luni, 30 septembrie 2013

Juniper static-subscribers with Radius

Juniper static-subscribers setup :

PC[vlan411]<->[ge/1/1/0.411]-MX80

MX conf:


root@mx80-2-R5> show configuration system services static-subscribers  
access-profile {
    sbr;
}
dynamic-profile {
    9;
}
authentication {
    password "$9$At-bp1RcylMLx"; ## SECRET-DATA
    username-include {
        interface;
    }
}
group IP1 {
    interface demux0.1;
}

root@mx80-2-R5> show configuration dynamic-profiles 9
interfaces {
    "$junos-interface-ifd-name" {
        unit "$junos-underlying-interface-unit" {
            family inet {
                filter {
                    input "$junos-input-filter" precedence 20;
                    output "$junos-output-filter" precedence 20;
                }
            }
        }
    }
}

root@mx80-2-R5> show configuration interfaces demux0 
unit 1 {
    demux-options {
        underlying-interface ge-1/1/0.411;
    }
    family inet {
        demux-source {
            100.100.100.6/32;
        }
        unnumbered-address lo0.5;
    }
}

root@mx80-2-R5> show configuration interfaces ge-1/1/0.411
demux-source inet;
vlan-id 411

Verification :

root@mx80-2-R5> show subscribers extensive
Type: STATIC-INTERFACE
User Name: demux0.1@cpetresc
IP Address: 100.100.100.6
IP Netmask: 255.255.255.255
Logical System: default
Routing Instance: default
Interface: demux0.1
Interface type: Static
Interface set: demux0-set
Interface set type: Static
Dynamic Profile Name: 9
State: Active
Radius Accounting ID: 5
Session ID: 5
Login Time: 2013-09-27 15:15:15 UTC
IPv4 Input Filter Name: 2M-demux0.1-in
IPv4 Output Filter Name: 5M-demux0.1-out