Table of Contents
Advertisement
# Create an IP address pool named pool1 and enter its view.
[DHCP-server] dhcp server ip-pool pool1
# Configure network segment 3.3.3.0/24 to the pool, and configure IP address 3.3.3.1 as
unavailable.
[DHCP-server-pool-pool1] network 3.3.3.0 24
[DHCP-server-pool-pool1] forbidden-ip 3.3.3.1
[DHCP-server-pool-pool1] quit
3.
Configure the BRAS:
a. Configure IP addresses for interfaces. (Details not shown.)
b. Configure a RADIUS scheme:
# Create a RADIUS scheme named rs1 and enter its view.
<Device> system-view
[Device] radius scheme rs1
# Configure primary servers and keys for authentication and accounting.
[Device-radius-rs1] primary authentication 4.4.4.1
[Device-radius-rs1] primary accounting 4.4.4.1
[Device-radius-rs1] key authentication simple radius
[Device-radius-rs1] key accounting simple radius
# Exclude the ISP name from the username sent to the RADIUS server.
[Device-radius-rs1] user-name-format without-domain
[Device-radius-rs1] quit
c. Configure the ISP domain: (This example assumes that the DHCP packets do not contain
option 60.)
# Create an ISP domain named dm1 and enter its view.
[Device] domain dm1
# Configure dm1 to use RADIUS scheme rs1.
[Device-isp-dm1] authentication ipoe radius-scheme rs1
[Device-isp-dm1] authorization ipoe radius-scheme rs1
[Device-isp-dm1] accounting ipoe radius-scheme rs1
[Device-isp-dm1] quit
d. Configure the DHCP relay:
# Enable DHCP.
[Device] dhcp enable
# Enable the DHCP relay and specify the DHCP server 4.4.4.3 on GigabitEthernet 3/1/2.
[Device] interface gigabitethernet 3/1/2
[Device–GigabitEthernet3/1/2] dhcp select relay
[Device–GigabitEthernet3/1/2] dhcp relay server-address 4.4.4.3
e. Configure IPoE:
# Enable IPoE and configure Layer 2 access mode on GigabitEthernet 3/1/2.
[Device–GigabitEthernet3/1/2] ip subscriber l2-connected enable
# Enable the DHCP user.
[Device–GigabitEthernet3/1/2] ip subscriber initiator dhcp enable
# Specify dm1 as the ISP domain.
[Device–GigabitEthernet3/1/2] ip subscriber dhcp domain dm1
# Configure plaintext password radius for authentication.
[Device–GigabitEthernet3/1/2] ip subscriber password plaintext radius
[Device–GigabitEthernet3/1/2] quit
419
Advertisement
Table of Contents
Troubleshooting
