Table of Contents
Advertisement
Step
3.
Specify the user address
type in the ISP domain.
Specifying the service type for users in an ISP domain
Step
1.
Enter system view.
2.
Enter ISP domain view.
3.
Specify the service type for
users in the ISP domain.
Applying an ITA policy to users in an ISP domain
IMPORTANT:
This feature takes effect only on CSPEX cards.
The attribute allows the device to perform accounting at different charge rates for user data based on
destination addresses. The ITA policy assigned from an AAA server takes precedence over the ITA
policy in an ISP domain.
To apply an ITA policy to users in an ISP domain:
Step
1.
Enter system view.
2.
Enter ISP domain view.
3.
Apply an ITA policy to users
in the ISP domain.
Configuring authentication methods for an ISP domain
Restrictions and guidelines
When configuring authentication methods, follow these guidelines:
•
If the authentication method uses a RADIUS scheme and the authorization method does not
use a RADIUS scheme, AAA accepts only the authentication result from the RADIUS server.
The Access-Accept message from the RADIUS server also includes the authorization
information, but the device ignores the information.
•
If an HWTACACS scheme is specified, the device uses the entered username for role
authentication. If a RADIUS scheme is specified, the device uses the username $enabn$ on
the RADIUS server for role authentication. The variable n represents a user role level. For more
information about user role authentication, see Fundamentals Configuration Guide.
When the primary authentication method is local, the following rules apply to the authentication of a
user:
•
The device uses the backup authentication methods in sequence only if local authentication is
invalid for one of the following reasons:
An exception occurs in the AAA process.
The user disconnects from the device.
Command
user-address-type { ds-lite |
ipv6 | nat64 | private-ds |
private-ipv4 | public-ds |
public-ipv4 }
Command
system-view
domain isp-name
service-type { hsi | stb | voip }
Command
system-view
domain isp-name
ita-policy policy-name
58
Remarks
By default, no user address type is
specified.
Remarks
N/A
N/A
By default, the service type is hsi.
Remarks
N/A
N/A
By default, no ITA policy is
applied.
Advertisement
Table of Contents
Troubleshooting
