HPE FlexNetwork MSR series Configuration Manual page 67

•
The PPPoE server uses the RADIUS server to perform authentication, authorization, and
accounting for access users
•
The RADIUS server assigns access users a PPP address pool named pool1 and a VPN
instance named vpn1.
•
Users in vpn1 obtain IP addresses from PPP address pool pool1.
Figure 15 Network diagram
VPN 1
Host A
PPPoE client
Gateway:1.1.1.1/24
Configuration procedure
1. Configure the MPLS L3VPN feature.
For the two ends of VPN 1 to communicate with each other, specify the same route target
attributes on the two PEs (Router A and Router B). This example describes only the
authentication-related configuration on the PE that is connected to the PPPoE client. For
information about configuring MPLS L3VPN, see MPLS Configuration Guide.
2. Configure the RADIUS server:
This example uses Free RADIUS that runs in the Linux operating system.
# Add the following text to the client.conf file to configure RADIUS client information.
client 10.1.1.1/24 {
secret = radius
shortname = sr88
}
Where, secret represents the shared key for authentication, authorization, and accounting.
# Add the following text to the users.conf file to configure legal user information.
user1
3. Configure Router A:
a. Configure the PPPoE server:
# Configure Virtual-Template 1 to use CHAP for authentication and use ISP domain dm1 as
the authentication domain.
<RouterA> system-view
[RouterA] interface virtual-template 1
RADIUS server
10.1.1.2/24
GE1/0/1
L2 Switch
PPPoE server
Auth-Type == CHAP,User-Password := pass1
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IPv6-Pool = "pool1",
HPE-VPN-Instance = "vpn1",
GE1/0/2
10.1.1.1/24
MPLS backbone
PE 2
PE 1
Router A
P
58
GE1/0/1
1.2.1.1./24
CE
Router B
VPN 1