Mailing List Archive

subscriber management not inserting any routes
Hello

I am having trouble with subscriber management not inserting any routes.
Information is picked up from radius, such as this:

baldur@interxion-edge1> show subscribers
Interface             IP Address/VLAN ID                      User
Name                      LS:RI
demux0.3221225472     195.192.249.104 vlan.1970-37             
default:internet
demux0.3221225473     195.192.249.69 vlan.1970-77             
default:internet
...

baldur@interxion-edge1> show interfaces demux0.3221225472
  Logical interface demux0.3221225472 (Index 536870919) (SNMP ifIndex
200000007)
    Flags: Up VLAN-Tag [ 0x8100.1970 0x8100.37 ]  Encapsulation: ENET2
    Demux:
      Underlying interface: xe-0/1/1 (Index 168)
    Bandwidth: 0
    Input packets : 3342925
    Output packets: 0
    Protocol inet, MTU: 1500
    Max nh cache: 0, New hold nh limit: 0, Curr nh cnt: 0, Curr new
hold cnt: 0, NH drop cnt: 0
      Flags: Unnumbered
      Donor interface: lo0.1 (Index 329)
      Addresses, Flags: Is-Primary
        Local: 185.24.168.248

baldur@interxion-edge1> show route 195.192.249.104

internet.inet.0: 769284 destinations, 771001 routes (769284 active, 0
holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

195.192.249.64/26  *[BGP/170] 4w5d 12:58:36, MED 0, localpref 100, from
185.24.171.254
                      AS path: ?, validation-state: unverified
                    >  to 10.10.124.2 via xe-0/1/0.0, Push 164140, Push
16467(top)

---

The subscriber interface is receiving packets but never sends anything
out. Also no route is added although the router seems to be aware of the
intended subscriber IP address. The route shown above is a /26 to
another router. I am expecting the subscriber management system to
override that with a /32 for this specific subscriber.

My setup is like this:

interfaces {
    xe-0/1/1 {
        flexible-vlan-tagging;
        auto-configure {
            stacked-vlan-ranges {
                dynamic-profile Auto-VLAN-Demux {
                    accept inet;
                    ranges {
                        1970-1970,any;
                    }
                    access-profile prof1;
                }
                authentication {
                    password "$ABC123";
                    username-include {
                        user-prefix vlan;
                        vlan-tags;
                    }
                }
                access-profile prof1;
            }
        }
    }
}

dynamic-profiles {
    Auto-VLAN-Demux {
        routing-instances {
            "$junos-routing-instance" {
                interface "$junos-interface-name";
            }
        }
        interfaces {
            demux0 {
                unit "$junos-interface-unit" {
                    demux-source inet;
                    demux {
                        inet {
                            address source;
                            auto-configure {
                                address-ranges {
                                    dynamic-profile DHCP-IP-Demux {
                                        network 0.0.0.0/0;
                                    }
                                    authentication {
                                        password ABC123;
                                        username-include {
                                            user-prefix ip;
                                            interface-name;
                                            source-address;
                                        }
                                    }
                                }
                            }
                        }
                    }
                    vlan-tags outer "$junos-stacked-vlan-id" inner
"$junos-vlan-id";
                    demux-options {
                        underlying-interface "$junos-underlying-interface";
                    }
                    family inet {
                        unnumbered-address lo0.1;
                    }
                }
            }
        }
    }
}

---

What am I missing here? I have tried a ton of stuff but never succeeded
in getting any outgoing packets towards the subscriber.

Regards,

Baldur

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: subscriber management not inserting any routes [ In reply to ]
Hi Baldur,

Does this command show anything for you?

mx5-lab-2> show system subscriber-management route

Route: 10.0.255.2/32
Route Type: Local
Next-Hop index: 0
Route: 100.64.1.15/32
Route Type: Access-internal
Interface: demux0.3221225501
Next-Hop index: 707
Route: 2001:db8:ffff::2/128
Route Type: Local
Next-Hop index: 0
Route: x:x:x:x::1a/128
Route Type: Access-internal
Interface: demux0.3221225502
Next-Hop index: 707
Route: fe80::8ae0:f3ff:fe7c:4cc0/128
Route Type: Local
Next-Hop index: 0

My config is different, I'm testing packet-triggered subscribers
feature. In dynamic-profile I have source defined under family. Not sure
if it applies to your case.

