ASR 9000 Series Routers Broadband Network Gateway Configuration
Fa'amatalaga o oloa
Fa'amatalaga
- Igoa Oloa: Broadband Network Gateway
- Fa'ata'ita'iga: Cisco ASR 9000 Fa'asologa Fa'asologa
- Software Version: IOS XR Fa'asa'oloto 6.2.x
- Muamua Lolomiina: 2017-03-17
- Suiga Mulimuli: 2017-07-14
Folasaga
O le Broadband Network Gateway o se router ua fuafuaina mo le fa'aoga i totonu
ISP feso'otaiga. O lo'o tu'uina atu ai fa'amatalaga maualuluga ma fa'atinoga i
pulea feso'ota'iga feso'ota'iga ma feso'ota'iga feso'ota'iga. O lenei taiala
o lo'o tu'uina atu fa'atonuga ile fa'atulagaina ma le fa'aogaina ole Cisco ASR 9000
Fa'asologa Fa'asologa ma le Broadband Network Gateway.
BNG Features
O lo'o ta'ua i lalo foliga fou ma suiga o le Broadband
Network Gateway i le IOS XR Release 6.2.x:
- Vaega 1: [Faamatalaga]
- Vaega 2: [Faamatalaga]
- …
Ua uma le BNGview
Malamalama BNG
Ole Broadband Network Gateway (BNG) ose vaega autu ile ISP
feso'ota'iga. E mafai ai ona pulea feso'ota'iga alalaupapa ma
tu'uina atu fa'amatalaga fa'apitoa mo le fa'atonutonuina o feoaiga ma le tautua
saunia.
BNG Architecture
O le fausaga o le BNG e aofia ai le tele o vaega,
e aofia ai:
- Vaega 1: [Faamatalaga]
- Vaega 2: [Faamatalaga]
- …
Matafaioi a le BNG ile ISP Network Models
O le BNG e iai sona sao taua i faʻataʻitaʻiga fesoʻotaʻiga ISP eseese,
pei o le:
- Fa'ata'ita'iga 1: [Fa'amatalaga]
- Fa'ata'ita'iga 2: [Fa'amatalaga]
- …
BNG afifiina
O le Broadband Network Gateway o lo'o fa'apipi'iina e avea o se masini komepiuta
e mafai ona faapipiiina ma faagaoioia i le Cisco ASR 9000 Series
Auala.
Fa'atonuga o le Fa'aaogaina o Mea
Fa'apipi'i ma Fa'agaoioi le BNG Pie
Ina ia faʻapipiʻi ma faʻagaoioia le Broadband Network Gateway i luga o le
Cisco ASR 9000 Series Router, mulimuli i laasaga nei:
- Laasaga 1: [Faamatalaga]
- Laasaga 2: [Faamatalaga]
- …
BNG Fa'asologa Fa'asologa
Ina ia fa'atulaga le Broadband Network Gateway i le Cisco ASR 9000
Fa'asologa Router, mulimuli i laasaga nei:
- Laasaga 1: [Faamatalaga]
- Laasaga 2: [Faamatalaga]
- …
Meafaigaluega Manaomia mo BNG
E mana'omia e le Broadband Network Gateway mea nei
meafaigaluega:
- Manaoga 1: [Faamatalaga]
- Manaoga 2: [Faamatalaga]
- …
BNG Felagolagomai
O le Broadband Network Gateway ua mamanuina ina ia fegalegaleai
fa'atasi ai ma masini feso'ota'iga eseese ma fa'atonuga. Mo fa'apitoa
fa'amatalaga i le felagolagoma'i, va'ai i fa'amaumauga na tu'uina mai e
Cisco.
BNG Smart Licensing
E lagolagoina e le Broadband Network Gateway le Smart Licensing, lea
e mafai ai ona fetu'una'i le pulega o laisene ma le fa'agaoioia. Mo nisi
fa'amatalaga ile Smart Licensing, va'ai ile fa'amaumauga o lo'o tu'uina atu
saunia e Cisco.
FAQ
F: O tuatusi IP ma numera telefoni i totonu o le pepa
moni?
A: Leai, o tuatusi IP ma numera telefoni o loʻo faʻaaogaina i le pepa
e le moni ma e fa'amoemoe mo na'o fa'ata'ita'iga.
F: O fea e mafai ona ou maua ai le lomiga lata mai o lenei pepa?
