410
Configuring NAS-Port-ID formats
The NAS-Port-ID RADIUS attribute specifies access location of a user. The BRAS supports the
following formats for NAS-Port-ID:
•
version
1.0
—Format for China Telecom.
•
version
2.0
—Format specified in
YDT 2275-2011 Subscriber Access Loop (Port) Identification
in Broadband Access Networks
.
You can configure the following settings if version 2.0 is used when the BRAS acts as a DHCP relay:
•
Configure DHCPv4 Option 82 or DHCPv6 Option 18 as a trusted DHCP option and obtain
information from the trusted option.
•
Include the NAS information and obtained option information in NAS-Port-ID.
To configure NAS-Port-ID formats:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Configure
NAS-Port-ID formats.
•
Configure the NAS-Port-ID format
for IPv4 users:
ip subscriber nas-port-id
format cn-telecom
{
version1.0
|
version2.0
}
•
Configure the NAS-Port-ID format
for IPv6 users:
ipv6 subscriber nas-port-id
format cn-telecom
{
version1.0
|
version2.0
}
The default format is
version1.0
.
4.
(Optional.) Configure
trusted DHCP options.
•
Configure a trusted DHCP option
for IPv4 users:
ip subscriber trust option82
•
Configure a trusted DHCP option
for IPv6 users:
ipv6 subscriber trust option18
By default, the BRAS does not trust
Option 82 or Option 18.
5.
(Optional.) Include the
NAS information and
DHCP option
information in
NAS-Port-ID.
•
For IPv4 users:
ip subscriber nas-port-id
nasinfo-insert
•
For IPv6 users:
ipv6 subscriber nas-port-id
nasinfo-insert
By default, the BRAS includes only
information obtained from the
trusted option in NAS-Port-ID.
Enabling IPoE access-out authentication
In a dual-authentication network, one device performs access-in authentication and another device
performs access-out authentication. Users who pass access-in authentication can access the
intranet and users who pass access-out authentication can access the extranet.
To enable IPoE access-out authentication:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