interfaces {
demux0 {
unit "$junos-interface-unit" {
demux-options {
underlying-interface "$junos-underlying-interface";
}
family inet {
demux-source {
$junos-subscriber-ip-address;
}
filter {
input "$junos-input-filter";
output "$junos-output-filter";
}
unnumbered-address "$junos-loopback-interface";
}
family inet6 {
filter {
input "$junos-input-ipv6-filter";
output "$junos-output-ipv6-filter";
}
demux-source {
"$junos-subscriber-ipv6-address";
}
unnumbered-address "$junos-loopback-interface";
}
}
}
}

Kind regards,
Andrey Kostin


Baldur Norddahl ????? 2019-05-18 11:05:
> Hello
>
> I am having trouble with subscriber management not inserting any
> routes. Information is picked up from radius, such as this:
>
> baldur@interxion-edge1> show subscribers
> Interface             IP Address/VLAN ID                      User
> Name                      LS:RI
> demux0.3221225472     195.192.249.104 vlan.1970-37             
> default:internet
> demux0.3221225473     195.192.249.69 vlan.1970-77             
> default:internet
> ...
>
> baldur@interxion-edge1> show interfaces demux0.3221225472
>   Logical interface demux0.3221225472 (Index 536870919) (SNMP ifIndex
> 200000007)
>     Flags: Up VLAN-Tag [ 0x8100.1970 0x8100.37 ]  Encapsulation: ENET2
>     Demux:
>       Underlying interface: xe-0/1/1 (Index 168)
>     Bandwidth: 0
>     Input packets : 3342925
>     Output packets: 0
>     Protocol inet, MTU: 1500
>     Max nh cache: 0, New hold nh limit: 0, Curr nh cnt: 0, Curr new
> hold cnt: 0, NH drop cnt: 0
>       Flags: Unnumbered
>       Donor interface: lo0.1 (Index 329)
>       Addresses, Flags: Is-Primary
>         Local: 185.24.168.248
>
> baldur@interxion-edge1> show route 195.192.249.104
>
> internet.inet.0: 769284 destinations, 771001 routes (769284 active, 0
> holddown, 0 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 195.192.249.64/26  *[BGP/170] 4w5d 12:58:36, MED 0, localpref 100,
> from 185.24.171.254
>                       AS path: ?, validation-state: unverified
>                     >  to 10.10.124.2 via xe-0/1/0.0, Push 164140,
> Push 16467(top)
>
> ---
>
> The subscriber interface is receiving packets but never sends anything
> out. Also no route is added although the router seems to be aware of
> the intended subscriber IP address. The route shown above is a /26 to
> another router. I am expecting the subscriber management system to
> override that with a /32 for this specific subscriber.
>
> My setup is like this:
>
> interfaces {
>     xe-0/1/1 {
>         flexible-vlan-tagging;
>         auto-configure {
>             stacked-vlan-ranges {
>                 dynamic-profile Auto-VLAN-Demux {
>                     accept inet;
>                     ranges {
>                         1970-1970,any;
>                     }
>                     access-profile prof1;
>                 }
>                 authentication {
>                     password "$ABC123";
>                     username-include {
>                         user-prefix vlan;
>                         vlan-tags;
>                     }
>                 }
>                 access-profile prof1;
>             }
>         }
>     }
> }
>
> dynamic-profiles {
>     Auto-VLAN-Demux {
>         routing-instances {
>             "$junos-routing-instance" {
>                 interface "$junos-interface-name";
>             }
>         }
>         interfaces {
>             demux0 {
>                 unit "$junos-interface-unit" {
>                     demux-source inet;
>                     demux {
>                         inet {
>                             address source;
>                             auto-configure {
>                                 address-ranges {
>                                     dynamic-profile DHCP-IP-Demux {
>                                         network 0.0.0.0/0;
>                                     }
>                                     authentication {
>                                         password ABC123;
>                                         username-include {
>                                             user-prefix ip;
>                                             interface-name;
>                                             source-address;
>                                         }
>                                     }
>                                 }
>                             }
>                         }
>                     }
>                     vlan-tags outer "$junos-stacked-vlan-id" inner
> "$junos-vlan-id";
>                     demux-options {
>                         underlying-interface
> "$junos-underlying-interface";
>                     }
>                     family inet {
>                         unnumbered-address lo0.1;
>                     }
>                 }
>             }
>         }
>     }
> }
>
> ---
>
> What am I missing here? I have tried a ton of stuff but never
> succeeded in getting any outgoing packets towards the subscriber.
>
> Regards,
>
> Baldur
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp

--
? ?????????,

?????? ??????

http://mx-sport.ru/
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp