H3C SecPath F1800-A Operation Manual page 449

Operation Manual - Security Defence
H3C SecPath F1800-A Firewall
In the case that the BAS authenticates the user, it will assign an IP address to the user
from the address pool in the domain where the user belongs; otherwise, it will assign
an IP address to the user from the system address pool if necessary.
Do as follows in AAA view or domain view.
Table 5-11 Configuring a local IP address pool
Configure a local IP address pool.
Remove a local IP address pool.
Note that you cannot configure the address pool to default fields.
II. Assigning an IP Address to a PPP User
If a local interface is encapsulated with PPP, it is capable of the IP address negotiation
so that it accepts the IP address assigned from the peer.
Do as follows in virtual template interface view.
Table 5-12 Configuring the IP address negotiation on an interface
Configure the IP address negotiation on an
interface.
Cancel the IP address negotiation on an
interface.
Assign an IP address to the peer interface.
Restore the default setting.
The following are principles for AAA allocating addresses to PPP users.
1) Preferences for assigning addresses to users in the default domain (including
the user name without @, such as aaa, and the username@default, such as
aaa@default) are introduced below.
In the RADIUS or HWTACACS authentication and authorization, the server has
assigned an IP address to the user. The IP address assigned by the server is
preferred.
If the server assigns an address pool instead of an IP address, you can obtain an
IP address from the relevant address pool in AAA view.
Action
Action
6-97
Command
ip pool pool-number
[ last-address ]
undo ip pool pool-number
Command
ip address ppp-negotiate
undo ip address ppp-negotiate
remote address { ip-address | pool
[ pool-number ] }
undo remote address
Chapter 5 AAA
first-address