For feedback and comments:
documentation.feedback@alcatel-lucent.com

Table of Contents Previous Next


Table of Contents

TRIPLE PLAY SERVICE DELIVERY ARCHITECTURE GUIDE
Preface
Preface
About This Guide
Audience
List of Technical Publications
Searching for Information
To search for specific information in this guide
To search for specific information in multiple documents
Technical Support
Getting Started
In This Chapter
Alcatel-Lucent 7750 SR-Series Services Configuration Process
Introduction to Triple Play
In This Section
In This Section
Alcatel-Lucent’s Triple Play Service Delivery Architecture
Introduction to Triple Play
Blueprint for Optimizing Triple Play Service Infrastructures
Architectural Foundations
Optimizing Triple Play Service Infrastructures
Distributed Service Edges
Service Differentiation, QoS Enablement
Virtual MAC Subnetting for VPLS
Services
Service Types
Service Policies
Alcatel-Lucent Service Model
Introduction
Service Entities
Customers
Service Access Points (SAPs)
SAP Encapsulation Types and Identifiers
Ethernet Encapsulations
SAP Considerations
Service Distribution Points (SDPs)
SDP Binding
Spoke and Mesh SDPs
SDP Encapsulation Types
GRE
MPLS
SDP Keepalives
Epipe Service Overview
VPLS Service Overview
Split Horizon SAP Groups and Split Horizon Spoke SDP Groups
Residential Split Horizon Groups
IES Service Overview
IP Interface
VPRN Service Overview
Deploying and Provisioning Services
Phase 1: Core Network Construction
Phase 2: Service Administration
Phase 3: Service Provisioning
Configuration Notes
General
Configuring Triple Play Services with CLI
Configuring VPLS Residential Split Horizon Groups
Configuring Static Hosts
BNG Learning IP-Only Static Host’s MAC Address
Static Host Learning the IPv6 Default Gateway Address
Configuring Static Hosts on an VPLS SAP
Configuring Static Hosts on an IES SAP
Configuring Static Hosts on an VPRN SAP
Triple Play Services Command Reference
Configuration Commands
Generic VPLS Triple Play Commands
Generic IES Triple Play Commands
Service DHCP and Anti-Spoof Filtering Commands
Triple Play ARP Commands
Triple Play Multicast Commands
Show Commands
Clear Commands
Triple Play Service Configuration Commands
Global Commands
Service Commands
Show Commands
Clear Commands
Debug Commands
DHCP Management
In This Chapter
In This Chapter
DHCP Principles
DHCP Features
DHCP Relay
DHCP Relay Enhancements
Subscriber Identification Using Option 82 Field
Trusted and Untrusted
DHCP Snooping
DHCP Lease State Table
DHCP and Layer 3 Aggregation
DHCPv4 Snooping
DHCPv6 Snooping
Local DHCP Servers
Overview
Local DHCP Server Support
DHCPv6
DHCPv6 Relay Agent
DHCPv6 Prefix Options
Neighbor Resolution via DHCPv6 Relay
DHCPv6 Lease Persistency
Local Proxy Neighbor Discovery
IPv6oE Hosts Behind Bridged CPEs
IPv6 Link-Address Based Pool Selection
IPv6 Address/Prefix Stickiness
IPv4/v6 Linkage for Dual-Stack Hosts or Layer 3 RGs
Host Connectivity Checks for IPv6
Lease Query
DHCP Relay Enhancements
Flexible Host Identification in LUDB Based on DHCPv4/v6 Options
DHCP Caching
Flexible Creation of DHCPv4/6 Host Parameters Utilizing Python and Internal Caching
Python DTC Variables and API
DTC Debugging Facility
Virtual Subnet for DHCPv4 Hosts
Proxy DHCP Server
Local DHCP Servers
Terminology
Overview
DHCP Lease Synchronization
Intercommunication Link Failure Detection
DHCP Server Failover States
Lease Time Synchronization
Maximum Client Lead Time (MCLT)
Sharing IPv4 Address-Range or IPv6 Prefix Between Redundant 7x50 DHCP Servers in Access-Driven Mode
Fast-Switchover of IP Address/Prefix Delegation For Remote IP Address/Prefix Range
DHCP Server Synchronization and Local PPPoX Pools
Local Address Assignment
Stateless Address Auto-configuration
Configuring DHCP with CLI
Common Configuration Tasks
Enabling DHCP Snooping
Configuring Option 82 Handling
Enabling DHCP Relay
Configuring Local User Database Parameters
Triple Play DHCP Command Reference
Configuration Commands
Global DHCP Commands
Router DHCP Commands
