This article explains how to enable dynamic-profile-options versioning during the subscriber's login/logout process on an MX device.
dynamic-profile-options versioning
A user may want to modify the dynamic profile. Any subscriber that logs in after a dynamic profile modification uses the latest version of the dynamic profile. Subscribers that are already active continue to use the older version of the dynamic profile until they log out or their session terminates. However, after the dynamic profiles are configured, you cannot enable or disable them.
user@MX480-re0# set system dynamic-profile-options versioning {MASTER}[edit] user@MX480-re0# commit re0: error: Cannot modify dynamic-profile-option versioning, dynamic profile is configured. configuration check succeeds re1: error: foreign reconfiguration failed re0: error: remote commit-configuration failed on re1
{MASTER}[edit groups jw-ae-pppoe dynamic-profiles] user@MX480-re0# commit re0: error: Modified profile: pppoe-ae is in use by subscriber error: foreign file propagation (ffp) failed
This procedure includes loading the configuraton back to "factory-default". Take the following steps from the CLI: 1. Save the current configuration:
user@MX480-re0# save 2016-08-30.conf Wrote 135667 lines of configuration to '2016-08-30.conf' user@MX480-re0# run file list /var/home/user/: 2016-08-30.conf
2. Check the subscriber slot or slots:
user@MX480-re0> show subscribers summary slot Interface Count ae0: xe-0 3428 ae0: xe-2 3428
3. Offline the subscriber slot or slots and make sure there are no active subscribers on this device:
user@MX480-re0> request chassis fpc offline slot 0 user@MX480-re0> request chassis fpc offline slot 2 Offline initiated, use "show chassis fpc" to verify user@MX480-re0> show chassis fpc Temp CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Offline ---Offlined by cli command--- 2 Offline ---Offlined by cli command--- user@MX480-re0> show subscribers summary slot Total Subscribers: 0
4. Load the factory-default configuration and commit. Then set the root-authentication password, which is a mandatory configuration.
user@MX480-re0#load factory-default warning: activating factory configuration user@MX480-re0# set system root-authentication plain-text-password New password: Retype new password: user@MX480-re0# set system login user user class super-user user@MX480-re0# commit error: WARNING: Chassis configuration for network services has been changed. A system reboot is mandatory. Please reboot the system NOW. Continuing without a reboot might result in unexpected system behavior. commit complete
Note that the CLI may issue a warning that a reboot is required tied to network-services or subscriber-management. However, the reboot is not necessary. The warning is a byproduct of the change the factory-defaults to allow the dynamic-profile configuration to be removed for the versioning option to be enabled.
5. Load merge the saved configuration. Before load merge saved configuration, the user should be created first. After the user is created, you can find the configuration file. Then, enable versioning and commit.
user@MX480-re0# run file list /var/home/user error: no local user:user user@MX480-re0# set system login user user class super-user user@MX480-re0# commit user@MX480-re0# load merge 2016-08-30.conf load complete user@MX480-re0# set system dynamic-profile-options versioning user@MX480-re0# commit re0: warning: uid changed for labroot (2000->2012) configuration check succeeds re1: commit complete re0: commit complete
6. Check the configuration status since the saved configuration has no "fpc power off" knob. After commit, those offline FPC will be online automatically.
user@MX480-re0# run show subscribers summary slot Interface Count ae0: xe-0 4991 ae0: xe-2 4991 Total Subscribers: 4991