No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Configuration Guide - User Access 01

This is NE40E V800R010C10SPC500 Configuration Guide - User Access
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring Rate Limiting for PPPoEv4 Access

Example for Configuring Rate Limiting for PPPoEv4 Access

This section provides an example for configuring PPPoEoVLAN access for IPv4 users.

Networking Requirements

On the network shown in Figure 7-10, subscriber1 belongs to VLAN1, and subscriber2 belongs to VLAN2. The network-side interface on the router is GE 1/0/1. To allow subscriber1 and subscriber2 to use IPv4 addresses to go online, configure PPPoEoVLAN access. The requirements are as follows:
  • Subscribers belong to domain isp1 and use PPPoEoVLAN to go online through GE 1/0/2.1 on the router. The LAN switch marks the priorities of user packets from VLAN1 and VLAN2.

  • RADIUS authentication and accounting are used.

  • The IP address of the RADIUS server is 192.168.7.249. The authentication port number is 1645, and the accounting port number is 1646. RADIUS+1.1 is used, with the password hello .

  • The IP address of the DNS server is 192.168.7.252.

Figure 7-10 Networking for configuring PPPoEoVLAN access for IPv4 users
NOTE:
Interfaces 1 and 2 in this example are GE1/0/1 and GE1/0/2.1, respectively.


Configuration Roadmap

  1. Configure a VT.

  2. Configure AAA schemes.

  3. Configure a RADIUS server group.

  4. Configure an IPv4 address pool.

  5. Configure a domain.

  6. Bind the VT to a sub-interface.

  7. Configure a BAS interface.

Data Preparation

  • VT number
  • Authentication and accounting schemes and their names
  • RADIUS server group name and server address
  • DNS server address
  • User domain
  • BAS interface parameters

Procedure

  1. Configure a VT.

    <HUAWEI> system-view
    [~HUAWEI] interface virtual-template 1
    [*HUAWEI-Virtual-Template1] ppp authentication-mode chap
    [*HUAWEI-Virtual-Template1] quit
    [*HUAWEI] commit

  2. Configure an authentication scheme.

    [~HUAWEI] aaa
    [*HUAWEI-aaa] authentication-scheme auth1
    [*HUAWEI-aaa-authen-auth1] authentication-mode radius
    [*HUAWEI-aaa-authen-auth1] quit
    [*HUAWEI] commit

  3. Configure an accounting scheme.

    [~HUAWEI-aaa] accounting-scheme acct1
    [*HUAWEI-aaa-accounting-acct1] accounting-mode radius
    [*HUAWEI-aaa-accounting-acct1] quit
    [*HUAWEI-aaa] quit
    [*HUAWEI] commit

  4. Configure a RADIUS server group.

    [~HUAWEI] radius-server group rd1
    [*HUAWEI-radius-rd1] radius-server authentication 192.168.7.249 1645
    [*HUAWEI-radius-rd1] radius-server accounting 192.168.7.249 1646
    [*HUAWEI-radius-rd1] radius-server type plus11
    [*HUAWEI-radius-rd1] radius-server shared-key-cipher hello 
    [*HUAWEI-radius-rd1] quit
    [*HUAWEI] commit

  5. Configure an address pool.

    [~HUAWEI] ip pool pool1 bas local
    [*HUAWEI-ip-pool-pool1] gateway 10.82.0.1 255.255.255.0
    [*HUAWEI-ip-pool-pool1] commit
    [~HUAWEI-ip-pool-pool1] section 0 10.82.0.2 10.82.0.200
    [*HUAWEI-ip-pool-pool1] dns-server 192.168.7.252
    [*HUAWEI-ip-pool-pool1] quit
    [*HUAWEI] commit

  6. Configure a domain named isp1.

    [~HUAWEI] aaa
    [~HUAWEI-aaa] domain isp1
    [*HUAWEI-aaa-domain-isp1] authentication-scheme auth1
    [*HUAWEI-aaa-domain-isp1] accounting-scheme acct1
    [*HUAWEI-aaa-domain-isp1] radius-server group rd1
    [*HUAWEI-aaa-domain-isp1] commit
    [~HUAWEI-aaa-domain-isp1] ip-pool pool1
    [*HUAWEI-aaa-domain-isp1] commit
    [~HUAWEI-aaa-domain-isp1] quit
    [~HUAWEI-aaa] quit
    [~HUAWEI] commit

  7. Configure user VLANs on the sub-interface and bind the VT to it.

    # Configure user VLANs on GE 1/0/2.1 and bind the VT to it.

    [~HUAWEI] interface gigabitethernet 1/0/2.1
    [*HUAWEI] commit
    [~HUAWEI-GigabitEthernet1/0/2.1] user-vlan 1 2
    [*HUAWEI-GigabitEthernet1/0/2.1-vlan-1-2] quit
    [*HUAWEI-GigabitEthernet1/0/2.1] pppoe-server bind virtual-template 1
    [*HUAWEI] commit

