Access profiles

An access profile is a template for subscribers’ network settings: which IP pool they draw an address from, and their session and idle timeouts. Instead of entering these settings for every subscriber, you create one profile such as “Residential PPPoE” and apply it to services.

Plan, profile, or static IP?

This…	…answers	…and is set in
Plan	What did the customer buy? Speed, quota, term, price	Plans
Access profile	How is the service placed on the network? Default pool, timeouts	This page
Static IP	Does this one subscriber need a fixed address?	The service’s Addressing tab — IP pools

Create a profile

1. Go to Network → Access profiles and select New access profile.
2. Enter a Code (lowercase letters, numbers, - or _; it cannot be changed later), a Name, and optionally a description.
3. Optionally choose a Default IPv4 pool. The pool must already exist and not be archived.
4. Session timeout and Idle timeout are optional.
5. Select Create access profile.

Note

Session and idle timeouts are only saved for now and are not enforced on the network yet. Do not rely on them to close long or idle sessions.

Draft and publish

Each profile has a Draft and one or more published revisions. You make changes on the Draft tab and publish them once reviewed. Only a published revision can be applied to services.

Apply it to a service

1. On the subscriber’s service page, open Edit service → the Access profile tab.
2. Choose the profile and select Apply profile.

Applying pins that revision’s settings to the service.

Five things to know

1. Changing a profile does not reach existing subscribers. If you change a profile’s pool and publish a new revision, subscribers who already have the profile keep the old revision until you apply the profile to their service again. This is deliberate, so one edit cannot re-address thousands of subscribers at once.
2. A static IP always wins. If a service has a fixed address, the profile does not replace it.
3. A subscriber’s pool cannot change while they are online. Disconnect the session or wait for it to end, then apply.
4. Clear profile removes the profile link and timeouts but keeps the service’s addressing.
5. Disable stops the profile being applied to new services; services that already have it are unaffected.