A: Ole lomiga lata mai o lenei pepa e mafai ona maua ile Cisco
webnofoaga. Fa'amolemole fa'afeso'ota'i le feso'ota'iga ua tu'uina atu mo le fa'amatalaga sili ona lata mai
lomiga.
F: E iai ni mea e mana'omia mo le fa'aogaina o le Broadband
Network Gateway?
A: Ioe, o le Broadband Network Gateway o loʻo i ai meafaigaluega faʻapitoa
manaoga. Fa'amolemole va'ai i le “Mea Fa'atonu Manaoga mo BNG”
vaega i lenei pepa mo nisi fa'amatalaga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x
Muamua Lolomi: 2017-03-17 Mulimuli Suia: 2017-07-14
Amerika Laumua
Cisco Systems, Inc. 170 Sisifo Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000
800 553-NETS (6387) Fax: 408 527-0883
O FA'AMATALAGA MA FA'AMATALAGA E UIGA I O'O'OGA O LO'O I LENEI TUSI LELEI E FA'AMATALAGA E SUIA E A'OA'OGA. O FA'AMATALAGA UMA, FA'AMATALAGA, MA FAUTUAGA I LENEI tusi ta'iala e talitonuina e sa'o ae o lo'o tu'uina atu e aunoa ma se fa'amaoniga o so'o se ituaiga, fa'aalia pe fa'aali. E TATAU IA TAGATA TAGATA FA'A'OGA E FA'AMATALAGA ATO'O MO LATOU FA'A'OGA O SO'O SE O'OGA.
O LE LAISENE MO FA'AOGAGA MA LE FA'AVAE FA'AVAE MO LE O'OGA O'O MAI O LO'O FA'A'OA'OINA I LE FA'AMATALAGA FA'AMATALAGA E FA'A'AI MA LE O'OGA MA O LO'O FA'A'O'O'I IAI I LE FA'ASA'IGA. AFAI E LE MAFAI ONA E SU'I LE LAISENE SOFTWARE PO'O LE FA'AMANATU FA'ATA'ITA'I, FA'ASA'I LOU SU'I CISCO MO SE KOPI.
O le fa'atinoina e Cisco o le TCP header compression o se fetuutuuna'iga o se polokalame na atia'e e le Iunivesite o Kalefonia, Berkeley (UCB) e avea o se vaega o le UCB's public domain version of the UNIX operating system. Ua taofia aia tatau uma. Puletaofia © 1981, Regents o le Iunivesite o Kalefonia.
E ui i lea i so'o se isi fa'amaoniga ii, o pepa uma FILES MA SOFULEGA A NEI FAIGA FAAVAE E TUUINA “E PEI AI” MA FAIGA UMA. O LE CISCO MA LE FA'A'OA'OGA O LO'O TAGATA I LUGA UA TA'E FA'AVAE UMA, FA'A'ALI'INA PO'O LE FA'AALIGA, E aofia ai, e aunoa ma se tapula'a, mea e mafai ona fa'atau, talafeagai mo se fa'amoemoega fa'apitoa ma le leai o se soliga po'o le tula'i mai i se kosi fa'atau, fa'atau.
E LEAI SE MEA E TATAU AI LE CISCO PO O ANA FAIA TOTONU MO SO'O SE FA'AMATALAGA, FAAPITOA, FAAMATALAGA, PO'O LE FA'AMATALAGA, E aofia ai, e aunoa ma se tapula'a, MA'U'UINA PO'O LE TO'I PO'O LE FA'AFIA'I I FA'AMATALAGA MAI LE FA'AOGANA PO'O LE FA'AMATALAGA I US. PO O LEA UA FAATUATUA I LE AU FAI SAUNIGA I LE AGATONU ONA ONA FAIA FAALEAGA.
So'o se Initaneti Protocol (IP) tuatusi ma numera telefoni o lo'o fa'aogaina i lenei pepa e le'o fa'amoemoe e avea ma tuatusi moni ma numera telefoni. Soo se examples, fa'aaliga fa'atonuga, fa'asologa o feso'otaiga, ma isi fa'atusa o lo'o aofia i totonu o le pepa o lo'o fa'aalia mo na'o fa'ata'ita'iga. So'o se fa'aogaina o tuatusi IP moni po'o numera telefoni i fa'amatalaga fa'ata'ita'iga e le'i fuafuaina ma fa'afuase'i.
