (RADIUS attribute 123). . . . . . . . . . . . 218 delegating routers allocation of IPv6 prefixes to requesting routers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 as E-Series routers for allocation of prefixes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 assigning prefixes to DHCPv6 clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 deny command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 descriptive formats Calling Number AVP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 destination changing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337 DHCP (Dynamic Host Configuration Protocol) access model. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463 configuring BOOTP Relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 configuring DHCP relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 configuring DHCP relay proxy. . . . . . . . . . . . . . . . . . . . 518, 520 configuring proxy client and server. . . . . . . . . . . . . . . . . . . . . 464 features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471, 495 giaddr;giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474 option 82. 487, 489, 495, 497, 498, 501, 506, 507, 511, 514, 516 738 Index Index overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60, 461, 495 per-interface logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465 source IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 trust-all. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 DHCP access model configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461 DHCP broadcast flag interaction with layer 2 unicast transmission method. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499 DHCP client bindings deleting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466 managing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466 viewing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466 DHCP commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592 dhcp-external duplicate-mac-address. . . . . . . . . . 526, 536 ip auto-detect ip-subscriber. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 ip dhcp-capture. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465 ip dhcp-external re-authenticate-subscriber-interface. . . . . . . . . . . . . . . . 537 ip dhcp-external recreate-subscriber-interface. . . . . . . . . . . . . . . . . . . 525, 532 ip inactivity-timer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 set ip interface-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592 set ip source-prefix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592 show dhcp-external. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555 See also show dhcp commands dhcp delete-binding command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468 DHCP external server and DHCP relay proxy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524, 528, 586 dynamic subscriber interfaces interoperating with DHCP relay and DHCP relay proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 533 identifying clients with duplicate MAC addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 526, 536 monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550 preserving dynamic subscriber interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 525, 532 re-authenticating auto-detected dynamic subscriber interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537 DHCP local address pools configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 484 grace periods. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 linking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 DHCP local server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477, 489 configuring authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487 duplicate clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480 equal-access mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 address allocation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475 connection process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 local pool selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 SRC (Session and Resource Control software). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461 local address pool group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486, 557 local pool selection, equal-access. . . . . . . . . . . . . . . . . . . . . . . . 470 using domain name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471 using framed IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471 using giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471 using pool name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471 local pool selection, standalone. . . . . . . . . . . . . . . . . . . . . . . . . . . 472 using giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472 using received interface IP address. . . . . . . . . . . . . . 472 logging information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483 modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469 monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 552, 577 overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469 RADIUS accounting support for. . . . . . . . . . . . . . . . . . . . . . . . . . 469 RADIUS accounting support for standalone mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 standalone mode address allocation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472, 487 authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475 local pool selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472 overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472 unique client IDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480 DHCP local server traps logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482 DHCP local server:local pool selection, equal-access using received interface IP address. . . . . . . . . . . . . . . . . . . . . 471 DHCP local server:local pool selection, standalone with AAA using domain name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473 using framed IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473 using giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474 using pool name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473 using received IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474 DHCP local server:local pool selection, standalone without AAA using giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473 using received interface IP address. . . . . . . . . . . . . . . . . . . . . 473 DHCP logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 565 DHCP option 60 cable modem DHCP relay. . . . . . . . . . . . . . . . 506 DHCP option 60 strings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 503 DHCP Option 82 (RADIUS attribute 26-159). . . . . . . . . . . . . . . 235 DHCP options and RADIUS configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461 DHCP packets logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 565 DHCP per-interface information logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465 DHCP pool commands default-router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486, 627 dns-server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 domain-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 grace-period. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 ip dhcp-local pool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 lease. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 link. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 Index 739 JUNOSe 11. 1. x Broadband Access Configuration Guide netbios-name-server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 netbios-node-type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 reserve. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 server-address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 snmpTrap. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 use-release-grace-period. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 warning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 DHCP proxy client configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464 DHCP relay configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 creating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 in same VR as dynamic subscriber interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610 interoperating with DHCP external server. . . . . . . . . . . 533 logging information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 502 preventing host route installation. . . . . . . . . . . . . . . . . . . . . . . . 500 removing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 spoofed giaddr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497 spoofed relay agent option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497 DHCP relay agent information option agent circuit ID (suboption 1). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 507 agent remote ID (suboption 2) . . . . . . . . . . . . . . . . . . . . . . . . . . . 507 vendor-specific (suboption 9). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 507 DHCP relay and BOOTP relay configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 DHCP relay proxy best offer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 520 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 518 first offer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 520 interoperating with DHCP external server. . . . . . . . . . . 533 DHCP server dynamic subscriber interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . 610 DHCP vendor class identifier option. . . . . . . . . . . . . . . . . . . . . . . . . . . 503 dhcp-external commands dhcp-external duplicate-mac-address. . . . . . . . . . 526, 536 show dhcp-external. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555 DHCP-GI-Address (RADIUS attribute 26-57). . . . . . . . . . . . . . . 229 dhcp-local-server-configuration-overview. . . . . . . . . . . . . . . . . . . 475 DHCP-MAC-Address (RADIUS attribute 26-56). . . . . . . . . . . 