VPLS DHCP Commands
IES DHCP Commands
VPRN DHCP Commands
IES/VPRN IPv6-DHCP6 Commands
Local User Database Commands
Show Commands
Tools Commands
Clear Commands
DHCP Debug Commands
Tools Commands
Triple Play DHCP Configuration Commands
Global Commands
System Commands
DHCP Configuration Commands
Service Commands
Local User Database Commands
MLPPP on LNS Commands
Show Commands
Clear Commands
Debug Commands
Tools Commands
Point-to-Point Protocol over Ethernet (PPPoE) Management
In This Chapter
In This Chapter
PPPoE
PPPoE Authentication and Authorization
General Flow
RADIUS
Local User Database Directly Assigned to PPPoE Node
Subscriber per PPPoE Session Index
Local DHCP Server with Local User Database
Multiple Sessions Per MAC Address
Private Retail Subnets
IPCP Subnet Negotiation
Numbered WAN Support for Layer 3 RGs
IES as Retail Service for PPPoE Host
Unnumbered PPPoX
MLPPPoE, MLPPP(oE)oA with LFI on LNS
Terminology
LNS MLPPPoX
MLPPP Encapsulation
MLPPPoX Negotiation
Enabling MLPPPoX
Link Fragmentation and Interleaving (LFI)
MLPPPoX Fragmentation, MRRU and MRU Considerations
LFI Functionality Implemented in LNS
Last Mile QoS Awareness in the LNS
BB-ISA Processing
LNS-LAC Link
AN-RG Link
Home Link
Optimum Fragment Size Calculation by LNS
Encapsulation Based Fragment Size
Fragment Size Based on the Max Transmission Delay
Selection of the Optimum Fragment Length
Upstream Traffic Considerations
Multiple Links MLPPPoX With No Interleaving
MLPPPoX Session Support
Session Load Balancing Across Multiple BB-ISAs
BB-ISA Hashing Considerations
Last Mile Rate and Encapsulation Parameters
Link Failure Detection
CoA Support
Accounting
Filters and Mirroring
PTA Considerations
QoS Considerations
Dual-Pass
Traffic Prioritization in LFI
Shaping Based on the Last Mile Wire Rates
Downstream Bandwidth Management on Egress Port
Sub/Sla-Profile Considerations
Example of MLPPPoX Session Setup Flow
Other Considerations
Configuration Notes
PPP Command Reference
Configuration Commands
PPPoE Policy Configuration Commands
PPPoE Service Commands
PPPoE Local User Database Commands
MLPPP on LNS Commands
Show Commands
PPP Configuration Commands
Global Commands
Show Commands
Clear Commands
Debug Commands
Tools Commands
L2TP
In This Chapter
In This Chapter
L2TP
Terminology
LAC DF Bit
Handling L2TP Tunnel/Session Initialization Failures
L2TP Tunnel/Session Initialization Failover Mechanisms on LAC
Peer Blacklist
Tunnel Blacklists
Tunnel Timeout Due to the Peer IP Address Change
Tunnel Selection Mechanism
Tunnel Probing
Controlling the Size of Blacklist
Displaying the Content of a Blacklist
Generating Trap when the Blacklist is Full
Premature Removal of Blacklisted Entries
Manual Purging of Entities within the Blacklist
Stateless Address Auto-configuration (SLAAC) Management
SLAAC Principles
Configuration Overview
Router-solicit trigger
SLAAC Address Assignment
Static SLAAC Prefix Assignment
Dynamic SLAAC Prefix Assignment
CDN Result Code Overwrite
L2TP LAC VPRN
Per-ISP Egress L2TP DSCP Reclassification
L2TP Tunnel RADIUS Accounting
Accounting Packets List
RADIUS Attributes Value Considerations
Other Optional RADIUS Attributes
RADIUS VSA to Enable L2TP Tunnel Accounting
MLPPP on the LNS Side
LNS Reassembly
L2TP Command Reference
Configuration Commands
L2TP Configuration Commands
L2TP Tunnel RADIUS Accounting Commands
Show Commands
Clear Commands
Clear Commands
Debug Commands
Tools Commands
L2TP Configuration Commands
Global Commands
L2TP Tunnel Account Commands
L2TP Tunnel RADIUS Accounting Commands
Show Commands
Debug Commands
Triple Play Security
In This Chapter
In This Chapter
Triple Play Security Features
Anti-Spoofing Filters
Anti-spoofing Filter Types
Filtering Packets
Layer 2 Triple Play Security Features
MAC Pinning
MAC Protection
DoS Protection
Subscriber Aggregation Network
Network Control Filtering
VPLS Redirect Policy
ARP Handling
ARP Reply Agent
Dynamic ARP Table Population
Local Proxy ARP
Web Portal Redirect
Configuring Triple Play Security with CLI
