Configuring The Nas-Port-Id Attribute - H3C SR8800-F Configuration Manual

The device uses a monitoring table and a blocking table to control PPP access rates:
•
Monitoring table—Stores a maximum of 8000 monitoring entries. Each entry records the
number of PPPoE sessions created by a user within the monitoring time. When the monitoring
entries reach the maximum, the system stops monitoring and blocking session requests from
new users. The aging time of monitoring entries is determined by the session-request-period
argument. When the timer expires, the system starts a new round of monitoring for the user.
•
Blocking table—Stores a maximum of 8000 blocking entries. The system creates a blocking
entry if the access rate of a user reaches the threshold, and blocks requests from that user.
When the blocking entries reach the maximum number, the system stops blocking session
requests from new users and it only outputs log messages. The aging time of the blocking
entries is determined by the blocking-period argument. When the timer expires, the system
starts a new round of monitoring for the user.
If the access rate setting is changed, the system removes all monitoring and blocking entries, and
uses the new settings to limit PPPoE access rates.
To limit the PPPoE access rate:
Step
1. Enter system view.
2. Enter interface view.
3. Set the PPPoE access limit.
4. Display information about
blocked users.

Configuring the NAS-Port-ID attribute

The PPPoE server on a BAS device uses the RADIUS NAS-Port-ID attribute to send the access line
ID received from a DSLAM device to the RADIUS server. The access line ID includes the circuit-id
and remote-id. The RADIUS server compares the received NAS-Port-ID attribute with the local line
ID information to verify the location of the user.
You can configure the content of the NAS-Port-ID attribute that the PPPoE server sends to the
RADIUS server.
To configure the NAS-Port-ID attribute:
Step
1. Enter system view.
2. Enter interface view.
Command
system-view
interface interface-type
interface-number
pppoe-server throttle per-mac
session-requests
session-request-period
blocking-period
In standalone mode:
display pppoe-server
throttled-mac { slot slot-number |
interface interface-type
interface-number }
In IRF mode:
display pppoe-server
throttled-mac { chassis
chassis-number slot slot-number |
interface interface-type
interface-number }
Command
system-view
interface interface-type
interface-number
279
Remarks
N/A
The PPPoE server is enabled on
the interface.
By default, the PPPoE access
rate is not limited.
Available in any view.
Remarks
N/A
The PPPoE server is enabled on
the interface.