This article explains how to enable dynamic-profile-options versioning during the subscriber's login/logout process on an MX device.
A user may want to modify the dynamic profile. Any subscriber that logs in after a dynamic profile modification uses the latest version of the dynamic profile. Subscribers that are already active continue to use the older version of the dynamic profile until they log out or their session terminates. However, after the dynamic profiles are configured, you cannot enable or disable them.
Example:
user@MX480-re0# set system dynamic-profile-options versioning
{MASTER}[edit]
user@MX480-re0# commit
re0:
error: Cannot modify dynamic-profile-option versioning, dynamic profile is configured.
configuration check succeeds
re1:
error: foreign reconfiguration failed
re0:
error: remote commit-configuration failed on re1
Under the operational MX device, dynamic-profile has been configured and it is in use by the subscriber. For this reason, after deleting dynamic profile related configuration, "commit" will still failed.
{MASTER}[edit groups jw-ae-pppoe dynamic-profiles]
user@MX480-re0# commit
re0:
error: Modified profile: pppoe-ae is in use by subscriber
error: foreign file propagation (ffp) failed
This procedure includes loading the configuraton back to "factory-default". Take the following steps from the CLI:
1. Save the current configuration:
user@MX480-re0# save 2016-08-30.conf
Wrote 135667 lines of configuration to '2016-08-30.conf'
user@MX480-re0# run file list
/var/home/user/:
2016-08-30.conf
2. Check the subscriber slot or slots:
user@MX480-re0> show subscribers summary slot
Interface Count
ae0: xe-0 3428
ae0: xe-2 3428
3. Offline the subscriber slot or slots and make sure there are no active subscribers on this device:
user@MX480-re0> request chassis fpc offline slot 0
user@MX480-re0> request chassis fpc offline slot 2
Offline initiated, use "show chassis fpc" to verify
user@MX480-re0> show chassis fpc
Temp CPU Utilization (%) Memory Utilization (%)
Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
0 Offline ---Offlined by cli command---
2 Offline ---Offlined by cli command---
user@MX480-re0> show subscribers summary slot
Total Subscribers: 0
4. Load the factory-default configuration and commit. Then set the root-authentication password, which is a mandatory configuration.
user@MX480-re0#load factory-default
warning: activating factory configuration
user@MX480-re0# set system root-authentication plain-text-password
New password:
Retype new password:
user@MX480-re0# set system login user user class super-user
user@MX480-re0# commit
error: WARNING: Chassis configuration for network services has been changed. A system reboot is mandatory. Please reboot the system NOW. Continuing without a reboot might result in unexpected system behavior.
commit complete
Note that the CLI may issue a warning that a reboot is required tied to network-services or subscriber-management. However, the reboot is not necessary. The warning is a byproduct of the change the factory-defaults to allow the dynamic-profile configuration to be removed for the versioning option to be enabled.
5. Load merge the saved configuration. Before load merge saved configuration, the user should be created first. After the user is created, you can find the configuration file. Then, enable versioning and commit.
user@MX480-re0# run file list /var/home/user
error: no local user:user
user@MX480-re0# set system login user user class super-user
user@MX480-re0# commit
user@MX480-re0# load merge 2016-08-30.conf
load complete
user@MX480-re0# set system dynamic-profile-options versioning
user@MX480-re0# commit
re0:
warning: uid changed for labroot (2000->2012)
configuration check succeeds
re1:
commit complete
re0:
commit complete
6. Check the configuration status since the saved configuration has no "fpc power off" knob. After commit, those offline FPC will be online automatically.
user@MX480-re0# run show subscribers summary slot
Interface Count
ae0: xe-0 4991
ae0: xe-2 4991
Total Subscribers: 4991