Common Configuration Tasks
Configuring Anti-Spoofing Filters
Configuring Triple Play Security features
Configuring MAC Pinning
Configuring MAC Protection
Preventing Access By Residential Subscribers Using Protected (Gateway) MAC Addresses
Restricting Access By Residential Subscribers To a Small List Of Upstream MAC Addresses:
Configuring VPLS Redirect Policy
Creating the Filter
Applying the Filter to a VPLS Service
Configuring ARP Handling
Configuring Proxy ARP
Configuring Local Proxy ARP
Configuring ARP Reply Agent in a VPLS Service
Configuring Remote Proxy ARP
Configuring Automatic ARP Table Population in an IES or VPRN Interface
Configuring CPU Protection
Configuring Web Portal Redirect
Triple Play Security Command Reference
Command Hierarchies
Anti-Spoofing Commands
Layer 2 Security Commands
ARP Handling Commands
Triple Play Security Configuration Commands
Triple Play Anti-Spoofing Commands
Triple Play Layer 2 Security Commands
ARP Handling Commands
Show Commands
Triple Play Multicast
In This Chapter
In This Chapter
Introduction to Multicast
Multicast in the Broadband Service Router
Internet Group Management Protocol
IGMP Versions and Interoperability Requirements
IGMP Version Transition
Multicast Listener Discovery
MLD Versions and Interoperability Requirements
Source Specific Multicast Groups
Protocol Independent Multicast Sparse Mode (PIM-SM)
Ingress Multicast Path Management (IMPM) Enhancements
Multicast in the BSA
IGMP Snooping
IGMP/MLD Message Processing
IGMP Message Processing
MLD Message Processing
IGMP/MLD Filtering
Multicast VPLS Registration (MVR)
Layer 3 Multicast Load Balancing
IGMP State Reporter
IGMP Data Records
Transport Mechanism
HA Compliance
QoS Awareness
Hardware Support
IGMP Reporting Caveats
Multicast Support over Subscriber Interfaces in Routed CO Model
Hardware Support
Multicast Over IPoE
Per SAP Replication Mode
Per SAP Queue
IPoE 1:1 Model (Subscriber per VLAN/SAP) — No IGMP/MLD in AN
IPoE N:1 Model (Service per VLAN/SAP) — IGMP/MLD Snooping in the AN
IPoE N:1 Model (Service per VLAN/SAP) — IGMP/MLD Proxy in the AN
Per Subscriber Host Replication Mode
IPoE 1:1 Model (Subscriber per VLAN/SAP) — No IGMP/MLD in AN
IPoE N:1 Model (Service per VLAN/SAP) — No IGMP/MLD in the AN
Multicast Over PPPoE
IGMP Flooding Containment
IGMP/MLD Timers
IGMP/MLD Query Intervals
HQoS Adjustment
Host Tracking (HT) Considerations
HQoS Adjust Per Vport
Multi-Chassis Redundancy
Scalability Considerations
Redirection
Hierarchical Multicast CAC (H-MCAC)
MCAC Bundle Bandwidth Limit Considerations
Determining MCAC Policy in Effect
Multicast Filtering
Joining the Multicast Tree
Wholesale/Retail Requirements
QoS Considerations
Redundancy Considerations
Redirection Considerations
Configuring Triple Play Multicast Services with CLI
Configuring IGMP Snooping in the BSA
Enabling IGMP Snooping in a VPLS Service
With IGMPv3 Multicast Routers
With IGMPv1/2 Multicast Routers
Modifying IGMP Snooping Parameters
Modifying IGMP Snooping Parameters for a SAP or SDP
Configuring Static Multicast Groups on a SAP or SDP
Enabling IGMP Group Membership Report Filtering
Enabling IGMP Traffic Filtering
Configuring Multicast VPLS Registration (MVR)
Configuring IGMP, MKD, and PIM in the BSR
Enabling IGMP
Configuring IGMP Interface Parameters
Configuring Static Parameters
Configuring SSM Translation
Enabling MLD
Configuring MLD Interface Parameters
Configuring Static Parameters
Configuring SSM Translation
Configuring PIM
Enabling PIM
Configuring PIM Interface Parameters
Importing PIM Join/Register Policies
Configuring PIM Join/Register Policies
Configuring Bootstrap Message Import and Export Policies
Triple Play Multicast Command Reference
Command Hierarchies
MCAST Management Commands
Multicast Info Policy Bundle Commands
Triple Play Multicast Service Commands
Ingress Multicast Path Management Commands
Multicast Redirection
Show Commands
Clear Commands
Debug Commands
Multicast Management Configuration Commands
Generic Commands
Multicast Management Commands
