Routing

Expand all | Collapse all

MX80, dynamic address-assignment pools

Jump to Best Answer
  • 1.  MX80, dynamic address-assignment pools

    Posted 11-14-2017 19:40
      |   view attached

    Hi all

    I have MX80 BRAS,

    Junos: 13.3R6.5

    I try toassign IP address from NoMoney-POOL with RADIUS attribute ERX-Address-Pool-Name = "NoMoney-POOL", but in any case subscriber get IP address from IPoE-Pool, if I change  preferred-source-address 9*.*.124.1  to  preferred-source-address 172.28.0.1 

    then subscriber gets an IP from NoMoney-POOL, why MX no assign from RADIUS attribute ERX-Address-Pool-Name ?

    In atach I put the "general-authentication-service traceoptions"
    here is the config

    set dynamic-profiles VLAN-IPoE interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" demux-source inet
    set dynamic-profiles VLAN-IPoE interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" proxy-arp
    set dynamic-profiles VLAN-IPoE interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" vlan-id "$junos-vlan-id"
    set dynamic-profiles VLAN-IPoE interfaces "$junos-interface-ifd-name" unit "$junos-interface-unit" family inet unnumbered-address lo0.0 preferred-source-address 9*.*.124.1
    set dynamic-profiles CLIENTS-IPoE interfaces demux0 unit "$junos-interface-unit" proxy-arp
    set dynamic-profiles CLIENTS-IPoE interfaces demux0 unit "$junos-interface-unit" demux-options underlying-interface "$junos-underlying-interface"
    set dynamic-profiles CLIENTS-IPoE interfaces demux0 unit "$junos-interface-unit" family inet demux-source $junos-subscriber-ip-address
    set dynamic-profiles CLIENTS-IPoE interfaces demux0 unit "$junos-interface-unit" family inet unnumbered-address lo0.0 preferred-source-address 9*.*.124.1
    set system services dhcp-local-server pool-match-order ip-address-first
    set system services dhcp-local-server pool-match-order option-82
    set system services dhcp-local-server forward-snooped-clients configured-interfaces
    set system services dhcp-local-server group IPoE authentication password IPoE-Pool
    set system services dhcp-local-server group IPoE authentication username-include user-prefix OPT82
    set system services dhcp-local-server group IPoE authentication username-include option-82 circuit-id remote-id
    set system services dhcp-local-server group IPoE dynamic-profile CLIENTS-IPoE
    set system services dhcp-local-server group IPoE interface ge-1/1/1.0
    set  access-profile CLIENTS
    set interfaces ge-1/1/0 flexible-vlan-tagging
    set interfaces ge-1/1/0 encapsulation flexible-ethernet-services
    set interfaces ge-1/1/0 unit 5 vlan-id 5
    set interfaces ge-1/1/0 unit 5 family inet address 9*.*.127.3/27
    set interfaces ge-1/1/0 unit 111 encapsulation vlan-bridge
    set interfaces ge-1/1/0 unit 111 vlan-id 111
    set interfaces ge-1/1/1 description CLIENTS
    set interfaces ge-1/1/1 flexible-vlan-tagging
    set interfaces ge-1/1/1 auto-configure vlan-ranges dynamic-profile VLAN-IPoE accept dhcp-v4
    set interfaces ge-1/1/1 auto-configure vlan-ranges dynamic-profile VLAN-IPoE ranges 3550-3555
    set interfaces ge-1/1/1 auto-configure remove-when-no-subscribers
    set interfaces ge-1/1/1 encapsulation flexible-ethernet-services
    set interfaces irb unit 111 family inet address 10.100.100.225/21
    set interfaces lo0 unit 0 family inet address 9*.*.124.1/32
    set interfaces lo0 unit 0 family inet address 172.28.0.1/32
    set routing-options static route 0.0.0.0/0 next-hop 9*.*.127.1
    set access radius-server 194.*.*.161 port 1812
    set access radius-server 194.*.*.161 accounting-port 1813
    set access radius-server 194.*.*.161 secret "SECRET_KEY"
    set access radius-server 194.*.*.161 timeout 10
    set access radius-server 194.*.*.161 retry 5
    set access radius-server 194.*.*.161 max-outstanding-requests 1500
    set access radius-server 194.*.*.161 source-address 9*.*.127.3
    set access profile CLIENTS authentication-order radius
    set access profile CLIENTS radius authentication-server 194.*.*.161
    set access profile CLIENTS radius accounting-server 194.*.*.161
    set access profile CLIENTS accounting order radius
    set access profile CLIENTS accounting immediate-update
    set access profile CLIENTS accounting update-interval 10
    set access profile CLIENTS accounting statistics volume-time
    set access address-assignment pool IPoE-Pool family inet network 9*.*.124.0/24
    set access address-assignment pool IPoE-Pool family inet range IPoE-Pool low 9*.*.124.2
    set access address-assignment pool IPoE-Pool family inet range IPoE-Pool high 9*.*.124.254
    set access address-assignment pool IPoE-Pool family inet dhcp-attributes option-match option-82 circuit-id circuit-id range IPoE-Pool
    set access address-assignment pool IPoE-Pool family inet dhcp-attributes option-match option-82 remote-id remote-id range IPoE-Pool
    set access address-assignment pool IPoE-Pool family inet dhcp-attributes maximum-lease-time 600
    set access address-assignment pool IPoE-Pool family inet dhcp-attributes name-server 8.8.8.8
    set access address-assignment pool IPoE-Pool family inet dhcp-attributes router 9*.*.124.1
    set access address-assignment pool NoMoney-POOL family inet network 172.28.0.0/24
    set access address-assignment pool NoMoney-POOL family inet range 1st low 172.28.0.2
    set access address-assignment pool NoMoney-POOL family inet range 1st high 172.28.0.254
    set access address-assignment pool NoMoney-POOL family inet dhcp-attributes option-match option-82 circuit-id circuit-id range NoMoney-POOL
    set access address-assignment pool NoMoney-POOL family inet dhcp-attributes option-match option-82 remote-id remote-id range NoMoney-POOL
    set access address-assignment pool NoMoney-POOL family inet dhcp-attributes maximum-lease-time 60
    set access address-assignment pool NoMoney-POOL family inet dhcp-attributes name-server 8.8.8.8
    set access address-assignment pool NoMoney-POOL family inet dhcp-attributes router 172.28.0.1
    

     

     

    Attachment(s)

    txt
    debug-auth.txt   31K 1 version


  • 2.  RE: MX80, dynamic address-assignment pools
    Best Answer

     
    Posted 11-14-2017 21:12

    Hi,

     

    Please configure below knob and check once.

     

    DHCP# set system services dhcp-local-server pool-match-order external-authority

     

    Remove

     

    set system services dhcp-local-server pool-match-order ip-address-first

     

    Regards,

    Rahul N



  • 3.  RE: MX80, dynamic address-assignment pools

    Posted 11-14-2017 23:54

    Thank you so much!! It is works now!! 🙂



  • 4.  RE: MX80, dynamic address-assignment pools

     
    Posted 11-15-2017 00:13

    Thanks for the update. Please help to close the thread by accepting the solution.

     

    Regards,

    Rahul N