  8. Configure a BAS interface.

    [~HUAWEI-GigabitEthernet1/0/2.1] bas
    [*HUAWEI-GigabitEthernet1/0/2.1-bas] access-type layer2-subscriber
    [*HUAWEI-GigabitEthernet1/0/2.1-bas] authentication-method ppp
    [*HUAWEI-GigabitEthernet1/0/2.1-bas] quit
    [*HUAWEI-GigabitEthernet1/0/2.1] quit
    [*HUAWEI] commit
    NOTE:

    In this example, users go online with the domain name isp1 being carried in the user name. Therefore, the BAS interface does not need to have any authentication domain configured. If users go online without the domain name being carried in the user name, you must specify an authentication domain on the BAS interface.

  9. Configure rate limiting for PPPoEv4 access.

    [~HUAWEI] qos-profile 10M
    [*HUAWEI-qos-profile-10M] car cir 1024 cbs 1024000 green pass red discard
    [*HUAWEI-qos-profile-10M] commit
    [~HUAWEI-qos-profile-10M] quit
    [~HUAWEI] interface gigabitethernet 1/0/2.1
    [~HUAWEI-GigabitEthernet1/0/2.1] bas
    [*HUAWEI-GigabitEthernet1/0/2.1-bas] qos-profile 10M inbound 
    [*HUAWEI-GigabitEthernet1/0/2.1-bas] qos-profile 10M outbound 
    [*HUAWEI-GigabitEthernet1/0/2.1-bas] commit 
    [~HUAWEI-GigabitEthernet1/0/2.1-bas] quit

  10. Verify the configuration.

    # Check information about the address pool named pool1. The command output shows that the gateway address is 10.82.0.1, the addresses in the pool range from 10.82.0.2 to 10.82.0.200, and the DNS server address is 192.168.7.252.

    <HUAWEI> display ip pool name pool1
    Pool-Name      : pool1
      Pool-No        : 0  Pool-constant-index :- 
      Lease          : 3 Days 0 Hours 0 Minutes
      NetBois Type   : N-Node
      DNS-Suffix     : -
    
      DNS1         :192.168.7.252
      Position       : Local           Status           : Unlocked
      Gateway        : 10.82.0.1       Mask             : 255.255.0.0
      Vpn instance   : --
      Profile-Name   : -               Server-Name      : -
      Codes: CFLCT(conflicted)
      ---------------------------------------------------------------------------
      ID           start             end total      used  idle CFLCT disable reserved
      ---------------------------------------------------------------------------
       0           10.82.0.2         10.82.0.200    98     0    98     0       0        0
      --------------------------------------------------------------------------- 

    # Check information about the domain named isp1. The command output shows that the address pool named pool1 is bound to the domain.

    <HUAWEI> display domain isp1
    ------------------------------------------------------------------------------
      Domain-name                     : isp1
      Domain-state                    : Active
      Authentication-scheme-name      : auth1
      Accounting-scheme-name          : acct1
      Authorization-scheme-name       :
      Primary-DNS-IP-address          : -
      Second-DNS-IP-address           : -
      Web-server-URL-parameter        : No
      Slave Web-IP-address            : -
      Slave Web-URL                   : -
      Slave Web-auth-server           : - 
      Slave Web-auth-state            : - 
      Portal-server-URL-parameter     : No
      Primary-NBNS-IP-address         : -
      Second-NBNS-IP-address          : -
      User-group-name                 : -
      Idle-data-attribute (time,flow) : 0, 60
      Install-BOD-Count               : 0
      Report-VSM-User-Count           : 0
      Value-added-service             : COPS
      User-access-limit               : 279552
      Online-number                   : 0
      Web-IP-address                  : -
      Web-URL                         : -
      Portal-server-IP                : -
      Portal-URL                      : -
      Portal-force-times              : 2
      PPPoE-user-URL                  : Disable
      IPUser-ReAuth-Time(second)      : 300
      mscg-name-portal-key            : -
      Portal-user-first-url-key       : -
      Ancp auto qos adapt             : Disable
      Service-type                    : STB
      RADIUS-server-template          : rd5
      Two-acct-template               : -
      HWTACACS-server-template        : -
      Bill Flow                       : Disable
      Tunnel-acct-2867                : Disabled
    