Bandwidth Policy Commands
Multicast Info Policy Commands
Chassis Level Commands
Multicast Redirection Commands
Forwarding Plane Commands
Triple Play Enhanced Subscriber Management
In This Section
In This Section
Uniform RADIUS Server Configuration
RADIUS Server Configuration
Uniform RADIUS Server Configuration (Preferred)
Legacy RADIUS Server Configuration
RADIUS Authentication of Subscriber Sessions
RADIUS Authentication Extensions
Triple Play Network with RADIUS Authentication
RADIUS Authorization Extensions
Basic Provisioning of Authentication Extensions
Basic Provisioning of Authentication Extensions
Calling-Station-ID
Subscriber Session Timeout
Domain Name in Authentication
RADIUS Reply Message for PPPoE PAP/CHAP
radius-server-policy retry Attempt Overview
Provisioning of Enhanced Subscriber Management (ESM) Objects
Provisioning IP Configuration of the Host
Provisioning IP Configuration of the Host
RADIUS Based Authentication in Wholesale Environment
Change of Authorization and Disconnect-Request
RADIUS-Based Accounting
Accounting Modes Of Operation
Per Session Accounting
Caveats
RADIUS Per Host Accounting
No Host-Accounting
Host-Accounting Enabled
Accounting Interim Update Message Interval
Class Attribute
User Name
Accounting-On and Accounting Off
RADIUS Accounting Message Buffering
Sending an Accounting Stop Message upon a RADIUS Authentication Failure of a PPPoE Session
Enhanced Subscriber Management Overview
Enhanced Subscriber Management Basics
Standard and Enhanced Subscriber Management
Subscriber Management Definitions
Subscriber
Subscriber Management
Subscriber Policy Enforcement
Subscriber SAPs
Hosts and Subscribers
Subscriber Identification Policy
Subscriber Identification String
Subscriber Profile
SLA Profile
Explicit Subscriber Profile Mapping
ESM for IPv6
Models
PPPoE Host
PPPoE RG
IPoE Host/RG
Setup
Behavior
Dual Stack
Router Advertisements (RA)
CoA and Disconnect-Request
Delegated-Prefix-Length
Order of Preference for DPL
DHCP Server Address Utilization and Delegated Prefix Length
DHCPv6 Relay Agent
Configuring a DHCPv6 Relay Agent
DHCPv6 Relay to Third Party DHCPv6 External Server
DHCPv6 Local Server
Dynamic Subscriber Host Processing
Dynamic Tables
Active Subscriber Table
SLA Profile Instance Table
Subscriber Host Table
DHCP Lease State Table
Enhanced Subscriber Management Entities
Instantiating a New Host
Packet Processing for an Existing Host
ESM Host Lockout
Functionality
ANCP and GSMP
ANCP
Static ANCP Management
Enhanced Subscriber Management (ESM) Dynamic ANCP
ANCP String
ANCP Persistency Support
General Switch Management Protocol Version 3 (GSMPv3)
DHCP Release Messages
DHCP Release
DHCP Client Mobility
DHCP Lease Control
Using Scripts for Dynamic Recognition of Subscribers
Python Language and Programmable Subscriber Configuration Policy (PSCP)
Determining the Subscriber Profile and SLA Profile of a Host
Determining the Subscriber Profile
Determining the SLA Profile
SLA-Based Egress QoS Marking
Auto-Sub ID
Sub-id Identifiers
Dual Stack Hosts
Mixing Hosts with Auto-Generated IDs and non Auto-Generated IDs
PPPoA/PPPoEoA Considerations
Deployment Considerations
Caveats
Limiting Subscribers and Hosts on a SAP
Static Subscriber Hosts
QoS for Subscribers and Hosts
QoS Parameters in Different Profiles
QoS Policy Overrides
ESM Subscriber Hierarchical Traffic Control
Subscriber HQoS
Subscriber CFHP
ATM/Ethernet Last-Mile Aware QoS for Broadband Network Gateway
Broadband Network Gateway Application
Queue Determination and Scheduling
Weighted Scheduler Group
Queue and Subscriber Aggregate Rate Configuration and Adjustment
Software-Based Implementation (8.0R4)
Hardware-Based Implementation
Frame Size, Rates, and Running Average Frame Expansion Ratio
Vport Determination and Evaluation
Applying Aggregate Rate Limit to a Vport
Applying a Scheduler Policy to a Vport
Signaling of Last Mile Encapsulation Type
Configuration Example
Subscriber Volume Statistics
IP (Layer 3) Volume Accounting
Separate IPv4 and IPv6 Counters
