399
•
If the string selected from Option 60/Option 16/Option 17 does not contain the trusted ISP
domain, the DHCP user use portal authentication. For more information, see "
Configure trusted DHCP options before you configure the trusted ISP domains. For more information
about how to configure trusted DHCP options, see "
Configuring trusted DHCP options for DHCP
." For more information about trusted ISP domains, see IPoE commands in
User Access
Command Reference
.
To configure trusted ISP domains for DHCP users:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Configure trusted ISP
domains for DHCP
users.
•
Configure trusted ISP domains for
DHCPv4 users:
ip subscriber dhcp option60
match string [ offset offset]
[length length]
•
Configure trusted ISP domains for
DHCPv6 users:
ipv6 subscriber dhcp
{
option16
|
option17
} *
match string
[
offset offset
] [
length length
]
By default, no trusted ISP domain is
configured.
Configuring trusted source IP addresses for unclassified-IP
users
If the unclassified-IP user is enabled and portal authentication is configured, IPoE authentication is
available only for unclassified-IP users with the trusted source IP addresses. Portal authentication is
available for unclassified users with untrusted source IP addresses. For more information, see
"
Configuring portal authentication
."
If the unclassified-IP user is enabled but portal authentication is not configured on an interface,
unclassified-IP packets with untrusted source IP addresses are dropped. Only unclassified-IP
packets with trusted source IP addresses can initiate IPoE authentication.
To configure trusted source IP addresses for unclassified-IP users:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Configure trusted
source IP addresses
for unclassified-IP
users.
•
Configure trusted IPv4 addresses:
ip subscriber unclassified-ip ip
match
start-ip-address
[
end-ip-address
]
•
Configure trusted IPv6 addresses:
ipv6 subscriber unclassified-ip
ip match
start-ipv6-address
[
end-ipv6-address
]
By default, the BRAS does not trust
source IP addresses.
