H3C SR8800-F Configuration Manual page 440

Comware 7 user access
Hide thumbs Also See for SR8800-F:
Table of Contents

Advertisement

# Add usernames and passwords to the users user information file. Usernames for the three
subnet user groups are us1, us2, and us3. Passwords for the three subnet user groups are
pw1, pw2, and pw3.
us1
Cleartext-Password :="pw1"
us2
Cleartext-Password :="pw2"
us3
Cleartext-Password :="pw3"
2.
Configure the BRAS:
a. Configure IP addresses for interfaces. (Details not shown.)
b. Configure a RADIUS scheme:
# Create a RADIUS scheme named rs1 and enter its view.
<Device> system-view
[Device] radius scheme rs1
# Configure primary servers and keys for authentication and accounting.
[Device-radius-rs1] primary authentication 4.4.4.1
[Device-radius-rs1] primary accounting 4.4.4.1
[Device-radius-rs1] key authentication simple radius
[Device-radius-rs1] key accounting simple radius
# Exclude the ISP name from the username sent to the RADIUS server.
[Device-radius-rs1] user-name-format without-domain
[Device-radius-rs1] quit
c. Configure the ISP domain:
# Create an ISP domain named dm1 and enter its view.
[Device] domain dm1
# Configure dm1 to use RADIUS scheme rs1.
[Device-isp-dm1] authentication ipoe radius-scheme rs1
[Device-isp-dm1] authorization ipoe radius-scheme rs1
[Device-isp-dm1] accounting ipoe radius-scheme rs1
[Device-isp-dm1] quit
d. Configure IPoE:
# Enable IPoE and configure Layer 2 access mode on GigabitEthernet 3/1/2.
[Device] interface gigabitethernet 3/1/2
[Device–GigabitEthernet3/1/2] ip subscriber l2-connected enable
# Configure three subnet-leased users and specify their usernames, passwords, and ISP
domains.
[Device–GigabitEthernet3/1/2] ip subscriber subnet-leased ip 5.5.5.0 24 username
us1 password plaintext pw1 domain dm1
[Device–GigabitEthernet3/1/2] ip subscriber subnet-leased ip 6.6.6.0 24 username
us2 password plaintext pw2 domain dm1
[Device–GigabitEthernet3/1/2] ip subscriber subnet-leased ip 7.7.7.0 24 username
us3 password plaintext pw3 domain dm1
[Device–GigabitEthernet3/1/2] quit
Verifying the configuration
# Display IPoE session information to verify that the host has come online.
[Device] display ip subscriber subnet-leased
Basic:
Access interface
VPN instance
Username
: GE3/1/2
: N/A
: us1
424

Advertisement

Table of Contents
loading

Table of Contents