我一直在尝试在 MX104 上配置动态订阅者管理,并且也非常成功。我现在面临的问题是,MX 正在侦听并响应 PADI,但是一旦它发送 PADS,它也会发送 PADT,从而终止连接并且 pppoe 统计信息中没有错误。
这是完整的配置:
version 13.3R1.8;
dynamic-profiles {
LE-profile {
interfaces {
pp0 {
unit "$junos-interface-unit" {
ppp-options {
pap;
}
pppoe-options {
underlying-interface "$junos-underlying-interface";
server;
}
keepalives interval 30;
family inet {
filter {
input "$junos-input-filter";
output "$junos-output-filter";
}
unnumbered-address lo0.0;
}
}
}
}
}
}
system {
root-authentication {
encrypted-password "*********************"; ## SECRET-D ATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
ge-0/0/0 {
vlan-tagging;
unit 800 {
encapsulation ppp-over-ether;
vlan-id 800;
pppoe-underlying-options {
dynamic-profile LE-profile;
}
}
unit 900 {
encapsulation ppp-over-ether;
vlan-id 900;
pppoe-underlying-options {
dynamic-profile LE-profile;
}
}
}
fxp0 {
unit 0 {
family inet {
address 10.10.10.10/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 90.90.90.1/32;
}
}
}
}
firewall {
family inet {
filter MONTHLY_4096_OUT {
interface-specific;
term 1 {
then {
policer MONTHLY_4096_POLICER;
accept;
}
}
}
filter MONTHLY_4096_IN {
interface-specific;
term 1 {
then {
policer MONTHLY_256K_POLICER;
accept;
}
}
}
}
policer MONTHLY_4096_POLICER {
if-exceeding {
bandwidth-limit 4m;
burst-size-limit 100k;
}
then discard;
}
policer MONTHLY_256K_POLICER {
if-exceeding {
bandwidth-limit 1m;
burst-size-limit 128k;
}
then discard;
}
}
access {
radius-server {
10.10.10.111 {
secret "*******************"; ## SECRET-DATA
source-address 10.10.10.10;
}
}
profile RAD {
accounting-order radius;
authentication-order radius;
radius {
authentication-server 10.10.10.111;
accounting-server 10.10.10.111;
options {
nas-identifier 10.10.10.10;
}
}
}
address-assignment {
pool VJ-POOL {
family inet {
network 10.170.0.0/15;
range 1 {
low 10.170.0.10;
high 10.171.255.252;
}
dhcp-attributes {
maximum-lease-time 86400;
name-server {
8.8.8.8;
}
router {
10.170.0.1;
}
}
}
}
}
}
请帮忙。
谢谢。