O kopi uma ua lolomi ma kopi fa'alua o lenei pepa e manatu e le'o pulea. Va'ai i le fa'ainitaneti o lo'o iai nei mo le fa'amatalaga lata mai.
Cisco e silia ma le 200 ofisa i le lalolagi atoa. O tuatusi ma numera telefoni o lo'o lisiina ile Cisco webnofoaga ile www.cisco.com/go/office.
Cisco ma le Cisco logo o fa'ailoga fa'ailoga po'o fa'ailoga fa'amaufa'ailoga a Cisco ma/po'o ona so'otaga i le US ma isi atunu'u. I view se lisi o faailoga tau Cisco, alu i lenei URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html. O fa'ailoga tau fefa'ataua'iga lona tolu o lo'o ta'ua o meatotino a latou tagata e ona. O le faʻaaogaina o le upu paaga e le faʻaalia ai se mafutaga faʻapaʻaga i le va o Cisco ma soʻo se isi kamupani. (1721R)
© 2017 Cisco Systems, Inc. Ua taofia aia tatau uma.
ISI
TOMUA MATAUPU 1 MATAUPU 2
MATAUPU 3
Upu Tomua xiii Suiga i Lenei Pepa xiii Feso'ota'iga, Auaunaga, ma Fa'amatalaga Faaopoopo xiii
Fou ma Suia BNG Features 1 BNG Features Faʻaopoopo pe Suia ile IOS XR Release 6.2.x 1
O'aview 9 Malamalama i le BNG 10 BNG Architecture 10 BNG matafaioi i ISP Network Models 13 BNG Packaging 14 Faʻapipiʻi ma faʻagaoioia le BNG Pie i luga ole Cisco ASR 9000 Series Router 14 BNG Configuration Process 15 Meafaigaluega Manaoga mo BNG 16 BNG Interoperability 18 BNG Licensing
Fa'atonuga Fa'amaoni, Fa'atagaga, ma Fa'amatalaga Tausitusi 21 Fa'atonuga Fa'amaoni, Fa'atagaga, ma Galuega Tausitusi 22 AAA I lugaview 22 Fa'aaogaina o le RADIUS Server Group 24 Fa'atulagaina o le RADIUS Server Group 24 Fa'ama'oti Lisi o Metotia 26 Fa'atulagaina o Lisi o Metotia mo le AAA 26 Fa'amatalaina o Uiga AAA 28
Ta'iala Fa'atonuga o Feso'ota'iga Feso'ota'iga Fa'asalalau mo Cisco ASR 9000 Fa'asologa Fa'asologa, IOS XR Fa'asalalau 6.2.x iii
Mataupu
Fausia o Uiga o Fa'atonu Fa'apitoa 29 Fa'atulagaina o le Lisi Uiga o le RADIUS 34 Fa'atulagaina o Uiga o le RADIUS 36 Fa'atulagaina o le Uiga o le RADIUS Nas-port-type 37 Fa'atulagaina o le Fa'atulagaina o le Uiga o le AAA 38 Taofi Uiga e le'i tofiaina 39 Faia o le RADIUS Fa'atonuga o le Server 40 Fa'atonuga o le Server Fa'atonuga o le RADIUS 41 Fa'atonuga o le Server 45 Fa'atulagaina o le Tulaga o le RADIUS IP DSCP mo le RADIUS Server 46 Fa'apaleniina o Fefa'ataua'iga Uta i luga o le RADIUS Server 47 Fa'atulagaina o le Paleni o uta mo le Global RADIUS Server Group 48 Fa'atulagaina o le Paleni Uta mo le igoa o le RADIUS Server Group 49 Fa'amauina o Fa'amaumauga RADIUS 50 Fa'atulagaina o le RADIUS Fa'asolo i le lalolagi atoa 51 Fa'atulagaina le Vaega o le RADIUS 52 RADIUS Suiga o Fa'atagaga (CoA) Ua umaview 54 Suiga o Fa'atagaga Fa'atuputeleina 56
