279
The device uses a monitoring table and a blocking table to control PPP access rates:
•
Monitoring
table
—Stores a maximum of 8000 monitoring entries. Each entry records the
number of PPPoE sessions created by a user within the monitoring time. When the monitoring
entries reach the maximum, the system stops monitoring and blocking session requests from
new users. The aging time of monitoring entries is determined by the
session-request-period
argument. When the timer expires, the system starts a new round of monitoring for the user.
•
Blocking
table
—Stores a maximum of 8000 blocking entries. The system creates a blocking
entry if the access rate of a user reaches the threshold, and blocks requests from that user.
When the blocking entries reach the maximum number, the system stops blocking session
requests from new users and it only outputs log messages. The aging time of the blocking
entries is determined by the
blocking-period
argument. When the timer expires, the system
starts a new round of monitoring for the user.
If the access rate setting is changed, the system removes all monitoring and blocking entries, and
uses the new settings to limit PPPoE access rates.
To limit the PPPoE access rate:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
The PPPoE server is enabled on
the interface.
3.
Set the PPPoE access limit.
pppoe-server throttle per-mac
session-requests
session-request-period
blocking-period
By default, the PPPoE access
rate is not limited.
4.
Display information about
blocked users.
In standalone mode:
display pppoe-server
throttled-mac
{
slot
slot-number
|
interface interface-type
interface-number
}
In IRF mode:
display pppoe-server
throttled-mac
{
chassis
chassis-number
slot
slot-number
|
interface interface-type
interface-number
}
Available in any view.
Configuring the NAS-Port-ID attribute
The PPPoE server on a BAS device uses the RADIUS NAS-Port-ID attribute to send the access line
ID received from a DSLAM device to the RADIUS server. The access line ID includes the circuit-id
and remote-id. The RADIUS server compares the received NAS-Port-ID attribute with the local line
ID information to verify the location of the user.
You can configure the content of the NAS-Port-ID attribute that the PPPoE server sends to the
RADIUS server.
To configure the NAS-Port-ID attribute:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
The PPPoE server is enabled on
the interface.