Configuring IP and IPv6 Filter Policies for Subscriber Hosts
IP Filter Attribute Format Details
Checking Filter Policy Details
ESM PPPoA/PPPoEoA
PPPoA
PPPoEoA
Hardware Support
Termination Points within 7x50
PPPoA Encapsulation
PPPoEoA Encapsulation
Encapsulation Summary
Concurrent Support for Different Service Types on the Same Port
Restrictions in Scaled ATM MDA Mode
QoS Implementation
Association Between the Subscriber and ATM VC Traffic Descriptor (QoS)
Per VP Shaping
ATM/IOM QoS Integration
Intermediate Node Rate Limit/Shaper
Provisioning Aspects
HQoS Combinations
ATM Rate Adjustment
Subscriber Instantiation Use Cases
Authentication
LUDB Access via Capture SAP
Encapsulation Autosensing
SAP Autoprovisioning
PPP Nodes and ppp-policy
MTU Considerations
PPP(oE) Session Antispoofing
Multi-Chassis Synchronization
Overview
Loss of Synchronization and Reconciliation
Subscriber Routed Redundancy Protocol (SRRP)
SRRP Messaging
SRRP and Multi-Chassis Synchronization
SRRP Instance
SRRP Instance MCS Key
Containing Service Type and ID
Containing Subscriber IP Interface Name
Subscriber Subnet Information
Containing Group IP Interface Information
Remote Redundant IP Interface Mismatch
Remote Sending Redundant IP Interface Unavailable
Remote SRRP Advertisement SAP Non-existent
Remote Sending Local Receive SRRP Advertisement SAP Unavailable
Local and Remote Dual Master Detected
Subscriber Subnet Owned IP Address Connectivity
Subscriber Subnet SRRP Gateway IP Address Connectivity
Receive SRRP Advertisement SAP and Anti-Spoof
PPPoE MC Redundancy
Hardware Support
SRRP Considerations for PPPoE
SRRP Fact-Checks
State Synchronization
PPPoE Multi-chassis Synchronization (MCS) Model
Traffic Control and Redundant Interface
Subnet Assignment and Advertisement - Option ‘A’
Subnet Assignment and Advertisement - Option ‘B’
MSAP Considerations
Unnumbered Interface Support
Compatibility with MC-LAG
IPv6 Support
Considerations with Local DHCP Server
Redundant Interface Considerations
Routed Central Office (CO)
Layer 3 Subscriber Interfaces
DHCP Interactions
Routed CO for IES Service
Routed CO for VPRN Service
Wholesale Retail Routed CO
Wholesale Retail Model
Configuration and Applicability
Hub-and-Spoke Forwarding
Routed Subscriber Hosts
Static Configured IPv4 Managed Route
Static Configured IPv6 Managed Route
Dynamic BGP Peering
RIP Listener
RADIUS: Framed-Route and Framed-IPv6-Route
Dual Homing
Dual Homing to Two PEs (Redundant-Pair Nodes) in Triple Play Aggregation
Steady-State Operation of Dual-homed Ring
Broken-Ring Operation and the Transition to this State
Transition from Broken to Closed Ring State
Provisioning Aspects and Error Cases
Dual Homing to Two BSR Nodes
MC Services
Routed CO Dual Homing
Redundant Interfaces
SRRP in Dual Homing
Synchronization
Wholesale-Retail Multi-Chassis Redundancy
SRRP and Multi-Chassis Synchronization
Dual Homing and ANCP
SRRP Enhancement
SRRP Fate Sharing
SRRP Fate Sharing
Failure Detection in a Fate Sharing Group
Fate Sharing Algorithm
Adding a New Instance into an FSG
SRRP Aware Routing - IPv4/IPv6 Route Advertisement Based on SRRP State
Subscriber Interface Routes (IPv4 and IPv6)
Managed Routes
Subscriber Management Routes (/32 IPv4 Host Routes, IPv6 PD WAN-Host Routes)
Activating SRRP State Tracking
SRRP in Conjunction with a PW in ESM Environment – Use Case
Group-monitor
Subscriber Override
Dual Stack Lite
IP-in-IP
Configuring Dual Stack Lite
L2TP over IPv6
L2TP Tunnel RADIUS Accounting
Accounting Packets List
RADIUS Attributes Value Considerations
Other Optional RADIUS Attributes
RADIUS VSA to Enable L2TP Tunnel Accounting
MLPPP on the LNS Side
RADIUS Route Download
Managed SAP (MSAP)
ESM Identification Process
ESM Identification Process
SAP-ID ESM Identifier
DSLAM-ID
Default-Subscriber
Multicast Management
Subscriber Mirroring
Volume and Time Based Accounting
Metering
Categories Map and Categories
Quota Consumption
Minimum Credit Control Quota Values
RADIUS VSA Alc-Credit-Control-Quota
Credit Negotiation Mechanisms
