Ipoe Addressing; Ipoe Authentication Methods; Ipoe Access Procedure By Using Bind Authentication - H3C SR8800-F Configuration Manual

For interface-leased users, subnet-leased users, and L2VPN-leased users, the BRAS creates a
static IPoE session based on configured information after you enable IPoE on an interface. The
BRAS initiates user authentication based on the configured username and password.

IPoE addressing

IPoE addressing varies with user types.
•
DHCP users obtain IP addresses in the following sequence:
Obtain IP addresses from the AAA-authorized IP address pool.
Obtain IP addresses from the IP address pool configured in the ISP domain if the AAA
server does not authorize any IP address pools.
Obtain IP addresses in the same network segment as the interface IP address if no IP
address pool is configured in the ISP domain.
•
IPv6-ND-RS users obtain the AAA-authorized IPv6 prefix from IPoE, and generate an IPv6
address based on the prefix. If no AAA-authorized IPv6 prefix exists, the user adopts the first
64-bit IPv6 prefix of the interface to generate an IPv6 address.
•
Other users adopt static IP addresses or obtain IP addresses from the DHCP server without
using IPoE.

IPoE authentication methods

IPoE supports the following authentication methods:
•
Bind authentication—Authenticates users by the usernames and passwords that the BRAS
automatically generates based on user location information.
•
Web authentication—Authenticates users by the usernames and passwords that users enter
on the Web authentication page.
In the current software version, only the bind authentication method is supported.

IPoE access procedure by using bind authentication

IPoE access by using bind authentication includes the following steps:
1. The BRAS initiates authentication.
The BRAS obtains information from user packets or IPoE sessions statically configured, and
sends authentication requests.
2. The AAA server authenticates users.
The AAA server completes user authentication and sends the result to the BRAS. The security
server, if configured, completes security authorization and sends the result to the BRAS.
3. (Optional.) DHCP allocates IP addresses and IPoE allocates IPv6 prefixes.
The DHCP server assigns an IP address to a DHCP user and the IPoE assigns an IPv6 prefix to
an IPv6-ND-RS user.
4. The BRAS performs access control.
The BRAS permits the user to get online and performs access control and billing based on the
authorized result.
Access procedure for DHCP users
This section uses a DHCPv4 user as an example to illustrate the access procedure for DHCP users.
The BRAS operates as a DHCP relay.
386