      Flow Statistic:
      Flow-Statistic-Up               : Yes
      Flow-Statistic-Down             : Yes
      Source-IP-route                 : Disable
      IP-warning-threshold            : -
      IPv6-warning-threshold          : - 
      Multicast Forwarding            : Yes
      Multicast Virtual               : No
      Max-multilist num               : 4
      Multicast-profile               : -
      Multicast-profile ipv6          : -
      IP-address-pool-name            : pool1
      Quota-out                     : Offline
      Service-type                    : -
      User-basic-service-ip-type      : -/-/-
      PPP-ipv6-address-protocol       : Ndra
      IPv6-information-protocol       : Stateless dhcpv6
      IPv6-PPP-assign-interfaceid     : Disable
      Trigger-packet-wait-delay       : 60s
      Peer-backup                     : enable    
      ------------------------------------------------------------------------------
    

    # Check online connection information based on a specified domain name.

    <HUAWEI> display access-user domain isp1 verbose
    ------------------------------------------------------------------------------
    Basic:                                                                                                                              
      User access index             : 8192                                                                                              
      State                         : Used                                                                                              
      User name                     : ceshi9                                                                                            
      Domain name                   : pppoe-bohao                                                                                       
      User backup state             : No                                                                                                
      RUI user state                : -                                                                                                 
      User access interface         :  GigabitEthernet1/0/2.1                                                                         
      User access PeVlan/CeVlan     : 2004/-                                                                                            
      User access slot              : 0                                                                                                 
      User MAC                      : 507b-9d31-d8c2                                                                                    
      User IP address               : 10.144.254.250                                                                                    
      User IP netmask               : 255.255.255.255                                                                                   
      User gateway address          : 10.144.254.241                                                                                    
      User Primary-DNS              : 103.44.168.6                                                                                      
      User Secondary-DNS            : 103.44.168.7                                                                                      
      User Authen IP Type           : ipv4/-/-                                                                                          
      User Basic IP Type            : -/-/-                                                                                             
      User access type              : PPPoE                                                                                             
      User authentication type      : PPP authentication                                                                                
      Agent-Circuit-Id              : -                                                                                                 
      Agent-Remote-Id               : -                                                                                                 
      Access-line-id Information(pppoe+): -                                                                                             
      Access start time             : 2018-01-10 11:24:52                                                                               
      User-Group                    : -                                                                                                 
      Next-hop                      : -                                                                                                 
      Policy-route-IPV6-address     : -                                                                                                 
                                                                                                                                        
    AAA:                                                                                                                                
      RADIUS-server-template        : pppoe                                                                                             
      Server-template of second acct: -                                                                                                 
      Current authen method         : RADIUS authentication                                                                             
      Authen result                 : Success                                                                                           
      Current author method         : Idle                                                                                              
      Author result                 : Success                                                                                           
      Action flag                   : Idle                                                                                              
      Authen state                  : Authed                                                                                            
      Author state                  : Idle                                                                                              
      Configured accounting method  : No accounting                                                                                     
      Quota-out                     : Offline                                                                                           
      Current accounting method     : No accounting                                                                                     
      Realtime-accounting-switch            : Close                                                                                     
      Realtime-accounting-interval(sec)     : -                                                                                         
      Realtime-accounting-send-update       : No                                                                                        
      Realtime-accounting-traffic-update    : No                                                                                        
      Accounting start time         : 2018-01-10 11:24:52                                                                               
      Online time (h:min:sec)       : 00:00:02                                                                                          
      Accounting state              : Ready                                                                                             
      MTU                           : 1280                                                                                              
      MRU                           : 1280                                                                                              
      Session time limit            : 86400 second(Radius)                                                                              
      Time remained(s)              : 86398(s)                                                                                          
      Idle-cut direction            : Both                                                                                              
      Idle-cut-data (time,rate,idle): 14400 sec, 60 kbyte/min, 0 min 0 sec(Radius)                                                      
      Ipv4 Realtime speed           : 104 kbyte/min                                                                                     
      Ipv4 Realtime speed inbound   : 104 kbyte/min                                                                                     
      Ipv4 Realtime speed outbound  : 0 kbyte/min                                                                                       
                                                                                                                                        
    Dot1X:                                                                                                                              
      User MSIDSN name              : -                                                                                                 
      EAP user                      : No                                                                                                
      MD5 end                       : No                                                                                                
                                                                                                                                        
    VPN&Policy-route:                                                                                                                   
      Vpn-Instance                  : -                                                                                                 
                                                                                                                                        
    Multicast Service:                                                                                                                  
      Multicast-profile             : -                                                                                                 
      Multicast-profile-ipv6        : -                                                                                                 
      Max Multicast List Number     : 4                                                                                                 
      IGMP enable                   : Yes                                                                                               
                                                                                                                                        