Action on Credit Exhaustion
Action on Error-Conditions
Applicability of Volume and Time Based Accounting
Subscriber Host Idle Timeout
Web Authentication Protocol (WPP)
WPP Configurations
WPP Configurations
WPP Triggered Host Creation
LUDB Support For WPP
WPP Multi-Chassis Redundancy Support
One-time HTTP Redirection Overview
ESM over MPLS Pseudowires
Encapsulation
Encapsulation
ESM Configuration with PW-Ports and PW-SAPs
QoS Support
Bandwidth Control at PW-Port Level via Vport
Last Mile Shaping
BNG Redundancy with ESM over Pseudowire
EPIPE Based Aggregation Service
Sample Configuration on Master BNG
Sample Configuration on Slave BNG
Sample Configuration on A-PE
VPLS Based Aggregation Service
Sample BNG Redundancy (SRRP/MCS) Configuration with VPLS Service on A-PE
A-PE configuration with VPLS Aggregation Service (A-PE1)
A-PE Configuration with VPLS Aggregation Service (A-PE2)
Show Commands Related to Active/Standby Pseudowire on Dual BNGs
On-Demand Subnet Allocation (ODSA)
DHCP pool subnet-binding-key
ODSA Subnet Advertisement and Routing
ODSA with SRRP
ODSA SRRP Failover DHCP Behavior
ODSA SRRP Recovery DHCP Behavior
Logical Link Identifier (LLID)
Open Authentication Model for DHCP and PPPoE Hosts
Terminology
Terminology
LUDB and RADIUS Access Models
No Authentication
LUDB Only Access
LUDB Access via DHCPv4 Server
RADIUS Only Access
Consecutive Access to LUDB and RADIUS
RADIUS Fallback
Subscriber Services
Flexible Subscriber-Interface Addressing (Unnumbered Subscriber-Interfaces)
Terminology
Flexible Subscriber-Interface Addressing for IPOE/PPPOE v4/v6 Subscribers
Default Gateway in IPv4 Flexible Addressing
IPv4 Subnet Sharing
IPv4 Subnet Mask Auto-Generation
Local-proxy-arp and arp-populate
Gi-address Configuration Consideration
PPPoE Considerations
IPoEv6 Considerations
General Configuration Guidelines for Flexible IP Address Assignment
Caveats
uRPF for Subscriber Management
IPoE Sessions
Enabling IPoE Sessions
IPoE Session Authentication
IPoE Session Accounting
IPoE Session Mid-Session Changes
IPoE Session Termination
Limiting the Number of IPoE sessions
SAP Session Index
Resiliency
Notes
Configuration Steps
Configuring Enhanced Subscriber Management with CLI
Configuring RADIUS Authentication of DHCP Sessions
Configuring Enhanced Subscriber Management
Basic Configurations
Subscriber Interface Configuration
Configuring Enhanced Subscriber Management Entities
Configuring a Subscriber Identification Policy
Configuring a Subscriber Profile
Configuring an SLA Profile
Configuring Explicit Mapping Entries
Routed CO with Basic Subscriber Management Features
Applying the Profiles and Policies
SLA Profile
Configuring Dual Homing
Subscriber Identification Policy
Subscriber Profile
Subscriber Management Command Reference
Configuration Commands
ANCP Commands
GSMP Configuration Commands
Authentication Policy Commands
RADIUS Accounting Policy Commands
RADIUS Route Download Commands
Diameter Policy Commands
Subscriber Management Diameter Application Policy Commands
Category Map and Credit Control Policy Commands
Filter Commands
BGP Peering Policy Commands
Explicit Subscriber Mapping Commands
IGMP Policy Commands
Host Lockout Commands
Host Tracking Policy Commands
PIM Policy Commands
SLA Profile Commands
Subscriber Identification Policy Commands
Auto-Generated Subscriber Identification Key Commands
Auto-Generated Subscriber Identification Key Service Commands
Subscriber MCAC Policy Commands
Subscriber Profile Commands
IPoE Session Policy Commands
Multi-Chassis Redundancy Commands
Subscriber Management Service Commands
VPLS Subscriber Management Configuration Commands
Managed SAP Policy Commands
VPRN Subscriber Interface Configuration Commands
VPRN Subscriber Interface, Group Interface Commands
IES Subscriber Management Configuration Commands
IES Subscriber Interface Commands
IES Subscriber Interface Group Interface Commands
Service Subscriber Interface, Group Interface IPoE Commands
RIP Commands
VPort Commands
Redundant Interface Commands
