Juniper JUNOSE 11.2, Руководство по настройке

Страница: 590 / 772

•
The second part of the example shows the commands required to re-create this
configuration using the IP subscriber management application. This configuration
method uses the
bridge1483 service-profile command to assign the specified IP service
profile to the interface profile, and does support running stateful SRP switchover on
the router.
Assume that you have issued the following commands to configure IP subscribers on a
dynamic bridged Ethernet interface for RADIUS authentication. In this configuration, the
subscriber command provides the subscriber’s authentication parameters, and the static
ATM 1483 subinterface is the authenticating layer. Keep in mind that the subscriber
command does not support running stateful SRP switchover on the router.
! Configure the interface profile from which to create a dynamic bridged Ethernet
! interface. Include the desired attributes (in this case, IGMP) and, optionally, the
! name of the route map used to configure the IP subscriber interface.
host1(config)#
profile east
host1(config-profile)# ip igmp
host1(config-profile)# ip igmp immediate-leave
host1(config-profile)# ip igmp group limit 6
host1(config-profile)# ip route-map ip-subscriber eastRouteMap
host1(config-profile)# exit
! Configure the static ATM 1483 subinterface to assign the east profile, support
! RADIUS authentication, enable autodetection of the bridged Ethernet upper-layer
! encapsulation type, and define the ATM PVC.
host1(config)#
interface atm 2/1.100 point-to-point
host1(config-subif)# profile bridgedEthernet east
host1(config-subif)# subscriber bridgedEthernet user westford001
domain xyzcorp.east password abc123
host1(config-subif)# auto-configure bridgedEthernet
host1(config-subif)# atm pvc 100 10 101 aal5snap 6400 0 0
host1(config-subif)# exit
Equivalent Configuration Example Using IP Subscriber Management
To achieve the same functionality without adversely affecting stateful SRP switchover
if it is running on the router, you can issue the following commands to use the subscriber
management feature to configure IP subscribers on a dynamic bridged Ethernet interface
using RADIUS. In this configuration, the IP service profile provides the subscriber’s
authentication parameters, and the subscriber management application is the
authenticating layer. To assign the IP service profile to the interface profile, use the
bridge1483 service-profile command.
! Define an IP service profile containing the subscriber’s username, domain,
and password.
host1(config)#
ip service-profile eastServiceProfile
host1(config-service-profile)# user-name westford001
host1(config-service-profile)# domain xyzcorp.east
host1(config-service-profile)# password abc123
host1(config-service-profile)# exit
! Configure the interface profile from which to create a dynamic bridged Ethernet
! interface. Include the desired attributes (in this case, IGMP), the name of the
! route map used to configure the IP subscriber interface (optional), and the name
! of the IP service profile containing the authentication parameters for the dynamic
! bridged Ethernet interface.
host1(config)#
profile east
Copyright © 2010, Juniper Networks, Inc. 558
JunosE 11.2.x Link Layer Configuration Guide