    ACL&QoS:                                                                                                                            
      Inbound Family-profile-name   : 1M                                                                                                
      Outbound Family-profile-name  : 1M                                                                                                
      Inbound family qos configuration     : User-CAR                                                                                   
      Inbound cir                   : 1024(kbps)                                                                                        
      Inbound pir                   : 0(kbps)                                                                                           
      Inbound cbs                   : 1024000(bytes)                                                                                    
      Inbound pbs                   : 0(bytes)                                                                                          
      Outbound family qos configuration    : User-CAR                                                                                   
      Outbound cir                  : 1024(kbps)                                                                                        
      Outbound pir                  : 0(kbps)                                                                                           
      Outbound cbs                  : 1024000(bytes)                                                                                    
      Outbound pbs                  : 0(bytes)                                                                                          
      Inbound qos configuration     : User-CAR                                                                                          
      Inbound cir                   : 15729(kbps)(Radius)                                                                               
      Inbound pir                   : 0(kbps)                                                                                           
      Inbound cbs                   : 2941323(bytes)                                                                                    
      Inbound pbs                   : 0(bytes)                                                                                          
      Outbound qos configuration    : User-CAR                                                                                          
      Outbound cir                  : 15729(kbps)(Radius)                                                                               
      Outbound pir                  : 0(kbps)                                                                                           
      Outbound cbs                  : 2941323(bytes)                                                                                    
      Outbound pbs                  : 0(bytes)                                                                                          
      Link bandwidth auto adapt     : Disable                                                                                           
      UpPriority                    : Unchangeable                                                                                      
      DownPriority                  : Unchangeable                                                                                      
                                                                                                                                        
    Flow Statistic:                                                                                                                     
      If flow info contain l2-head  : Yes                                                                                               
      Flow-Statistic-Up             : Yes                                                                                               
      Flow-Statistic-Down           : Yes                                                                                               
      Up packets number(high,low)   : (0,17)                                                                                            
      Up bytes number(high,low)     : (0,2320)                                                                                          
      Down packets number(high,low) : (0,9)                                                                                             
      Down bytes number(high,low)   : (0,2909)                                                                                          
      IPV6 Up packets number(high,low)     : (0,0)                                                                                      
      IPV6 Up bytes number(high,low)       : (0,0)                                                                                      
      IPV6 Down packets number(high,low)   : (0,0)                                                                                      
      IPV6 Down bytes number(high,low)     : (0,0)                                                                                      
                                                                                                                                        
    Dslam information :                                                                                                                 
      Circuit ID                       :-                                                                                               
      Remote ID                        :-                                                                                               
      Actual datarate upstream         :0(Kbps)                                                                                         
      Actual datarate downstream       :0(Kbps)                                                                                         
      Min datarate upstream            :0(Kbps)                                                                                         
      Min datarate downstream          :0(Kbps)                                                                                         
      Attainable datarate upstream     :0(Kbps)                                                                                         
      Attainable datarate downstream   :0(Kbps)                                                                                         
      Max datarate upstream            :0(Kbps)                                                                                         
      Max datarate downstream          :0(Kbps)                                                                                         
      Min lowpower datarate upstream   :0(Kbps)                                                                                         
      Min lowpower datarate downstream :0(Kbps)                                                                                         
      Max delay upstream               :0(s)                                                                                            
      Max delay downstream             :0(s)                                                                                            
      Actual delay upstream            :0(s)                                                                                            
      Actual delay downstream          :0(s)                                                                                            
      Access loop encapsulation        :0x000000    
    

Configuration Files

#
sysname HUAWEI
#
radius-server group rd1
radius-server authentication 192.168.7.249 1645 weight 0
radius-server accounting 192.168.7.249 1646 weight 0
radius-server shared-key-cipher %^%#vS%796FO7%C~pB%CR=q;j}gSCqR-X6+P!.DYI@)%^% 
radius-server type plus11
#
interface Virtual-Template1
 ppp authentication-mode chap
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/2.1
 pppoe-server bind Virtual-Template 1
 user-vlan 1 2
 bas
 access-type layer2-subscriber
 authentication-method ppp
 qos-profile 10M inbound
 qos-profile 10M outbound
#
qos-profile 10M
car cir 1024 cbs 1024000 green pass red discard
#
interface GigabitEthernet1/0/1
 ip address 192.168.7.1 255.255.255.0
#
ip pool pool1 bas local
gateway 10.82.0.1 255.255.255.0
section 0 10.82.0.2 10.82.0.200
dns-server  192.168.7.252
#
aaa
 authentication-scheme  auth1
 accounting-scheme  acct1
 domain  default0
 domain  default1
 domain  default_admin
 domain  isp1
  authentication-scheme   auth1
  accounting-scheme   acct1
  radius-server group  rd1
  ip-pool   pool1
#
return
Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055031

Views: 17773

Downloads: 72

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next