Wireless Portal Protocol (WPP) Commands
Multiple PPoE Session QoS Commands
Multicast Listener Discovery (MLD) Commands
Show Commands
Monitor Commands
Clear Commands
Debug Commands
Tools Commands
Triple Play Subscriber Management Configuration Commands
Generic Commands
ANCP and GSMP Commands
RADIUS Policy Commands
RADIUS Route Download Commands
IGMP Policy Commands
PIM Policy Commands
Managed SAP Policy Commands
Multi-Chassis Redundancy Commands
SLA Profile Commands
Subscriber Identification Policy Commands
Subscriber Profile Commands
Explicit Subscriber Mapping Commands
Subscriber Management Service Commands
Subscriber Management Service Commands
RIP Commands
Vport Commands
Show Commands
Clear Commands
Tools Commands
Debug Commands
Monitor Commands
Oversubscribed Multi-Chassis Redundancy (OMCR) in ESM
In This Section
In This Section
Overview
Terminology and Abbreviations
Restrictions
Deploying Oversubscribed Multi-Chassis Redundancy
Resource Exhaustion Notification and Simultaneous Failures
Resource Monitoring
Warm-Standby Mode Of Operation
IPoE vs PPPoE
Persistency
Routing and Redundant Interface in OMCR
Revertive Behavior
Service Restoration Times
Processing of the SRRP Flaps
Accounting
Configuration Guidelines
Troubleshooting Commands
OMCR Command Reference
Configuration Commands
OMCR Configuration Commands
WIFI Aggregation and Offload
In This Section
In This Section
WIFI Aggregation and Offload Overview
Layer 2 over Soft-GRE Tunnels
Encapsulation
Data Path
Tunnel Level Egress QoS
Operational Commands
Authentication
EAP-Based Authentication
RADIUS Proxy
RADIUS Proxy — Server Load-Balancing
RADIUS Proxy — Cache Lookup
RADIUS Proxy — Accounting
Portal Authentication
Address Assignment
WIFI Mobility Anchor
Wholesale
CGN on WLAN-GW
Lawful Intercept on WLAN-GW
WLAN Location Enhancements
Triggered Interim Accounting-Updates
Operational Support
WIFI Offload – 3G/4G Interworking
Signaling Call Flow
GTP Setup with EAP Authentication
APN Resolution
Configuration Objects
RADIUS Support
QoS Support with GTP
Selective Breakout
Location Notification in S2a
WLAN Location over S2a
Cellular Location over S2a
Cellular Location over Gn Interface
Operational Support
Operational Commands
show router wlan-gw mobile-gateway
show router 300 wlan-gw mgw-address-cache
show subscriber-mgmt wlan-gw gtp-session detail
show subscriber-mgmt wlan-gw mgw-profile "default"
show subscriber-mgmt wlan-gw gtp-statistics
Migrant User Support
Migrant User Support with Portal-Authentication
DHCP
Authentication and Forwarding
Migrant User Support with EAP Authentication
Data Triggered Subscriber Creation
Distributed Subscriber Management (DSM)
DHCP
Authentication and Accounting
DSM Data-Plane
IP Filtering
Policing
Lawful Intercept (LI)
Data-Triggered UE Creation
Idle-Timeout and Session-Timeout Management
Operational Commands
Pool Manager
DHCPv6 and SLAAC
Distributed RADIUS Proxy
Enhanced Subscriber Management
Distributed Subscriber Management
Operational Commands
WLAN-GW 1:1 Active-Backup Redundancy
DHCP Server Redundancy
Subscriber Creation after Switchover
WLAN-GW Triggered Stateless Redundancy (N:1)
AP Triggered Stateless WLAN-GW Redundancy (N:1)
IPv6-only Access
IPv6 GRE Tunnels
IPv6 Client-Side RADIUS Proxy
Dual-Stack UEs over WLAN-GW
SLAAC Prefix Assignment
DHCPv6 IA_NA Assignment
Migrant User Support
Accounting
Layer 2 Wholesale
VLAN to WLAN-GW IOM/IMM Steering via Internal Epipe
The aggregation network can insert up to two AP identifying VLAN tags, and the AP can insert a .1q tag (typically for identifying the SSID). The number of AP identifying tags sent on the internal epipe depends on the encapsulation on the access SAP. For example, if an aggregation network inserts two AP identifying tags, and an access SAP is configured with null encaps, then the traffic sent on the internal Epipe will carry two AP identifying tags. The number of AP identifying tags in the frame forwarded over the internal Epipe must be configured via the l2-ap-encap-type command.