Fa'atupuina Fa'amaumauga Tausitusi 57 Avanoa maualuga mo MA-CoA 58 An Example fa'atasi ai ma Poloaiga Fa'amaonia 58 Fa'atapula'a i Suiga Fa'atuputelega o Fa'atagaga 61 Fa'amautuga ma Fa'atagaga a Tagata Fa'aoga i le Feso'ota'iga Fa'alotoifale 62 Fa'atonu Faiga Fa'avae mo Sauniga IPoE 63 Fa'atonu Faiga Fa'avae mo Sauniga PTA 66 Tausitusi Au'aunaga 67 Fa'atonu Fa'amaumauga Tausitusi o Au'aunaga 68 Fuainumera Fa'atonu 71 Fa'amaumauga Fa'amaumauga (Fa'amaumauga Fa'amaumauga ) 71 Malamalama i le Per-VRF AAA Galuega Fa'atino 72 RADIUS Fa'alua-Dip Feature 72 RADIUS i luga o le IPv6 73 Fa'amatalaga Faaopoopo 73
Ta'iala Fa'atonuga o Feso'ota'iga Feso'otaiga Fa'asalalau mo Cisco ASR 9000 Fa'asologa Fa'asologa, IOS XR Fa'asalalauga 6.2.x iv
Mataupu
MATAUPU 4 MATAUPU 5
Fa'agaoioia Faiga Fa'atonu 75 Pulea Faiga Fa'amaloview 75 Fausiaina o Vasega Faafanua 77 Fa'atulagaina o se Vasega Fa'afanua 77 Fausia o Faiga Fa'avae-Map 78 Fa'atonu Faiga Fa'avae 79 Fa'atulagaina o Faiga Fa'avae 80 Fa'agaoioia Fa'avae-Fa'afanua 82 Fa'aagaagaina o se Au'aunaga-Faiga Fa'avae i luga o le Fa'asalalauga Fa'asalalau 82 Fa'amalamalamaina o Fa'ata'ita'iga Fa'aopoopo 83 Fa'amatalaga Faaopoopo 84
Fa'atuina o Sauniga a le Tagata Fa'asalalau 87 Fa'ai'uga o le Sauniga a le Tagata Fa'asalalauview 88 Fa'atuina o le IPoE Session 90 Fa'aagaoioia le IPv4 po'o le IPv6 i luga o se Avanoa Fa'afeso'ota'i 92 Fausiaina o Fa'ata'ita'iga Fa'atonu mo le IPv4 po'o le IPv6 Sauniga a le Tagata Fa'asalalau 93 Fausiaina o se Fa'avae-Fa'afanua e Fa'agasolo I le taimi o le IPoE Session 96 Fa'aagaoioia Tagata fa'aaufa'atau IPoE i luga o se Avanoa Avanoa 97 Fa'aalaa'i CP100init102 Feso'ota'iga DH. Sauniga a le Tagata Fa'asalalau Fa'alaua'itele 104 Sauniga a Tagata Fa'aola Fa'aalalaina 6 Fa'ata'ita'iga Fa'ata'ita'i mo le IPv104 Feso'ota'iga Fa'aalaala 6 Fa'asolo Valaau o le IPv105 Tagata Fa'aola Fa'asolo atu Sauniga 106 Fa'atapula'a mo Sauniga Fa'asalalau Fa'aalaala 107 Fa'atulagaina o Sauniga Fa'asalalau Fa'aalaala 109 Fa'asao le Fa'a-Asoasoani Fa'agasolo 109 Fa'asagaga ARP Fa'asagaga Fa'aletonu Tali 110 Fa'atuina PPPoE Sauniga 111 Tuuina atu PPP PTA Sauniga XNUMX Fausia PPPoE Profiles 111 Fausiaina o se PPP Dynamic-Template 113 Fausiaina o se Faiga Fa'avae-Fa'afanua e fa'agasolo i le taimi o le PPPoE Sauniga 114
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.xv
Mataupu
Fa'aogaina o Fa'atonuga PPPoE i se Feso'ota'iga Avanoa 116 Tu'uina atu PPP LAC Session 118
Fa'atulaga le VPDN Fa'ata'ita'iga 119 Fa'atulagaina o Sauniga VPDN Tu'ufa'atasi 121 Fa'agaoioia VPDN Logging 123 Fa'atulagaina o Filifiliga e Fa'aoga ile Calling Station ID 124 Fa'atonu L2TP Session-ID Poloaiga 125 Fa'atonu L2TP Vasega Filifiliga 126 Fa'atonu L129TP Vasega Options 2 Fa'atonu LVPDN130Fu'upu Options Access Concentrator Stateful Suiga 2 Fa'alotoifale VPDN RADIUS Fa'aleleia 131 PPPoE Smart Server Filifilia 134 Fa'atonu PADO