[j-nsp] subscriber management not inserting any routes

Baldur Norddahl baldur at gigabit.dk
Sat May 18 11:05:24 EDT 2019


Hello

I am having trouble with subscriber management not inserting any routes. 
Information is picked up from radius, such as this:

baldur at interxion-edge1> show subscribers
Interface             IP Address/VLAN ID                      User 
Name                      LS:RI
demux0.3221225472     195.192.249.104 vlan.1970-37              
default:internet
demux0.3221225473     195.192.249.69 vlan.1970-77              
default:internet
...

baldur at interxion-edge1> show interfaces demux0.3221225472
   Logical interface demux0.3221225472 (Index 536870919) (SNMP ifIndex 
200000007)
     Flags: Up VLAN-Tag [ 0x8100.1970 0x8100.37 ]  Encapsulation: ENET2
     Demux:
       Underlying interface: xe-0/1/1 (Index 168)
     Bandwidth: 0
     Input packets : 3342925
     Output packets: 0
     Protocol inet, MTU: 1500
     Max nh cache: 0, New hold nh limit: 0, Curr nh cnt: 0, Curr new 
hold cnt: 0, NH drop cnt: 0
       Flags: Unnumbered
       Donor interface: lo0.1 (Index 329)
       Addresses, Flags: Is-Primary
         Local: 185.24.168.248

baldur at interxion-edge1> show route 195.192.249.104

internet.inet.0: 769284 destinations, 771001 routes (769284 active, 0 
holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

195.192.249.64/26  *[BGP/170] 4w5d 12:58:36, MED 0, localpref 100, from 
185.24.171.254
                       AS path: ?, validation-state: unverified
                     >  to 10.10.124.2 via xe-0/1/0.0, Push 164140, Push 
16467(top)

---

The subscriber interface is receiving packets but never sends anything 
out. Also no route is added although the router seems to be aware of the 
intended subscriber IP address. The route shown above is a /26 to 
another router. I am expecting the subscriber management system to 
override that with a /32 for this specific subscriber.

My setup is like this:

interfaces {
     xe-0/1/1 {
         flexible-vlan-tagging;
         auto-configure {
             stacked-vlan-ranges {
                 dynamic-profile Auto-VLAN-Demux {
                     accept inet;
                     ranges {
                         1970-1970,any;
                     }
                     access-profile prof1;
                 }
                 authentication {
                     password "$ABC123";
                     username-include {
                         user-prefix vlan;
                         vlan-tags;
                     }
                 }
                 access-profile prof1;
             }
         }
     }
}

dynamic-profiles {
     Auto-VLAN-Demux {
         routing-instances {
             "$junos-routing-instance" {
                 interface "$junos-interface-name";
             }
         }
         interfaces {
             demux0 {
                 unit "$junos-interface-unit" {
                     demux-source inet;
                     demux {
                         inet {
                             address source;
                             auto-configure {
                                 address-ranges {
                                     dynamic-profile DHCP-IP-Demux {
                                         network 0.0.0.0/0;
                                     }
                                     authentication {
                                         password ABC123;
                                         username-include {
                                             user-prefix ip;
                                             interface-name;
                                             source-address;
                                         }
                                     }
                                 }
                             }
                         }
                     }
                     vlan-tags outer "$junos-stacked-vlan-id" inner 
"$junos-vlan-id";
                     demux-options {
                         underlying-interface "$junos-underlying-interface";
                     }
                     family inet {
                         unnumbered-address lo0.1;
                     }
                 }
             }
         }
     }
}

---

What am I missing here? I have tried a ton of stuff but never succeeded 
in getting any outgoing packets towards the subscriber.

Regards,

Baldur



More information about the juniper-nsp mailing list