No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S12700 V200R011C10 Configuration Guide - User Access and Authentication

This document describes the working mechanisms, configuration procedures, and configuration examples of User Access and Authentication features, such as AAA, DAA, NAC, PPPoE, Policy Association, and IP session.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for PPPoE

Licensing Requirements and Limitations for PPPoE

Involved Network Elements

Table 7-1  Components involved in PPPoE networking

Role

Product Model

Description

AAA server

Huawei servers or third-party AAA servers

Performs authentication, accounting, and authorization on users.

NOTE:

When Huawei's Agile Controller-Campus functions as the server, the version required is V100R001, V100R002, V100R003.

If a Huawei switch needs to function as a DHCP server and assign IP addresses to terminals based on the static MAC-IP binding relationship delivered by the Agile Controller-Campus, the switch must run V200R009C00 or a later version, and the Agile Controller-Campus must run V100R002 or V100R003 version.

Licensing Requirements

A PPPoE resource License is available to extend the number of PPPoE access users. By default, the device supports 256 PPPoE users. You can load the License to extend the number of PPPoE access users.

For details about how to apply for a license, see S Series Switch License Use Guide.

Version Requirements

Table 7-2  Products and versions supporting PPPoE

Product

Product Model

Software Version

S12700

S12708, S12712

V200R005C00, V200R006C00, V200R007C00, V200R007C20, V200R008C00, V200R009C00, V200R010C00, V200R011C10

S12710

V200R010C00, V200R011C10

S12704

V200R008C00, V200R009C00, V200R010C00, V200R011C10

NOTE:
To know details about software mappings, see Hardware Query Tool.

Feature Limitations

  • The switch can function only as a PPPoE server, can have PPPoE configured only on the VLANIF interfaces of X series cards, and allows only wired IPv4 users to access using PPPoE. When users use Windows 7 or later as the PPPoE client to access, to prevent the access speed from being affected, do not select the IPv6 option of the client network connection attribute.
  • The XGE interface connected to ET1D2IPS0S00, ET1D2FW00S00, ET1D2FW00S01, or ET1D2FW00S02 does not support PPPoE.
  • PPPoE cannot be used together with super VLAN, VLAN mapping, or VLAN stacking.
  • PPPoE users cannot be bound to VPN instance, and do not support NetStream, IP Multicast, and QinQ.
  • The address delivered by RADIUS server must be in the same subnet with the VT interface address.
  • After Portal authentication and MAC address authentication are configured on a VLANIF interface, PPPoE authentication cannot be configured on the interface.

  • The number of PPPoE authentication access users is limited by route specifications and cannot exceed the upper limit. It is recommended that the route specifications on the network be greater than the PPPoE user specifications on the device.

  • In versions earlier than V200R009C00, when the device uses the IP address negotiation function of PPP to allocate IP addresses to users, it determines IP addresses to be allocated based on the users' MAC addresses. In V200R009C00 and later versions, the device determines IP addresses to be allocated based on the users' MAC addresses and session IDs in the PPP negotiation stage. If a user goes online twice, the generated session IDs may be different. As a result, the device may allocate a different IP address to the user each time the user goes online.

Translation
Download
Updated: 2019-10-21

Document ID: EDOC1000178117

Views: 124143

Downloads: 59

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next