Routing
Highlighted
Routing

Subscriber management VLAN ranges limit

‎09-19-2017 12:26 AM

Hello everyone,

 

At my company we're a heavy user of the subscriber management feature with both DHCP and PPPoE. All works well, except that since this week, we're having issues establishing both DHCP and PPPoE connections on customer sites.

 

At first we thought it had to do with misconfiguration of PPPoE, because that is the latest feature we took in production last month. But after testing DHCP, we knew we had to search for a bigger cause. Checking our configuration 10 times over, we tried to look at, at first, more rediculous things that would be the cause of the problem. Then I came accross this page:

 

https://www.juniper.net/documentation/en_US/junos/topics/concept/vlan-dynamic-subscriber-access.html

 

We think we're at some sort of limit, but we can not prove this, and we also do not know how to interpretet this table. 

 

--

 

We also did a test bridging the incoming VLAN to another interface that is connected a different PPPoE server and the client immediately got an IP address. So we know for sure that there is an issue in the router.

 

Beelze

7 REPLIES 7
Highlighted
Routing

Re: Subscriber management VLAN ranges limit

‎09-19-2017 06:44 AM

Hi,

 

Not sure the version in question. Please note, from 15.1 i.e next generation subscriber-management release there is no limit to vlan-range.

 

 

labroot@jtac-mx480-r2031_C# show interfaces ae0 | match ranges | display set | except pppoe | count   

Count: 42 lines

 

https://www.juniper.net/documentation/en_US/junos12.3/topics/task/configuration/vlan-dynamic-profile...

 

You can configure multiple VLAN range groups (up to 32 total) on the same physical interface that use different VLAN dynamic profiles.

 

 

NPC0(jtac-mx480-r2031_C vty)# show dv 157  <<< IFD INDEX, you can use show interface ge-x/x/x to find the index number.

global context

=====================================================================

maximum ranges=640

punt_nexthop[0]    0x1080202A20000000

 

ifd context

=====================================================================

jnh dv context

--------------

control_ifl        332

descriptor         0x0007CFC0

encaps (legend)

   ARP             0x01

   IPV4            0x02

   IPV6            0x04

   DHCPV4          0x08

   DHCPV6          0x10

   PPPOE           0x20

   ANY             0x40

 

VLANS

=====================================================================

                                   protocol

range valid minimum maximum encaps check nexthop   

----- ----- ------- ------- ------ ------------------

    0     1     137     150 0x20   0xB83E7E0105800000

    1     1       1     121 0x20   0xB83E7E0105800000

    2     1     642     642 0x20   0xB83E7E0105800000

    3     1     157     158 0x20   0xB83E7E0105800000

    4     1     163     331 0x20   0xB83E7E0105800000

    5     1     645    4094 0x20   0xB83E7E0105800000

    6     1     333     465 0x20   0xB83E7E0105800000

    7     1     468     549 0x20   0xB83E7E0105800000

    8     1     566     568 0x20   0xB83E7E0105800000

    9     1     123     131 0x20   0xB83E7E0105800000

   10     1     153     154 0x20   0xB83E7E0105800000

   11     1     551     557 0x20   0xB83E7E0105800000

   12     1     559     564 0x20   0xB83E7E0105800000

   13     1     572     581 0x20   0xB83E7E0105800000

   14     1     583     587 0x20   0xB83E7E0105800000

   15     1     582     582 0x20   0xB83E7E0105800000

   16     1     135     135 0x20   0xB83E7E0105800000

   17     1     589     633 0x20   0xB83E7E0105800000

   18     1     635     638 0x20   0xB83E7E0105800000

   19     1     558     558 0x20   0xB83E7E0105800000

   20     1     634     634 0x20   0xB83E7E0105800000

   21     1     588     588 0x20   0xB83E7E0105800000

   22     1     151     151 0x20   0xB83E7E0105800000

   23     1     467     467 0x20   0xB83E7E0105800000

   24     1     332     332 0x20   0xB83E7E0105800000

   25     1     159     159 0x20   0xB83E7E0105800000

   26     1     136     136 0x20   0xB83E7E0105800000

   27     1     565     565 0x20   0xB83E7E0105800000

   28     1     155     156 0x20   0xB83E7E0105800000

   29     1     160     162 0x20   0xB83E7E0105800000

   30     1     122     122 0x20   0xB83E7E0105800000

   31     1     641     641 0x20   0xB83E7E0105800000

 

SVLANS

=====================================================================

            outer   outer   inner   inner          protocol

range valid minimum maximum minimum maximum encaps check nexthop

----- ----- ------- ------- ------- ------- ------ ------------------

    0     1       1    4094       1    4094 0x20   0xB83E7E0105800000

 

Highlighted
Routing

Re: Subscriber management VLAN ranges limit

‎09-20-2017 01:16 AM

Hello,

 

> show version

Hostname: core-nkh-03

Model: mx80

Junos: 13.3R6.5

 

# show interfaces xe-0/0/3 | match ranges | display set | count

Count: 49 lines

 

# show system license

License usage:

                                 Licenses     Licenses    Licenses    Expiry

  Feature name                       used    installed      needed

  subscriber-accounting                 1            1           0    permanent

  subscriber-authentication             0            1           0    permanent

  subscriber-address-assignment         1            1           0    permanent

  subscriber-vlan                       0            1           0    permanent

  subscriber-ip                         0            1           0    permanent

  scale-subscriber                     92         1000           0    permanent

  scale-l2tp                            0         1000           0    permanent

  scale-mobile-ip                       0         1000           0    permanent

  l2tp-inline-lns                       0            1           0    permanent

 

We tested on a different interface on the same router, and a subscriber immediately came up. 

