Quantcast
Channel: All Routing posts
Viewing all articles
Browse latest Browse all 8688

can i have two dynamic profiles configured on the same MX-480 ?

$
0
0

Hi All,

 

Am trying setup second dynamic profile and second access profile on juniper MX-480 router. below is the profiles setup. 

 

production {
    interfaces {
        pp0 {
            unit "$junos-interface-unit" {
                no-traps;
                ppp-options {
                    chap;
                    pap;
                }
                pppoe-options {
                    underlying-interface "$junos-underlying-interface";
                    server;
                }
                family inet {
                    filter {
                        input PEERAPP_PPP_UP;
                    }
                    unnumbered-address lo0.0;
                }
            }
        }
    }
    inactive: class-of-service {
        traffic-control-profiles {
            100M {
                shaping-rate 50m;
            }
        }
        interfaces {
            pp0 {
                unit "$junos-interface-unit" {
                    output-traffic-control-profile 100M;
                }
            }
        }
    }
}
TEST {
    interfaces {
        pp0 {
            unit "$junos-interface-unit" {
                no-traps;
                ppp-options {
                    chap;
                    pap;
                }
                pppoe-options {
                    underlying-interface "$junos-underlying-interface";
                    server;
                }
                family inet {
                    filter {
                        input "$junos-input-filter";
                        output "$junos-output-filter";
                    }
                    unnumbered-address lo0.0;
                }
            }
        }
    }
}

and here is the access profile setup.

 

radius-server {
12.12.12.12 {
secret "$9$92pJCOREcyrK8RheWx7s"; ## SECRET-DATA
source-address 1.1.1.1;
}
}
profile PRODUCTION { accounting-order radius; authentication-order radius; radius { authentication-server 12.12.12.12.; accounting-server 12.12.12.12; attributes { ignore { output-filter; input-filter; } } } accounting { order radius; accounting-stop-on-failure; accounting-stop-on-access-deny; immediate-update; coa-immediate-update; update-interval 10; statistics volume-time; } } profile TEST { accounting-order radius; authentication-order radius; radius { authentication-server 12.12.12.12.; accounting-server 12.12.12.12; } accounting { order radius; accounting-stop-on-failure; accounting-stop-on-access-deny; immediate-update; coa-immediate-update; update-interval 15; statistics volume-time; } } address-assignment { pool production { family inet { network 10.10.10.0/24; range all { low 10.10.10.5; high 10.10.10.250; } host ms_228 { hardware-address f4:f2:6d:fd:85:8d; ip-address 10.10.10.25; } }

 

Underlying-interface linking...

 

 

re0# show interfaces ge-1/0/9
flexible-vlan-tagging;
mtu 9000;
gigether-options {
    auto-negotiation;
}

unit 123 {
    description PRODUCTION;
    encapsulation ppp-over-ether;
    vlan-id 123;
    pppoe-underlying-options {
        access-concentrator PRODUCTION;
        dynamic-profile PRODUCTION;
    }
}
unit 1011 {
    description TEST;
    encapsulation ppp-over-ether;
    vlan-id 1011;
    pppoe-underlying-options {
        access-concentrator TEST;
        dynamic-profile TEST;
    }
}

 everything under PRODUCTION setup (both dynamic profile and access concentrator) is working. 

 

when clients dial-in they get this error:

 

Error 734: the PPP lick control protocal was terminated. 

 

could it be that am using pp0 interface under both profiles ??

 

 

Apreciate your help.

Thanks


Viewing all articles
Browse latest Browse all 8688

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>