ä¸ãå°ç±³è·¯ç±å¨ä¸æ¯æIPOEè¿æ¥çï¼ä» æ¯æPPPOEæ¨å·è¿æ¥ã
äºãå°ç±³è·¯ç±å¨é ç½®æ¹æ³ï¼
1ãç½çº¿ä¸¤ç«¯åå«æ¥è·¯ç±å¨çLANå£åçµèç½å£
2ãæå¼æµè§å¨è¾å ¥192.168.31.1å车
3ãç¹å»ãåæï¼ç»§ç»ãæé®
4ãè¾å ¥å®½å¸¦å¸å·åå¯ç ï¼ç¹å»ä¸ä¸æ¥ã
5ãè¾å ¥WIFIå称åå¯ç ï¼ç¹å»å®ææé®ã
6ãé
ç½®å®æåï¼ç½çº¿ä¸¤ç«¯åå«æ¥è·¯ç±å¨çWANå£åç«çLANå£ã
ä¸ãIPOEæ¦è¿°
BRASï¼Broadband Remote Access Serverï¼å®½å¸¦è¿ç¨æ¥å ¥æå¡å¨ï¼
BRASæ¥å ¥è®¾å¤å¯ä»¥ä½ä¸ºåç±»æ¥å ¥ç¨æ·ç认è¯ã计费ç½å ³ï¼ä»¥åç¨æ·çä¸å¡æ§å¶ç½å ³ãç®åçBRASæ¥å ¥è®¾å¤ä¸»è¦æä¾PPPoXåIPoX两ç§æ¥å ¥æå¡ã
å ¶ä¸ï¼PPPoXæ¥å ¥æ¯æç¨æ·éè¿PPPæ¨å·æ¥å ¥ã
IPoXæ¥å ¥æ¯æéè¿DHCPæ¥æ触åæè IPæ¥æ触åçæ¹å¼æ¥å ¥ã
IPoEï¼IP over Ethernetï¼ä¸ºIPoXä¸çä¸ç§å¸¸è§çæ¥å ¥æ¹å¼ã
åãå®ç°IPOEè¿æ¥ï¼éè¦æ¯æIPOEè¿æ¥çè·¯ç±å¨æå¯ä»¥ï¼å¦H3Cã
é ç½®æ¹æ³å¦ä¸ï¼ä»¥ä¸å¾ä¸ºä¾ï¼ï¼
ï¼ä¸ï¼ç»ç½éæ±ï¼
2.2.2.0/24ç½æ®µå çææç¨æ·ç»ç±ç½å ³è®¾å¤ä»¥IPoEæ¹å¼æ¥å ¥å°BRASæ¥å ¥è®¾å¤ã
æ¥å£ä¸çº¿ç¨æ·è®¤è¯æ¶ä½¿ç¨çç¨æ·å为us1ãå¯ç 为pw1ã
éç¨RADIUSä½ä¸ºè®¤è¯ãææå计费æå¡å¨ã
ï¼äºï¼ é ç½®RADIUSæå¡å¨
ä¸é¢ä»¥Linuxç³»ç»ä¸çFree Radiusæå¡å¨ä¸ºä¾ï¼è¯´æRADIUS serverçåºæ¬é ç½®ã
# é ç½®RADIUS客æ·ç«¯ä¿¡æ¯ã
å¨clients.confæ件ä¸å¢å å¦ä¸ä¿¡æ¯ï¼
client 4.4.4.2/32 {
ipaddr = 4.4.4.2
netmask=32
secret=radius
}
以ä¸ä¿¡æ¯è¡¨ç¤ºï¼RADIUS客æ·ç«¯çIPå°å为4.4.4.2ï¼å ±äº«å¯é¥ä¸ºå符串radiusã
# é ç½®åæ³ç¨æ·ä¿¡æ¯ã
å¨usersæ件ä¸å¢å å¦ä¸ä¿¡æ¯ï¼
us1 Cleartext-Password :="pw1"
以ä¸ä¿¡æ¯è¡¨ç¤ºï¼æ¥å£ä¸çº¿ç¨æ·çç¨æ·å为us1ï¼ç¨æ·å¯ç 为å符串pw1ã
ï¼ä¸ï¼é ç½®Device
1ãé ç½®RADIUSæ¹æ¡
# å建åå为rs1çRADIUSæ¹æ¡å¹¶è¿å ¥è¯¥æ¹æ¡è§å¾ã
<Device> system-view
[Device] radius scheme rs1
# é ç½®RADIUSæ¹æ¡ç主认è¯å主计费æå¡å¨åå ¶éä¿¡å¯é¥ã
[Device-radius-rs1] primary authentication 4.4.4.1
[Device-radius-rs1] primary accounting 4.4.4.1
[Device-radius-rs1] key authentication simple radius
[Device-radius-rs1] key accounting simple radius
# é ç½®åéç»RADIUSæå¡å¨çç¨æ·åä¸æºå¸¦ISPååã
[Device-radius-rs1] user-name-format without-domain
[Device-radius-rs1] quit
# 使è½RADIUS session controlåè½ã
[Device] radius session-control enable
2ãé 置认è¯å
# å建并è¿å ¥åå为dm1çISPåã
[Device] domain dm1
# é ç½®ISPå使ç¨çRADIUSæ¹æ¡rs1ã
[Device-isp-dm1] authentication ipoe radius-scheme rs1
[Device-isp-dm1] authorization ipoe radius-scheme rs1
[Device-isp-dm1] accounting ipoe radius-scheme rs1
[Device-isp-dm1] quit
3ãé ç½®IPoE认è¯
# è¿å ¥æ¥å£GigabitEthernet1/0/2è§å¾ã
[Device] interface gigabitethernet 1/0/2
# 使è½IPoEåè½ï¼å¹¶æå®ä¸å±æ¥å ¥æ¨¡å¼ã
[DeviceâGigabitEthernet1/0/2] ip subscriber routed enable
# é ç½®æ¥å£ä¸çº¿ç¨æ·ï¼è®¤è¯ä½¿ç¨çç¨æ·å为us1ï¼è®¤è¯ä½¿ç¨çå¯ç 为ææpw1ï¼ä½¿ç¨ç认è¯å为dm1ã
[DeviceâGigabitEthernet1/0/2] ip subscriber interface-leased username us1 password plaintext pw1 domain dm1
[DeviceâGigabitEthernet1/0/2] quit