398
Step Command
Remarks
3.
Configure the
maximum number of
dynamic IPoE
sessions.
•
Configure the maximum number
of IPv4 IPoE sessions:
ip subscriber
{
dhcp
|
unclassified-ip
}
max-session
max-number
•
Configure the maximum number
of IPv6 IPoE sessions:
ipv6 subscriber
{
dhcp
|
ndrs
|
unclassified-ip
}
max-session
max-number
By default, the maximum number of
dynamic IPoE sessions is not
configured.
Configuring trusted DHCP options for DHCP users
This feature enables a BRAS to obtain user access information from trusted DHCP options when the
BRAS acts as a DHCP relay. The BRAS includes the obtained user access information in the
RADIUS attributes sent to the RADIUS server based on the following matrix.
Table 18 Associated DHCP options for RADIUS attributes
RADIUS attributes
Associated DHCP options
NAS-PORT-ID
•
DHCPv4 Option 82 Suboption Circuit-ID
•
DHCPv6 Option 18
DSL_AGENT_CIRCUIT_ID
•
DHCPv4 Option 82 Suboption Circuit-ID
•
DHCPv6 Option 18
DSL_AGENT_REMOTE_ID
•
DHCPv4 Option 82 Suboption Remote-ID
•
DHCPv6 Option 37
If the BRAS trusts DHCPv4 Option 60 and DHCPv6 Option 16 or Option 17, IPoE can use the ISP
domains specified in the options when certain conditions exist. For more information, see IPoE
commands in
User Access Command Reference
.
To configure trusted DHCP options for DHCP users:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Configure trusted
DHCP options for
DHCP users.
•
Configure trusted DHCP options
for DHCPv4 users:
ip
subscriber
trust
{
option60
|
option82
}
•
Configure trusted DHCP options
for DHCPv6 users:
ipv6
subscriber
trust
{
option16
|
option17
|
option18
|
option37
}
By default, the BRAS does not trust
options.
Configuring trusted ISP domains for DHCP users
If the DHCP user is enabled and portal authentication is configured, the following situations occur:
•
If the string selected from Option 60/Option 16/Option 17 contains the trusted ISP domain, the
DHCP user uses the trusted ISP domain for IPoE authentication.