Soft-L2TPv3 Tunnels
WiFi Command Reference
Configuration Commands
WLAN-GW Commands
WLAN-GW Service Commands
RADIUS Server and Proxy Commands
LUDB Matching for RADIUS Proxy Cache
Data Plane Related Commands
Port Policy Commands
WIFI Aggregation and Offload – Migrant User Support Commands
Distributed Subscriber Management Commands
Show Commands
Tools Commands
Clear Commands
WIFI Aggregation and Offload Commands
Generic Commands
WLAN-GW Commands
RADIUS Server Policy Commands
CLI Command Description for RADIUS Server
CLI Command Description for RADIUS Proxy Server
LUDB Matching of RADIUS Proxy Cache Commands
WLAN-GW-Group Commands
Port Policy Commands
WLAN-GW Group Interface Commands
Migrant User Support Commands
Distributed Subscriber Management Commands
Show Commands
Tools Commands
Clear Commands
RADIUS Triggered Dynamic Data Services
In This Section
In This Section
Introduction to RADIUS Triggered Dynamic Data Services
RADIUS Triggered Dynamic Data Services Command Reference
Configuration Commands
RADIUS Triggered Dynamic Data Services Commands
Show Commands
Tools Commands
Clear Commands
Debug Commands
WIFI Aggregation and Offload Command Reference
Command Hierarchies
Show Commands
Clear Command
Debug Commands
Tools Commands
Diameter and Diameter Applications
In This Section
In This Section
Restrictions
Terminology
3GPP-Based Diameter Credit Control Application (DCCA) - Online Charging
Policy Management via Gx Interface
Gx Protocol
Policy Assignment Models
IP-CAN Session – Gx Session Identification
User Identification in PCRF
NAS-Port-Id as Subscription-Id
Gx Interface and ESM Subscriber Instantiation
Gx and Dual-Stack Hosts
Gx and PPPoEv6-DHCP
Gx Fallback Function
Gx CCR-I Replays
Gx CCR-t Replays
RAR and CCR-t Replay
CCR-t Replay And Multi-Chassis Redundancy
CCR-t Replay And High Availability
Automatic Updates for IP Address Allocation/De-allocation
DHCPv4/v6 Re-Authentication and RADIUS CoA Interactions With Gx
Gx, ESM and AA
ESM Subscriber-host vs AA Subscriber
AA Subscriber State
Policy Management via Gx
Gx-Based Overrides
Instantiation of Gx Overrides
Examples of Gx Overrides
PCC Rules
PCC Rule Concept
PCC Rule Instantiation
Base QoS-Policy and Base Filter
Generic Policy Sharing and Rule Sharing
PCC Rule Name and PCC Rule Removal
Gx Rule Ordering
PCC Rule Override
Aggregation of IP-Criterion
Gx Rules with Multiple Actions and Action Sharing
Combining IPv4 and IPv6 Entries within the Rule
Alc-NAS-Filter-Rule-Shared AVP vs Flow-Information AVP
RADIUS and Gx Interaction
Bulk Changes via CLI while Gx Rules are Active
PCC Rule Direction
Action
Rate-Limiting Action (Ingress, Egress)
Dynamic Policers and Queue Mappings
Dynamic Policer Rates and Accounting Statistics
Forwarding-Class Change (Ingress, Egress)
Next-Hop Redirect (Ingress)
HTTP Redirect (Ingress)
Gate Function
PCC Rule Provisioning Example
Operational Aspects
PCC Rules and Capacity Planning
PCC Rule Scaling Example
NAS Filter Inserts
Examples of NAS Entry Inserts
Error Handing and Rule Failure Reporting in ESM
AVP Decoding Failure in Gx
ESM Rule-Installation Failure
Failure Reporting in AA
Summary of Failure Reporting
Usage-Monitoring and Reporting
ESM Usage-Monitoring - What is Being Monitored
AA Usage-Monitoring – What is Being Monitored
Requesting Usage-Monitoring in ESM
Reporting Accumulated Usage
Disabling Usage-Monitoring
Usage-Monitoring for PCC Rules
Session Termination
Usage-Monitoring Examples
Event Triggers
Subscriber Verification
Subscriber Termination
Mobility Support in WiFi
Redundancy
Persistency and Origin-State-ID AVP (RFC 6733, §8.6 and §8.16).
Overload Protection
Diameter NASREQ Application
Sample Configuration Steps
Diameter Redundancy
Diameter Peer Level Redundancy
Diameter Multi-Chassis Redundancy
Diameter Proxy Model General Operational Principles
Diameter Proxy Activity Selection
Synchronization and MCS
Retransmissions
Retransmissions and the T-bit
Diameter Proxy Role
Diameter Proxy and CC-Request-Number AVP
Stateless Diameter Proxy
Switchover Scenarios
Log/Trap Generation Caused by Diameter Proxy State Change
Switchover Update Event (CCR-u)
Isolated Chassis
Diameter Identities
High Availability
Gx Specific Behavior
Python Script Support for ESM
In This Chapter
In This Chapter
Python Script Support for ESM
Python in SR-OS Overview
Python Changes
Python Support in sub-ident-policy
Configuration
Operator Debugging
Python Scripts
Sample Python Scripts
Example
Example
Example
Limitations
RADIUS Script Policy Overview
Python RADIUS API
Sample Script
Python Policy Overview
Python Policy – RADIUS API
Python Policy – DHCPv4 API
Python Policy – DHCPv6 API
Python Policy – Diameter API
Python Policy – DHCP Transaction Cache API
Python Cache Support
Applying a Python Policy
Python Script Protection
Tips and Tricks
Python Commands
Services Commands
Tools Commands
Show Commands
Debug Commands
Clear Commands
Python Configuration Commands
Global Commands
Python Policy Commands
Tools Commands
Show Commands
Debug Commands
Clear Commands
Python RADIUS Commands
Python RADIUS CLI Command Descriptions
Generic Commands
Script Commands
Common CLI Command Descriptions
In This Chapter
In This Chapter
Common Service Commands
Standards and Protocol Support