HPE FlexNetwork MSR Series Configuration Manual page 90

Comware 7 security
Table of Contents

Advertisement

[Router-ita-policy-ita] accounting-method radius-scheme rs2
# Specify level-1 traffic for ITA accounting and count the traffic as IPv4 traffic.
[Router-ita-policy-ita] accounting-level 1 ipv4
# Exclude the amount of ITA traffic from the overall traffic statistics that are sent to RADIUS
server 1.
[Router-ita-policy-ita] traffic-separate enable
# Prohibit users from accessing the authorized IP subnets after their ITA data quotas are
used up.
[Router-ita-policy-ita] traffic-quota-out offline
[Router-ita-policy-ita] quit
g. Configure an ISP domain:
# Create an ISP domain named dm1 and enter ISP domain view.
[Router] domain dm1
# Configure the authentication, authorization, and accounting methods for IPoE users in the
domain.
[Router-isp-dm1] authentication ipoe radius-scheme rs1
[Router-isp-dm1] authorization ipoe radius-scheme rs1
[Router-isp-dm1] accounting ipoe radius-scheme rs1
# Apply ITA policy ita to the ISP domain.
[Router-isp-dm1] ita-policy ita
[Router-isp-dm1] quit
h. Configure IPoE:
# Enter the view of GigabitEthernet 1/0/2.
[Router] interface gigabitethernet 1/0/2
# Enable IPoE and configure Layer 3 access mode on GigabitEthernet 1/0/2.
[Router–GigabitEthernet1/0/2] ip subscriber routed enable
# Enable the unclassified-IP users.
[Router–GigabitEthernet1/0/2] ip subscriber initiator unclassified-ip enable
# Specify dm1 as the ISP domain.
[Router–GigabitEthernet1/0/2] ip subscriber unclassified-ip domain dm1
# Set the password to radius in plaintext form for IPoE authentication.
[Router–GigabitEthernet1/0/2] ip subscriber password plaintext radius
[Router–GigabitEthernet1/0/2] quit
Verifying the configuration
# Use password radius to pass IPoE authentication on the host. (Details not shown.)
# Verify that RADIUS server 2 performs accounting for the IPoE user when the user accesses the
FTP server at 1.1.1.1. (Details not shown.)
# Verify that RADIUS server 1 performs accounting for the non-ITA traffic of the IPoE user. (Details
not shown.)
# Display detailed information about the sessions of online IPoE users. Verify that the user is
assigned the user profile and has generated ITA traffic statistics.
<Router> display ip subscriber session verbose
74

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the FlexNetwork MSR Series and is the answer not in the manual?

Table of Contents