Fa'atuai 137 PPPoE Tapula'a Fa'atonu, Fa'ato'a ma I-vaalele-fa'amalama 138 PPPoE Fa'atapula'a o Sauniga 139 PPPoE Session Throttle 139 PPPoE Fa'asalalauga Fa'asalalauga I-flight-flight PPPoE Fa'aulu i totonu-flight PPPoE Feso'ota'iga Pe a Amata le IPv142 144 Fausia le Fa'ata'ita'iga Fa'agasolo mo le Fa'aagaoioia o le Fa'asalalauga Fa'asalalau IPv6 i luga o le IPv4 Susbscriber Interface 144 Faia o Fa'atonuga DHCP 6 Fa'agaoioi le DHCP Proxy 4 Fa'atonu le DHCP IPv144 Profile Vasega Proxy 147 Fa'atulagaina o se Circuit-ID mo se Feso'ota'iga 149 Fa'atulagaina o se ID Mamao 150 Fa'atulagaina o le Taimi Lisi 151 Fa'apipi'i o se Proxy Profile i se Feso'ota'iga 152 DHCPv4 Server 153 Fa'agaoioi le DHCP Server 154 Fa'atulagaina le DHCPv4 Server Profile 154 Fa'ama'oti le tapula'a lisi a le DHCP 157 Fa'ama'oti le tapula'a lisi mo se ID-Si'o 157 Fa'ama'oti le tapula'a lisi mo se ID Mamao 158
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x vi
Fa'ama'oti le tapula'a lisi mo se Feso'ota'iga 160 Malamalama i le DHCP Filifiliga-82 161
Filifiliga 82 Fa'asalalau Fa'amatalaga Fa'amaufa'ailoga 161 Fa'atulagaina DHCPv4 Vasega o Au'aunaga (CoS) 162 Auina Atu Filifiliga DHCP Mauoa mai le RADIUS i le DHCP Server 162
Fa'atonu Filifiliga DHCP Mauoa i luga ole RADIUS VSA 165 Filifiliga DHCP 60 Filifiliga 166
Fa'atulaga le DHCP Filifiliga 60 Fa'amama 167 DHCP RADIUS Proxy 168 Tagata Fa'asoa Sauniga-Toe Toe amata 169 DHCP Session MAC Throttle 169 Fa'ataga-gai mo Sauniga IP Faigofie 170
Tapula'a mo IP Faigofie Fa'ataga-mo'i 171 DHCP Fa'aluaina MAC Session 171
DHCP Fa'aluaina MAC Sauniga Fa'atasi ma Va'ai VLAN Filifiliga 171 Fa'atulaga le DHCP Fa'alua MAC Sauniga 173 DHCPv6 Ovaview 176 DHCPV6 server ma DHCPV6 Statxy 177 Faʻatumu DHCPV6 mo le faʻatulagaina o polokalame 177 o le DEPCPV6 DEPVICTER COVERCED 181 IPD Poe lesitala Lagolago 6 Lagolago VLAN Ambiguous 183 DHCPv6 Address po'o Prefix Pool 183 DHCPv6 Dual-Stack Lite Support 184 VRF Awareness in DHCPv6 184 DHCP Options Support for BNG DHCPv6 Proxy Mode 184 Configurable DHCPv6 Option 192 198 Fa'asinomaga DHCPv6 Option 201 6 Fa'atauga Fa'atauga 206 6 Feso'ota'i Fa'ataulima Packet
Mataupu
Ta'iala Fa'atonuga o Feso'ota'iga Feso'ota'iga Tele mo Cisco ASR 9000 Fa'asologa Fa'asologa, IOS XR Fa'asalalauga 6.2.x vii
Mataupu
MATAUPU 6
IPv6 Neighbor Discovery 213 Laina Card Subscribers 214
Fegalegaleaiga i fafo mo le au fai saofaga LC 214 Faamanuiaga ma Tapula'a o le au fai pepa o laina laina 215 Avanoa maualuga mo le au fa'atau pepa o laina laina 215 Sauniga Tuto'atasi 216 Fa'atapula'a mo sauniga le tumau 217 Fa'atapula'a o Sauniga a le Tagata Fa'asalalau 217 Fa'ata'ita'iga a le Tagata Fa'asalalau BNG 218 Fa'aaliga Lagolago mo Fa'atonu Fa'aola BNG o Fa'ata'ita'iga a le Aufaitala BNG 219 eBGP i luga o le PPPoE 219 BNG i luga o le Pseudowire Headend 220 QoS i luga o le BNG Pseudowire Headend 220 Features Lagolago mo le BNG i luga ole Pseudowire Headend 221 Le Lagolagoina ma Fa'atapula'a mo BNG i luga ole Pseudowire Headend 221 Fa'asilisili PPPo222 Fa'aulutalatala Faaopoopo 223 Fa'asoa
