Configuring Nas-Port-Id Formats; Enabling Ipoe Access-Out Authentication - H3C SR8800-F Configuration Manual

Configuring NAS-Port-ID formats

The NAS-Port-ID RADIUS attribute specifies access location of a user. The BRAS supports the
following formats for NAS-Port-ID:
•
version 1.0—Format for China Telecom.
•
version 2.0—Format specified in YDT 2275-2011 Subscriber Access Loop (Port) Identification
in Broadband Access Networks.
You can configure the following settings if version 2.0 is used when the BRAS acts as a DHCP relay:
•
Configure DHCPv4 Option 82 or DHCPv6 Option 18 as a trusted DHCP option and obtain
information from the trusted option.
•
Include the NAS information and obtained option information in NAS-Port-ID.
To configure NAS-Port-ID formats:
Step
1. Enter system view.
2. Enter interface view.
3. Configure
NAS-Port-ID formats.
4. (Optional.) Configure
trusted DHCP options.
5. (Optional.) Include the
NAS information and
DHCP option
information in
NAS-Port-ID.

Enabling IPoE access-out authentication

In a dual-authentication network, one device performs access-in authentication and another device
performs access-out authentication. Users who pass access-in authentication can access the
intranet and users who pass access-out authentication can access the extranet.
To enable IPoE access-out authentication:
Step
1. Enter system view.
Command
system-view
interface interface-type
interface-number
•
Configure the NAS-Port-ID format
for IPv4 users:
ip subscriber nas-port-id
format cn-telecom { version1.0
| version2.0 }
•
Configure the NAS-Port-ID format
for IPv6 users:
ipv6 subscriber nas-port-id
format cn-telecom { version1.0
| version2.0 }
•
Configure a trusted DHCP option
for IPv4 users:
ip subscriber trust option82
•
Configure a trusted DHCP option
for IPv6 users:
ipv6 subscriber trust option18
•
For IPv4 users:
ip subscriber nas-port-id
nasinfo-insert
•
For IPv6 users:
ipv6 subscriber nas-port-id
nasinfo-insert
Command
system-view
410
Remarks
N/A
N/A
The default format is version1.0.
By default, the BRAS does not trust
Option 82 or Option 18.
By default, the BRAS includes only
information obtained from the
trusted option in NAS-Port-ID.
Remarks
N/A