Hi All,
Am trying setup second dynamic profile and second access profile on juniper MX-480 router. below is the profiles setup.
production { interfaces { pp0 { unit "$junos-interface-unit" { no-traps; ppp-options { chap; pap; } pppoe-options { underlying-interface "$junos-underlying-interface"; server; } family inet { filter { input PEERAPP_PPP_UP; } unnumbered-address lo0.0; } } } } inactive: class-of-service { traffic-control-profiles { 100M { shaping-rate 50m; } } interfaces { pp0 { unit "$junos-interface-unit" { output-traffic-control-profile 100M; } } } } } TEST { interfaces { pp0 { unit "$junos-interface-unit" { no-traps; ppp-options { chap; pap; } pppoe-options { underlying-interface "$junos-underlying-interface"; server; } family inet { filter { input "$junos-input-filter"; output "$junos-output-filter"; } unnumbered-address lo0.0; } } } } }
and here is the access profile setup.
radius-server {
12.12.12.12 {
secret "$9$92pJCOREcyrK8RheWx7s"; ## SECRET-DATA
source-address 1.1.1.1;
}
}
profile PRODUCTION { accounting-order radius; authentication-order radius; radius { authentication-server 12.12.12.12.; accounting-server 12.12.12.12; attributes { ignore { output-filter; input-filter; } } } accounting { order radius; accounting-stop-on-failure; accounting-stop-on-access-deny; immediate-update; coa-immediate-update; update-interval 10; statistics volume-time; } } profile TEST { accounting-order radius; authentication-order radius; radius { authentication-server 12.12.12.12.; accounting-server 12.12.12.12; } accounting { order radius; accounting-stop-on-failure; accounting-stop-on-access-deny; immediate-update; coa-immediate-update; update-interval 15; statistics volume-time; } } address-assignment { pool production { family inet { network 10.10.10.0/24; range all { low 10.10.10.5; high 10.10.10.250; } host ms_228 { hardware-address f4:f2:6d:fd:85:8d; ip-address 10.10.10.25; } }
Underlying-interface linking...
re0# show interfaces ge-1/0/9 flexible-vlan-tagging; mtu 9000; gigether-options { auto-negotiation; } unit 123 { description PRODUCTION; encapsulation ppp-over-ether; vlan-id 123; pppoe-underlying-options { access-concentrator PRODUCTION; dynamic-profile PRODUCTION; } } unit 1011 { description TEST; encapsulation ppp-over-ether; vlan-id 1011; pppoe-underlying-options { access-concentrator TEST; dynamic-profile TEST; } }
everything under PRODUCTION setup (both dynamic profile and access concentrator) is working.
when clients dial-in they get this error:
Error 734: the PPP lick control protocal was terminated.
could it be that am using pp0 interface under both profiles ??
Apreciate your help.
Thanks