Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010, Руководство по настройке

Страница: 550 / 774

For more information about IPv4, see chapter Configuring IP in JUNOSe IP, IPv6, and
IGP Configuration Guide . For more information about IPv6, see chapter Configuring
IPv6 in JUNOSe IP, IPv6, and IGP Configuration Guide .
Profiles
You can use profiles to configure dynamic interfaces over ATM, VLAN, or Ethernet
Interfaces. A
profile is a set of characteristics that can be dynamically assigned to
interfaces. By using a profile, you reduce the management of a large number of
interfaces by applying a set of characteristics to multiple interfaces.
When you are configuring a large number of interfaces with the same attributes at
the higher layers, you can use a profile to factor out all the common attributes of
each layer into one place. This action affects one or more dynamic layers of the
interface column. After you define the static lower layers, you assign a profile to the
highest static layer of the interface column.
When a dynamic interface is configured, the configuration data received from the
RADIUS authentication server typically overrides configuration data obtained from
a profile.
In contrast to static PPP interfaces (above which only dynamic IP interfaces can be
created), static ATM 1483 subinterfaces support recognition and creation of the
following upper dynamic interface types or
encapsulations :
■
Bridged Ethernet
■
IP
■
IPv6
■
Multilink PPP
■
PPP
■
PPPoE
The auto-configure command identifies the encapsulation type. For flexibility, the
router provides the ability to configure an ATM 1483 subinterface with distinct profile
assignments for each encapsulation type supported by the
auto-configure command.
For more information about using this command, see “auto-configure Command”
on page 525.
RADIUS Authentication
RADIUS helps protect your network against unauthorized access. To accomplish this,
RADIUS clients running on your router send authentication requests to a central
RADIUS server. You can configure dynamic interfaces over interfaces through RADIUS
authentication.
When a packet is received, the authenticating interface, either PPP or ATM 1483,
establishes a session with RADIUS and passes the username and password to the
RADIUS server. For dynamic IPoA or dynamic bridged Ethernet, the RADIUS username
and password are obtained from the information specified by the
subscriber
command. The RADIUS server returns a grant or deny indication. If authentication
518 ■
Overview
JUNOSe 11.1.x Link Layer Configuration Guide