Fa'atinoina o le Tulaga Lelei o Au'aunaga (QoS) 227 Tulaga Lelei o Au'aunagaview 227 Fa'atulagaina o faiga fa'avae Au'aunaga ma le fa'aogaina o Fa'atonuga a le Tagata Fa'asalalau e ala i le RADIUS 228 Fa'atulagaina o Faiga Fa'avae Au'aunaga ma le Fa'aogaina o Fa'atonu a le Tagata Fa'asalalau e ala ile Dynamic Template 230 Parameterized QoS 233 Parameterized QoS Syntax. 234 Fa'atulagaina o le QoS Fa'ata'atia e fai ma 'au'aunaga ta'avale 238 Fa'amaonia le Fa'atonuga o le PQoS 241 Fa'atonu Fa'atatau ile RADIUS – Fa'ata'atiaga ole QoS Shaper 243 Sample Fa'atulagaina ma le fa'aogaina o tulaga mo le QoS Shaper Parameterization 248 Fa'amaoniga o le QoS Shaper Parameterization Fa'atonu 249
Ta'iala Fa'atonuga o Feso'ota'iga Feso'otaiga Fa'asalalau mo Cisco ASR 9000 Fa'asologa Fa'asologa, IOS XR Fa'asalalauga 6.2.x viii
Mataupu
MATAUPU 7 MATAUPU 8
Lagolagoina o le QoS Shaper Parameterization 251 Fa'atapula'a o le QoS Shaper Parameterization 251 QoS Accounting 252 Fa'atulagaina o le QoS Accounting 253 Lagolago mo Faiga Fa'asoa Fa'ata'ita'iga 255 Fa'atulagaina o se Faiga Fa'avae ma le SPI i le Input po'o le Output Direction i le Fa'aaogaina o le Dynamic Template 256 Fa'atulagaina o se Faiga Fa'avae. Fa'atonuga o le Fa'aaogāina o le RADIUS 259 Fa'apipi'iina o Faiga Fa'avae-fa'afanua 261 Fa'agaoioi Faiga-fa'afanua Fa'atasi 262 QoS Features Lagolago i luga ole BNG 266 VLAN Faiga Fa'avae i luga ole Avanoa Fa'afeso'ota'i 270 Fa'atonu Faiga Fa'avae ile S-VLAN 271 Fa'atonu VLAN Faiga Fa'avae i luga ole Avanoa Va'aiga Fa'atonu 272 Tele Vasega Lagolago mo Ingres. mo Tagata Fa'asalalau 274 Fa'avae Matua Matua Fa'avae 275 Fa'amatalaga Fa'aopoopo 276
Fa'atulagaina o Fa'ailoga Tagata Faitala 277
BNG Geo Redundancy 353 Geo Redundancy Umaview 354 Subscriber Redundancy Group (SRG) 355 Session Distribution Across SRG 356 Benefits of BNG Geo Redundancy 358 Lagolago Features in BNG Geo Redundancy 359 BNG Geo Redundancy Configuration Guidelines 360 Set up BNG Subscriber Redundancy Group e Fa'aaoga e le Vaega Redundancy Redundancy 362ncy Redundancy 363 Fa'atulagaina ma le fa'amaonia o le fa'atupuina o le Sauniga mo le DHCPv6 Clients 365 Puleaina o Vaega Fa'aleaogaina o Sauniga 372 Fa'atulagaina ma le Fa'amaoniaina o le Fa'atupuina o le Sauniga mo IPv6 ND Clients 373 Geo Redundancy mo PPPoE Sessions 380 PPPoE-LAC Session Suiga o PPPoE-LAC381 Redunda381 Suiga o le PPPoE-LACXNUMX RedundaXNUMX Suiga o le PPPoE-LACXNUMX RedundaXNUMX.
