Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010, Руководство по настройке

Страница: 594 / 774

interface. This configuration method does not support running stateful SRP
switchover on the router.
■
The second part of the example shows the commands required to re-create this
configuration using the IP subscriber management application. This configuration
method uses the
bridge1483 service-profile command to assign the specified
IP service profile to the interface profile, and does support running stateful SRP
switchover on the router.
Assume that you have issued the following commands to configure IP subscribers
on a dynamic bridged Ethernet interface for RADIUS authentication. In this
configuration, the
subscriber command provides the subscriber’s authentication
parameters, and the static ATM 1483 subinterface is the authenticating layer. Keep
in mind that the
subscriber command does not support running stateful SRP
switchover on the router.
! Configure the interface profile from which to create a dynamic bridged Ethernet
! interface. Include the desired attributes (in this case, IGMP) and, optionally, the
! name of the route map used to configure the IP subscriber interface.
host1(config)#
profile east
host1(config-profile)# ip igmp
host1(config-profile)# ip igmp immediate-leave
host1(config-profile)# ip igmp group limit 6
host1(config-profile)# ip route-map ip-subscriber eastRouteMap
host1(config-profile)# exit
! Configure the static ATM 1483 subinterface to assign the east profile, support
! RADIUS authentication, enable autodetection of the bridged Ethernet upper-layer
! encapsulation type, and define the ATM PVC.
host1(config)#
interface atm 2/1.100 point-to-point
host1(config-subif)# profile bridgedEthernet east
host1(config-subif)# subscriber bridgedEthernet user westford001
domain xyzcorp.east password abc123
host1(config-subif)# auto-configure bridgedEthernet
host1(config-subif)# atm pvc 100 10 101 aal5snap 6400 0 0
host1(config-subif)# exit
Equivalent Configuration Example Using IP Subscriber Management
To achieve the same functionality without adversely affecting stateful SRP switchover
if it is running on the router, you can issue the following commands to use the
subscriber management feature to configure IP subscribers on a dynamic bridged
Ethernet interface using RADIUS. In this configuration, the IP service profile provides
the subscriber’s authentication parameters, and the subscriber management
application is the authenticating layer. To assign the IP service profile to the interface
profile, use the
bridge1483 service-profile command.
! Define an IP service profile containing the subscriber’s username, domain,
and password.
host1(config)#
ip service-profile eastServiceProfile
host1(config-service-profile)# user-name westford001
host1(config-service-profile)# domain xyzcorp.east
host1(config-service-profile)# password abc123
host1(config-service-profile)# exit
! Configure the interface profile from which to create a dynamic bridged Ethernet
562 ■
Configuring Bridged Ethernet Dynamic Interfaces
JUNOSe 11.1.x Link Layer Configuration Guide