AR系列路由器作为PPPoE Server采用RADIUS服务器认证用户的典型配置

AR系列路由器作为PPPoE Server采用RADIUS服务器认证用户的典型配置

     

【需求】

主机Host运行PPPoE Client，通过路由器Quidway接入到Internet。路由

器作为PPPoE Server，配置路由器实现RADIUS服务器对连接Internet的

用户进行认证、计费.

【组网图】

  

 

【配置脚本】

PPPoE Server配置脚本

# sysname Quidway # radius scheme system radius scheme radius               //配置RADIUS方案 primary authentication 2.2.2.2 primary accounting 2.2.2.2 accounting optional key authentication yao user-name-format without-domain accounting-on enable # domain radius scheme radius-scheme radius        //增加一个IP地址池 ip pool 1 1.1.1.2 1.1.1.10 domain system # local-user admin password cipher .]@USE=B,53Q=^Q`MAF4<1!! service-type telnet terminal level 3 service-type ftp # interface Virtual-Template1        //配置虚拟模板参数 ppp authentication-mode chap domain radius ppp chap user yao ip address 1.1.1.1 255.0.0.0 remote address pool 1 # interface Aux0 async mode flow # interface Ethernet2/0              //启动PPPoE Server pppoe-server bind Virtual-Template 1 # interface Ethernet3/0 ip address 2.2.2.1 255.0.0.0 # interface NULL0 # FTP server enable # user-interface con 0 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme #

【验证】

在路由器上查看Radius服务器的相关信息

<Quidway>dis radius

SchemeName  =radius                           Index=1    Type=standard

Primary Auth IP  =2.2.2.2          Port=1812   State=active

Primary Acct IP  =2.2.2.2          Port=1813   State=active

Second  Auth IP  =0.0.0.0          Port=1812   State=block

Second  Acct IP  =0.0.0.0          Port=1813   State=block

Auth Server Encryption Key= yao

Acct Server Encryption Key= huawei

Accounting method = optional

Accounting-On packet enable, send times = 15 , interval = 3s

TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12

Permitted send realtime PKT failed counts       =5

Retry sending times of noresponse acct-stop-PKT =500

Quiet-interval(min)                             =5

Username format                                 =without-domain

Data flow unit                                  =Byte

Packet unit                                     =One Packet

------------------------------------------------------------------    

查看PPPoE会话信息

<Quidway>dis pppoe-server session all

SID Intf                    OIntf                RemMAC       LocMAC       State

1   Virtual-Template1:0     Ethernet2/0          0015c50b19ee 00e0fc1e5905 UP

 

【提示】

 

 1 路由器作为pppoe的server端，给pc分配地址的地址池应配置在域视图下。