configured threshold, the device discards the excessive requests, and outputs log messages. If the
blocking time is set to 0, the device does not block any requests, and it only outputs log messages.
The device uses a monitoring table and a blocking table to control PPP access rates:
•
Monitoring table—Stores a maximum of 8000 monitoring entries. Each entry records the
number of PPPoE sessions created by a user within the monitoring time. When the monitoring
entries reach the maximum, the system stops monitoring and blocking session requests from
new users. The aging time of monitoring entries is determined by the session-request-period
argument. When the timer expires, the system starts a new round of monitoring for the user.
•
Blocking table—Stores a maximum of 8000 blocking entries. The system creates a blocking
entry if the access rate of a user reaches the threshold, and blocks requests from that user.
When the blocking entries reach the maximum number, the system stops blocking session
requests from new users and it only outputs log messages. The aging time of the blocking
entries is determined by the blocking-period argument. When the timer expires, the system
starts a new round of monitoring for the user.
If the access rate setting is changed, the system removes all monitoring and blocking entries, and
uses the new settings to limit PPPoE access rates.
To limit the PPPoE access rate:
Step
1.
Enter system view.
2.
Enter
interface/subinterface, Layer
3
interface/subinterface, VLAN
interface, Layer 3 aggregate
interface/subinterface,
VE-L3VPN
interface/subinterface,
EFM interface/subinterface
view.
3.
Set the PPPoE access limit.
4.
Display information about
blocked users (centralized
devices
mode).
5.
Display information about
blocked users (distributed
devices
mode/centralized
devices in IRF mode).
6.
Display information about
blocked users (distributed
devices in IRF mode).
Configuring the nas-port-id attribute
The PPPoE server on a BAS device uses the RADIUS nas-port-id attribute to send the access line ID
received from a DSLAM device to the RADIUS server. The access line ID includes the circuit-id and
Command
system-view
Layer
3
Ethernet
virtual
Ethernet
interface
interface-number
or
pppoe-server throttle per-mac
session-requests
session-request-period
blocking-period
display
throttled-mac
in
standalone
interface-type interface-number ]
display
throttled-mac { slot slot-number |
in
standalone
interface
IRF
interface-number }
display
throttled-mac
chassis-number slot slot-number |
interface
interface-number }
interface-type
pppoe-server
[
interface
pppoe-server
interface-type
pppoe-server
{
chassis
interface-type
48
Remarks
N/A
The PPPoE server is enabled on
the interface.
By default, the PPPoE access
rate is not limited.
Available in any view.
Available in any view.
Available in any view.
Need help?
Do you have a question about the FlexNetwork MSR series and is the answer not in the manual?