湖南广电7750SR-BRAS功能测试手册-xiaohe
- 1、下载文档前请自行甄别文档内容的完整性,平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益,请联系客服反馈,我们会尽快为您处理(人工客服工作时间:9:00-18:30)。
1 测试环境
1.1 设备信息
上海贝尔7750SR 6.1R6
凌亚科技RADIUS Server V1.3 1.2 链路信息
2 测试案例
2.1 用户正常拨号
测试步骤:
1. 用户通过测试机器PPPOE拨号。
2.BAS向RADIUS Server发起认证请求,RADIUS Server响应认证请求报文。
3.BAS向用户授权,并向RADIUS Server 发起计费开始报文。(1)Local-DCHP配置
//配置router Interface
router
interface "dhcp"
address 220.249.143.206/32
loopback
local-dhcp-server "server-1"
//配置dhcp 地址池
router
dhcp
local-dhcp-server "server-1" create
use-gi-address
pool "pool-2" create
options
dns-server 58.20.127.170
exit
subnet 10.240.5.0/24 create
address-range 10.240.5.10 10.240.5.100 exit
exit
no shutdown
exit
exit
exit
(2)Radius配置
//配置router Interface
interface "to-radius"
address 192.168.0.34/30
port 1/2/2
exit
//配置认证模板
subscriber-mgmt
authentication-policy "knock-door" create
description "RADIUS policy"
//配置radius server属性,IP及Key
radius-authentication-server
source-address 192.168.0.34
server 1 address 172.16.1.2 secret "/ND.T9I/ID3lmtEMVxSCuE" hash2
exit
exit
exit
//配置PPPoE报文属性,报文公共及扩展属性
user-name-format circuit-id
accept-authorization-change
pppoe-access-method pap-chap
include-radius-attribute
circuit-id
remote-id
nas-port-id
nas-identifier
pppoe-service-name
mac-address
exit
exit
报文属性可参考数据字典:
//配置account server属性,IP及Key
radius-accounting-policy "GiveMeMoney"
radius-accounting-server
source-address 192.168.0.34
server 1 address 172.16.1.2 secret "/ND.T9I/ID3lmtEMVxSCuE" hash2
exit
exit
//配置account server属性,报文公共及扩展属性
radius-accounting-policy "GiveMeMoney" create
update-interval 10
include-radius-attribute
framed-ip-addr
framed-ip-netmask
subscriber-id
circuit-id
remote-id
nas-port-id
nas-identifier
sub-profile
sla-profile
exit
session-id-format number
use-std-acct-attributes
(3)Subscriber-mgmt用户模板配置
//配置sub-profile模板,配合用户QoS属性下发
sub-profile "ipd" create
ingress-scheduler-policy "upstream"
exit
egress-scheduler-policy "downstream"
exit
radius-accounting-policy "GiveMeMoney"
sla-profile-map
use-direct-map-as-default
entry key "default" sla-profile "default"
exit
exit
//配置sla-profile模板,配合sap Qos拥塞管理 sla-profile "ipd" create
ingress
qos 10 multipoint-shared
exit
exit
egress
qos 20
exit
exit
exit
//配置sub-ident-policy模板,配合用户QoS属性下发sub-ident-policy "sub_ident_all" create
sub-profile-map
use-direct-map-as-default
exit
sla-profile-map
use-direct-map-as-default
exit
exit
(4)QoS模板配置
//sub-profile/sla-profile模板,关联的qos模板qos
//配置QoS下行预留带宽
scheduler-policy "downstream" create tier 1
scheduler "downstream" create rate 100000 cir 100000
exit
exit
exit
//配置QoS上行预留带宽
scheduler-policy "upstream" create
tier 1