Nat444 Gateway Unified With Bras Device Configuration Example - HPE FlexNetwork HSR6800 Configuration Manual

# Verify that a NAT444 mapping has been created for the DS-Lite host.
[Router] display nat port-block dynamic ds-lite-b4
Local VPN
---
Total entries found: 1
NAT444 gateway unified with BRAS device configuration
example
Network requirements
As shown in
router acts as the BRAS device and NAT444 gateway. Configure PPPoE server and NAT444 on the
router to meet the following requirements:
•
The PPPoE server cooperates with the RADIUS server to authenticate the host by using CHAP,
and assigns a private IP address to the host.
•
The PPPoE server uses shared key expert for secure RADIUS communication, and sends
usernames with domain names to the RADIUS server.
•
NAT444 cooperates with BRAS, and assigns a public IP address and a port block after the host
passes authentication and obtains a private IP address.
Figure 71 Network diagram
Configuration procedure
1. Configure the RADIUS server (details not shown):
# Set the shared key for secure communication to expert.
# Add a user account and password for the PPP users connected to the router.
2. Configure the router:
# Create RADIUS scheme rad.
<Router> system-view
[Router] radius scheme rad
# Specify the IP address of the primary accounting server and the primary authentication server
as 10.0.0.1, and the service port of the primary authentication server as 1812.
[Router-radius-rad] primary accounting 10.0.0.1
[Router-radius-rad] primary authentication 10.0.0.1 1812
# Set the shared key to plaintext expert for secure communication.
[Router-radius-rad] key authentication simple expert
# Include domain names in the usernames sent to the RADIUS server.
[Router-radius-rad] user-name-format with-domain
[Router-radius-rad] quit
DS-Lite B4 addr
1::1
Figure 71, the host, a PPPoE client, is connected to the Internet through the router. The
Global IP Port block
20.1.1.11 1024-1323
170
Connections
1