Routing
Highlighted
Routing

can i have two dynamic profiles configured on the same MX-480 ?

06.19.17   |  
‎06-19-2017 03:45 AM

Hi All,

 

Am trying setup second dynamic profile and second access profile on juniper MX-480 router. below is the profiles setup. 

 

production {
    interfaces {
        pp0 {
            unit "$junos-interface-unit" {
                no-traps;
                ppp-options {
                    chap;
                    pap;
                }
                pppoe-options {
                    underlying-interface "$junos-underlying-interface";
                    server;
                }
                family inet {
                    filter {
                        input PEERAPP_PPP_UP;
                    }
                    unnumbered-address lo0.0;
                }
            }
        }
    }
    inactive: class-of-service {
        traffic-control-profiles {
            100M {
                shaping-rate 50m;
            }
        }
        interfaces {
            pp0 {
                unit "$junos-interface-unit" {
                    output-traffic-control-profile 100M;
                }
            }
        }
    }
}
TEST {
    interfaces {
        pp0 {
            unit "$junos-interface-unit" {
                no-traps;
                ppp-options {
                    chap;
                    pap;
                }
                pppoe-options {
                    underlying-interface "$junos-underlying-interface";
                    server;
                }
                family inet {
                    filter {
                        input "$junos-input-filter";
                        output "$junos-output-filter";
                    }
                    unnumbered-address lo0.0;
                }
            }
        }
    }
}

and here is the access profile setup.

 

radius-server {
12.12.12.12 {
secret "$9$92pJCOREcyrK8RheWx7s"; ## SECRET-DATA
source-address 1.1.1.1;
}
}
profile PRODUCTION { accounting-order radius; authentication-order radius; radius { authentication-server 12.12.12.12.; accounting-server 12.12.12.12; attributes { ignore { output-filter; input-filter; } } } accounting { order radius; accounting-stop-on-failure; accounting-stop-on-access-deny; immediate-update; coa-immediate-update; update-interval 10; statistics volume-time; } } profile TEST { accounting-order radius; authentication-order radius; radius { authentication-server 12.12.12.12.; accounting-server 12.12.12.12; } accounting { order radius; accounting-stop-on-failure; accounting-stop-on-access-deny; immediate-update; coa-immediate-update; update-interval 15; statistics volume-time; } } address-assignment { pool production { family inet { network 10.10.10.0/24; range all { low 10.10.10.5; high 10.10.10.250; } host ms_228 { hardware-address f4:f2:6d:fd:85:8d; ip-address 10.10.10.25; } }

 

Underlying-interface linking...

 

 

re0# show interfaces ge-1/0/9
flexible-vlan-tagging;
mtu 9000;
gigether-options {
    auto-negotiation;
}

unit 123 {
    description PRODUCTION;
    encapsulation ppp-over-ether;
    vlan-id 123;
    pppoe-underlying-options {
        access-concentrator PRODUCTION;
        dynamic-profile PRODUCTION;
    }
}
unit 1011 {
    description TEST;
    encapsulation ppp-over-ether;
    vlan-id 1011;
    pppoe-underlying-options {
        access-concentrator TEST;
        dynamic-profile TEST;
    }
}

 everything under PRODUCTION setup (both dynamic profile and access concentrator) is working. 

 

when clients dial-in they get this error:

 

Error 734: the PPP lick control protocal was terminated. 

 

could it be that am using pp0 interface under both profiles ??

 

 

Apreciate your help.

Thanks