H3C SecPath Series Operation Manual page 12

Operation Manual – User Access
H3C SecPath Series Security Products
Table 1-11 Assign an IP address for the PPP user using the address pool for the
domain
Define a global IP address pool
Remove the configuration
Assign an IP address for the PPP user
using the global IP address pool
Remove the configuration
By default, if the remote address pool command and the domain address pool are not
configured, the IP address is not assigned for the peer.
The following section describes how to assign an IP address for the PPP user:
1) For the domain user (including userid and userid@isp-name), assign the IP
address as follows:
In the case of RADIUS or TACACS authentication and authorization, when the
server delivers an IP address for the PPP user, the delivered IP address is used.
If the server delivers an IP address pool instead of an IP address, the system
searches for the IP address pool in turn in domain view, and assigns an IP address
for the PPP user.
If the system assigns no IP address using the above two methods, or the local
authentication is adopted, the system searches for the address pool in turn in
domain view, and assigns an IP address for the PPP user.
2) For users not to be authenticated, the system uses the specified global address
pool (the address pool defined in system view) on the interface to assign an IP
address for the PPP user.
When directly specifying the IP address for the peer on the interface or uses the global
address pool to assign the IP address, the system allows the peer to use its
self-configured IP address after the remote address command is configured; if the
system does not want (or allow) the peer to use its self-configured IP address, and
orders the peer to receive the IP address assigned by the local user, you must
configure the peer IP address assigned by negotiation and execute the following
commands in interface view on server side.
Operation
1-10
Chapter 1 PPP Configuration
Command
ip pool pool-number low-ip-address
[ high-ip-address ]
undo ip pool pool-number
remote address pool [ pool-number ]
undo remote address