422
Procedure
1.
Configure the RADIUS server: (This section uses the Linux Free RADIUS server as an
example.)
# Add BRAS IP address
4.4.4.2
and secret
radius
to the
clients.conf
file.
client 4.4.4.2/32 {
ipaddr = 4.4.4.2
netmask=32
secret=radius
}
# Add the username and password to the
users
user information file. The username is the host
IP address
3.3.3.2
. The password is
radius
.
3.3.3.2 Cleartext-Password :="radius"
2.
Configure the BRAS:
a.
Configure IP addresses for interfaces. (Details not shown.)
b.
Configure a RADIUS scheme:
# Create a RADIUS scheme named
rs1
and enter its view.
<Device> system-view
[Device] radius scheme rs1
# Configure primary servers and keys for authentication and accounting.
[Device-radius-rs1] primary authentication 4.4.4.1
[Device-radius-rs1] primary accounting 4.4.4.1
[Device-radius-rs1] key authentication simple radius
[Device-radius-rs1] key accounting simple radius
# Exclude the ISP name from the username sent to the RADIUS server.
[Device-radius-rs1] user-name-format without-domain
[Device-radius-rs1] quit
c.
Configure the ISP domain:
# Create an ISP domain named
dm1
and enter its view.
[Device] domain dm1
# Configure ISP domain
dm1
to use RADIUS scheme
rs1.
[Device-isp-dm1] authentication ipoe radius-scheme rs1
[Device-isp-dm1] authorization ipoe radius-scheme rs1
[Device-isp-dm1] accounting ipoe radius-scheme rs1
[Device-isp-dm1] quit
d.
Configure IPoE:
# Enable IPoE and configure Layer 2 access mode on GigabitEthernet 3/1/2.
[Device] interface gigabitethernet 3/1/2
[Device–GigabitEthernet3/1/2] ip subscriber l2-connected enable
# Enable the ARP-based static user.
[Device–GigabitEthernet3/1/2] ip subscriber initiator arp enable
# Configure a static IPoE session with IP address 3.3.3.2 and ISP domain
dm1
on
GigabitEthernet 3/1/2.
[Device–GigabitEthernet3/1/2] ip subscriber session static ip 3.3.3.2 domain dm1
# Configure plaintext password
radius
for authentication.
[Device–GigabitEthernet3/1/2] ip subscriber password plaintext radius
[Device–GigabitEthernet3/1/2] quit
# Enable DHCP globally.
