[j-nsp] PPPoEoV on ERX

[Chris Hellberg]

Hi Damien,

If you do something like the following, you should get some luck

Virtual-router default
!
profile pppoe
ip mtu 1492
ip unnumbered loopback0
ppp authentication pap chap
end
!
interface gigabitethernet x/y
encapsulation vlan
mtu 1522
!
Interface gigabitethernet x/y.z
vlan-id 123
auto-configure pppoe
profile pppoe pppoe
vir default
!
radius authentication server 1.2.3.4
secret bla
!
virtual-router internet
!
Interface loopback0
Ip address a.b.c.d 255.255.255.255
!



This is a quick config off the top of my head and _should_ work for you.
I'm sure with a response on-list there will be a big out-pouring of
critiquing, but it's a start :)

This will allow you to terminate the subscriber in to a virtual-router
called internet. You will need to return the virtual-router name in your
Access-Accept. There are other ways of determining the VR to terminate
the user in though, but it depends on what you want to do.

To enable local authentication, I assume you mean authentication when
you want admins to telnet to the node and be authenticated via RADIUS?
If this is what you want, use:

Aaa new-model
aaa authentication login default radius line

This will fallback to the telnet password if the RADIUS server is
unreachable. Pretty similar to Cisco. 

You'll need to make sure you understand the different ways of using the
CLI authentication RADIUS VSAs. Depending on what you want to achieve,
there are different ways of skinning the cat.

Chris

> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net 
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of R Che
> Sent: Monday, 5 July 2004 5:38 p.m.
> To: damien at holloway.id.au; Juniper NSP
> Subject: RE: [j-nsp] PPPoEoV on ERX
> 
> 
> Hi thanks. but the links only tells about enabling pppoe on 
> the interface.
> I'm trying to terminate pppoe session on an Ethernet 
> interface or a vlan subinterface and enable radius server for 
> local authentication. Do you have a complete config as I'm 
> pretty new to ERX? I've done this on Cisco but ERX is 
> different though cli looks similar.
> Thanks.
> 
> Damien Holloway <damien at holloway.id.au> wrote:
> Try this...
> 
> 
http://www.juniper.net/techpubs/software/erx/junose52/swconfig-physical/
html
/ethernet-config8.html#376557



Regards

Damien

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of R Che
Sent: Monday, July 05, 2004 9:36 AM
To: Juniper NSP
Subject: [j-nsp] PPPoEoV on ERX

Does anyone have a sample for PPPoEoV and PPPoE configs on ERX?
Thanks.



---------------------------------
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/juniper-nsp


		
---------------------------------
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/juniper-nsp


------------------------------------------------------------------------------
"This communication, including any attachments, is confidential. 
If you are not the intended recipient, you should not read
it - please contact me immediately, destroy it, and do not
copy or use any part of this communication or disclose
anything about it. Thank you. Please note that this 
communication does not designate an information system for
 the purposes of the Electronic Transactions Act 2002."
------------------------------------------------------------------------------