No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FAQ-When the RADIUS Server Is Enabled with the Function of Checking Port Binding, How Can Services Be Fastest Restored When the ME60 Needs to Replace a Port

Publication Date:  2012-07-27 Views:  34 Downloads:  0
Issue Description
Q:
If the hardware of the ME60 is faulty or other faults occur on the ME60, you need to switch services to other interfaces; however, the RADIUS server is enabled with the function of checking the port binding based on the NAS port IDs. In this case, to replace a port, the RADIUS server needs to check the unbinding. If the server is busy, the unbinding process takes a long time. As a result, services cannot be restored. Then, how can the services be restored fastest? 
 
Alarm Information
Null
Handling Process

A:
You can restore the services by configuring logical interfaces.
For example, run the following commands in slot 3 that run the services originally:
[ME60-Ethernet3/0/6.6]disp this
#
interface Ethernet3/0/6.6
pppoe-server bind Virtual-Template 1
user-vlan 6
bas
access-type layer2-subscriber default-domain pre-authentication cheb
Then, the packets sent by the BAS to the RADIUS server contains the following information:
[NAS-Port-Id(87) ] [30] [eth 3/0/6:4096.6 0/0/0/0/0/0]
Now, you need to switch the services to slot 1 and configure a logical interface. This ensures that the NAS port ID sent to the RADIUS server does not change. Run the following commands on the interface:
[ME60-Ethernet1/0/6.6]disp this
#
interface Ethernet1/0/6.6
pppoe-server bind Virtual-Template 1
user-vlan 6
bas
access-type layer2-subscriber default-domain pre-authentication cheb
nas logic-port Ethernet 3/0/0 
 

suggestion:Configure a logical interface to prevent the binding check on an interface. This method is used to restore services in emergencies. Later, you can switch the services to the original port at suitable time. You need to configure a logical interface on each BAS interface. To switch services to different ME60 devices, you need to run the logic-sysname command to ensure that the names of the devices are the same.

After configuring logical interfaces on the BAS interfaces, perform the following actions:
Names of users configured with pre-authentication and users configured with binding authentication are generated by the logical interface.
The Option82 information of users is generated by the logical interface.
NAS ports and NAS port IDs used for RADIUS authentication are generated by the logical interface. 
 

Root Cause
Null
Suggestions

Null

END