Hello

I am having trouble with subscriber management not inserting any routes. Information is picked up from radius, such as this:

baldur@interxion-edge1> show subscribers
Interface             IP Address/VLAN ID                      User Name                      LS:RI demux0.3221225472     195.192.249.104 vlan.1970-37              default:internet demux0.3221225473     195.192.249.69 vlan.1970-77              default:internet
...

baldur@interxion-edge1> show interfaces demux0.3221225472
  Logical interface demux0.3221225472 (Index 536870919) (SNMP ifIndex 200000007)
    Flags: Up VLAN-Tag [ 0x8100.1970 0x8100.37 ]  Encapsulation: ENET2
    Demux:
      Underlying interface: xe-0/1/1 (Index 168)
    Bandwidth: 0
    Input packets : 3342925
    Output packets: 0
    Protocol inet, MTU: 1500
    Max nh cache: 0, New hold nh limit: 0, Curr nh cnt: 0, Curr new hold cnt: 0, NH drop cnt: 0
      Flags: Unnumbered
      Donor interface: lo0.1 (Index 329)
      Addresses, Flags: Is-Primary
        Local: 185.24.168.248

baldur@interxion-edge1> show route 195.192.249.104

internet.inet.0: 769284 destinations, 771001 routes (769284 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

195.192.249.64/26  *[BGP/170] 4w5d 12:58:36, MED 0, localpref 100, from 185.24.171.254
                      AS path: ?, validation-state: unverified
                    >  to 10.10.124.2 via xe-0/1/0.0, Push 164140, Push 16467(top)

---

The subscriber interface is receiving packets but never sends anything out. Also no route is added although the router seems to be aware of the intended subscriber IP address. The route shown above is a /26 to another router. I am expecting the subscriber management system to override that with a /32 for this specific subscriber.

My setup is like this:

interfaces {
    xe-0/1/1 {
        flexible-vlan-tagging;
        auto-configure {
            stacked-vlan-ranges {
                dynamic-profile Auto-VLAN-Demux {
                    accept inet;
                    ranges {
                        1970-1970,any;
                    }
                    access-profile prof1;
                }
                authentication {
                    password "$ABC123";
                    username-include {
                        user-prefix vlan;
                        vlan-tags;
                    }
                }
                access-profile prof1;
            }
        }
    }
}

dynamic-profiles {
    Auto-VLAN-Demux {
        routing-instances {
            "$junos-routing-instance" {
                interface "$junos-interface-name";
            }
        }
        interfaces {
            demux0 {
                unit "$junos-interface-unit" {
                    demux-source inet;
                    demux {
                        inet {
                            address source;
                            auto-configure {
                                address-ranges {
                                    dynamic-profile DHCP-IP-Demux {
                                        network 0.0.0.0/0;
                                    }
                                    authentication {
                                        password ABC123;
                                        username-include {
                                            user-prefix ip;
                                            interface-name;
                                            source-address;
                                        }
                                    }
                                }
                            }
                        }
                    }
                    vlan-tags outer "$junos-stacked-vlan-id" inner "$junos-vlan-id";
                    demux-options {
                        underlying-interface "$junos-underlying-interface";
                    }
                    family inet {
                        unnumbered-address lo0.1;
                    }
                }
            }
        }
    }
}

---

What am I missing here? I have tried a ton of stuff but never succeeded in getting any outgoing packets towards the subscriber.

Regards,

Baldur

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to