228 DHCP-Options (RADIUS attribute 26-55). . . . . . . . . . . . . . . . . . . . 228 DHCPv6 client bindings deleting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491 DHCPv6 clients assigning prefixes to using local address pools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 dhcpv6 delete-binding command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 492 DHCPv6 local address pools See IPv6 local address pools DHCPv6 local server IPv6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489 DHCPv6 Prefix Delegation and IPv6 Neighbor Discovery without configuring Delegated-IPv6-Prefix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 assigned prefix length of /128 in local address pools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 enabling IPv6 local address pool feature. . . . . . . . . . . . . . . . . . . . 107 example for non-PPP client requests. . . . . . . . . . . . . . . . . . . 110 example scenario. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 for client requests over non-PPP links. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 over PPP links. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 for IPv6 clients overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 Framed-IPv6-Prefix in Access-Accept messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 guidelines for configuring IPv6 local address pools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 interface level configuration versus router level configuration. . . . . . . . . . . . . . . . . . 106 IPv6 local address pool mapping to a domain name . . . . . . . . . . . . . . . . . . . . . . . . . 60 limitation on prefixes assigned to clients. . . . . . . . . . . . . . . . . . . . . . . . . . 109 standard RADIUS attributes configuring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 verifying. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 using IPv6 local address pools monitoring a single pool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 monitoring all configured pools. . . . . . . . . . . . . . . . . . . 164 monitoring statistics for a pool. . . . . . . . . . . . . . . . . . . . 166 dialed number identification service. See DSLs disable proxy lcp command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378 Disconnect-Cause (RADIUS attribute 26-51). . . . . . . . . . . . . . . 227 Disconnect-Request messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 DNIS (dialed number identification service). . . . . . . . . . . 9, 378 DNS (Domain Name System) assigning IP addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 DNS addresses order of preference in allocation to clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106 DNS domain names list of configured in IPv6 local address pools. . . . . . . . . 106 order of preference in responses to clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106 740 Index Index DNS domains configuring more than one using the CLI interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 in IPv6 local address pools processing client requests for resolution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 in responses to clients Domain Search List option and. . . . . . . . . . . . . . . . . . . . 108 maximum number in IPv6 local address pools. . . . . . . . . . . . . . . . . . . . . . . . . . . 108 DNS Recursive Name Search option DHCPv6 server responses and DNS servers in local pools. . . . . . . . . . . . . . . . . . . . . 108 DNS servers addresses in responses to clients DNS Recursive Name Search option and. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 configuring in IPv6 local address pools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 list of configured in IPv6 address pools. . . . . . . . . . . . . . . . . 106 order of preference in responses to clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106 order of use for delegating prefixes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 primary and secondary for domain resolution requests from clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 responding with IPv6 addresses for client requests. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 documentation set comments on. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxix domain command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 588 Domain Name System. See DNS domain names allowing or denying. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 default. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 mapping to virtual routers. . . . . . . . . . . . . . 8, 119, 129, 428 mapping user requests without domain name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8, 9 none. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 specifying single name for users. . . . . . . . . . . . . . . . . . . . . . . . . . . 16 stripping domain name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 using aliases. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 using delimiters other than @. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 using either domain or realm asdomain name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 using realm name as domain name. . . . . . . . . . . . . . . . . . . . . . 12 Downstream-Calculated-QoS-Rate (RADIUS attribute 26-141). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232 DSL Forum VSAs controlling inclusion of. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237 descriptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276 in AAA access and accounting messages. . . . . . . . . . . . 188 DSLAMs (digital subscriber line access multiplexers). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 DSLs (digital subscriber lines). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 dual stack combined IPv4 and IPv6 services example of . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 702 IPv4 and IPv6 services combined, activating and deactivating. . . . . . . . . 670 combined, overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669 independent, activating and deactivating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670 independent, overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669 service interim accounting, overview. . . . . . . . . . . 676 Service manager support, activating and deactivating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670 Service manager support, overview. . . . . . . . . . . . . 669 statistics collection external parent groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689 duplicate AAA accounting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 duplicate clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480 duplicate MAC addresses identifying DHCP clients with. . . . . . . . . . . . . . . . . . . . . 526, 536 monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555 Dynamic Host Configuration Protocol. See DHCP See DHCP dynamic IP interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 dynamic subscriber interfaces commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 configuring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610, 622 configuring DHCP external server to interoperate with DHCP relay and DHCP relay proxy . . . . . . . . . 533 configuring DHCP external server to preserve. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 525, 532 configuring DHCP external server to re-authenticate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537 DHCP server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610 framed routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 613 GRE tunnel configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 625 in same VR as DHCP relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610 inheriting MAC validation state. . . . . . . . . . . . . . . . . . . . . . . . . . . 613 IP over bridged Ethernet configuration. . . . . . . . . . . . . . . 624 IP over Ethernet configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . 622 IP over VLAN over Ethernet configuration. . . . . . . . . . . 623 monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 635 overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610 packet detection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 612 E E120 and E320 routers ATM interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 609 EAP (Extensible Authentication Protocol) external RADIUS server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 local authentication server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 RADIUS attributes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Index 741 JUNOSe 11. 1. x Broadband Access Configuration Guide RADIUS authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 TACACS+ server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 EAP-Message (RADIUS attribute 79). . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Egress-Policy-Name (RADIUS attribute 26-11). . . . . . . . . . . . 221 enable proxy authenticate command. . . . . . . . . . . . . . . . . . . . . . . . . 378 encapsulation commands encapsulation bridge1483. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 encapsulation vlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 endpoint discriminator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 382 equal-access DHCP local server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 Ethernet configuring dynamic subscriber interfaces. . . . . . . . . . 622 Ethernet interfaces commands interface tenGigabitEthernet. . . . . . . . . . . . . . . . . . . . . . . . 627 Ethernet links between CPE and PE routers pool section for Prefix Delegation. . . . . . . . . . . . . . . . 110 Event-Timestamp (RADIUS attribute 55). . . . . . . . . . . . . . . . . . . . 209 exclusion ranges configuring for delegation of prefixes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 example for non-PPP client requests. . . . . . . . . . . . . . . . . . . 110 for DHCPv6 prefixes delegated to clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 Extensible Authentication Protocol. [. . . ]