Also bridging the incoming VLAN on the interface to another interface (conected to a different PPPoE server) also works immediately. 

So the issue lies on the interface itself. A week ago all was fine, but now, new subscribers cannot connect anymore.

 

Beelze

 

Highlighted
Routing

Re: Subscriber management VLAN ranges limit

‎09-21-2017 01:05 AM

Hi,

 

Please share the complete interface configuration. Looks like you're above the Vlan-range limit.

13.3R6 is very old code. Better upgrade to 15.1 next generation subscriber management release.


Regards,
Rahul N

Highlighted
Routing

Re: Subscriber management VLAN ranges limit

[ Edited ]
‎09-21-2017 06:58 AM

Hi Rahul,

 

We are above the vlan-range limit? We're planning on upgrading to 15.1 soon, but for now, we need a solution.

 

show interfaces xe-0/0/3 | match ranges | display set | count

Count: 40 lines << has been reduced to 40

 

See the interface + dynamic profile configuration below:

 

show interfaces xe-0/0/3 
description "CUST: KPN 10G interconnect / CID 7754";
flexible-vlan-tagging;
auto-configure {
    vlan-ranges {
        dynamic-profile DYNINTF-VLAN-DHCP-INET-KPN {
            accept [ dhcp-v4 dhcp-v6 ];
            ranges {
                1000-1046;
                1049-1066;
                1068-1071;
                1073-1074;
                1076-1082;
                1084-1084;
                1086-1093;
                1095-1105;
                1107-1110;
                1113-1113;
                1115-1121;
                1123-1124;
                1127-1135;
                1137-1138;
            }
        }
        dynamic-profile DEMUX-Q {
            accept pppoe;
            ranges {
                1047-1048;
                1067-1067;
                1072-1072;
                1075-1075;
                1083-1083;
                1085-1085;              
                1094-1094;
                1106-1106;
                1111-1112;
                1114-1114;
                1122-1122;
                1125-1126;
                1136-1136;
                1139-1999;
            }
        }
    }
    remove-when-no-subscribers;
}
mtu 1530;
encapsulation flexible-ethernet-services;

show dynamic-profiles DEMUX-Q   
interfaces {
    demux0 {
        unit "$junos-interface-unit" {
            demux-source inet;
            proxy-arp;
            vlan-id "$junos-vlan-id";
            demux-options {
                underlying-interface "$junos-interface-ifd-name";
            }
            family inet {
                unnumbered-address lo0.0 preferred-source-address x.x.x.x;
            }
            family pppoe {
                duplicate-protection;
                dynamic-profile PPPoE-SUBSCRIBER;
            }
        }
    }
}


show dynamic-profiles PPPoE-SUBSCRIBER 
predefined-variable-defaults {
    input-filter police-unlimited;
    output-filter police-unlimited;
}
routing-instances {
    "$junos-routing-instance" {
        interface "$junos-interface-name";
        routing-options {
            access {
                route $junos-framed-route-ip-address-prefix {
                    next-hop "$junos-framed-route-nexthop";
                    preference 4;
                }
            }
            access-internal {
                route $junos-subscriber-ip-address {
                    qualified-next-hop "$junos-interface-name";
                }
            }
        }
    }
}
interfaces {
    pp0 {
        unit "$junos-interface-unit" {
            ppp-options {
                pap;
                authentication [ pap chap ];
                mru 1492;
                mtu 1492;
            }
            pppoe-options {
                underlying-interface "$junos-underlying-interface";
                server;
            }
            keepalives interval 60;
            family inet {
                filter {
                    input "$junos-input-filter";
                    output "$junos-output-filter";
                }
                unnumbered-address "$junos-loopback-interface";
            }
        }
    }
}

 

Highlighted
Routing

Re: Subscriber management VLAN ranges limit

‎09-21-2017 08:53 AM

Hi,

 

Vlan-Range is well within the limit.

 

show | display set | match ranges | display set | except pppoe | except accept | count   
Count: 28 lines

 

Regards,
Rahul N

Highlighted
Routing

Re: Subscriber management VLAN ranges limit

‎09-21-2017 09:34 AM

Hi,


Are you seeing the issue after reducing the vlan-range? Please check the below output.

 

show log messages| match exceeded

 

Regards,
Rahul N

Highlighted
Routing

Re: Subscriber management VLAN ranges limit

‎09-22-2017 01:44 AM

Hi Mayar,

 

We are still seeing the same issues after reducing the vlan-ranges limit. And I don't see anything when I issue the command you specify there.

 

Any other interface on the same router rather than the one we're talking about is accepting PPPoE discovery packets. It just stopped accepting them on one day.

 

Beelze

Feedback