Ta'iala Fa'atonuga o Feso'ota'iga Feso'ota'iga Fa'asalalau mo Cisco ASR 9000 Fa'asologa Fa'asologa, IOS XR Fa'asalalau 6.2.x ix
Mataupu
MATAUPU 9 FAAOPOOPOGA A
BNG Geo Redundancy ma Satellite 383 Fa'atulaga BNG Geo Redundancy ma Cisco NCS 5000 Series nV Satelite 384
Geo Redundancy Features 385 Peer Route Disable 385 Active-active Session Support for Geo Redundancy 386 State Control Route for Geo Redundancy 387 Fa'atonu le Setete Pulea Auala mo Geo Redundancy 388 Subscriber Redundancy Group Revertive Timer 389 Subscriber Redundancy Group-aware IPv6 Neighbory Discovery -Ta'avale Fe'avea'i a tupulaga ma le BNG Geo Redundancy 389 Fa'amatalaga Fa'amatalaga Fa'aoso mo Geo Redundancy 390
Fa'ata'ita'iga Fa'atino mo BNG Geo Redundancy 391
DIAMETER Lagolago i BNG 393 DIAMETER Ovaview 393 DIAMETER Interface i BNG 394 Lagolago DIAMETER Savali Fa'avae 395 DIAMETER NASREQ Talosaga 396 DIAMETER Accounting 398 DIAMETER Gx ma Gy Talosaga 398 DIAMETER DCCA Fa'aoga 400 BNG DIAMETER Fa'asolo Valaau 400 Ta'iala ma Fa'atonuga i B DIAMETER401 Fa'atonuga i B DIAMETER402 Fa'atonuga AAA mo le DIAMETER Peer i le BNG 407 Fa'amaoniga o le DIAMETER Configuration i le BNG 410 BNG DIAMETER-Geo Redundancy Felagolagomai 415 BNG DIAMETER-Geo Redundancy Fa'asolo Valaau 416 Fa'amaonia le BNG DIAMETER-Geo Redundancy 419 Fa'amatalaga Faaopoopo 422
XML Lagolago mo BNG Features 425 AAA XML Lagolago 425 DHCP XML Lagolago 428
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.xx
FAAOPOOPOGA B
FAAOPOOPOI C FAAOPOOPOGA D
Pulea Faiga Faavae XML Lagolago 431 DAPS XML Lagolago 434 PPPoE XML Lagolago 435 Subscriber Database XML Lagolago 437
Uiga RADIUS 443 UIGA IETF RADIUS 443 IETF Tagged Uiga ile LAC 445 RADIUS Uiga Fa'apitoa Fa'atau 446 Uiga Fa'atau-Fa'atau mo Fa'agaioiga Fa'amatalaga 451 Uiga RADIUS ADSL 451 RADIUS ASCEND Uiga 452 RADIUS Uiga Microsoft 452 RADIUS motusia-Mafuaaga Uiga 453
Fa'atonu Fa'atino 459
BNG Fa'aoga Tulaga ma Sample Configurations 461 BNG i luga ole Pseudowire Headend 461 Sample Topology mo le BNG i luga ole Pseudowire Headend 461 Fa'ata'ita'iga Fa'ata'ita'iga mo Tagata Fa'asoa ile Pseudowire Headend 462 Nofonofo i luga ole Pseudowire Headend 462 Nofo ma Pisinisi i luga ole Pseudowire Headend 463 Fa'atulagaina ma le Fa'amaonia ole BNG ile Pseudowire Headend 464 Sample Fa'atonuga mo BNG i luga ole Pseudowire Headend 466 Ta'ilua-Stack Subscriber Sessions 468 IP Address Tofiga mo Tagata Fa'atau 468 Sample IPv6 Addressing and Configuration 469 IPv6 Address Mapping 469 CPE Configuration 469 DHCPv6 Server Configuration 470 Fa'agaioiga ma Valaau Fa'asologa o Ta'ilua-Stack Sessions 470 Va'aiga Fa'atuputeleina o Ta'ilua-Stack Session 470 Fa'amatalaga Fa'amatalaga Fa'amatalaga - PPPoE471 Dual-Stack.
Mataupu
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x xi
Mataupu
FAAOPOOPO E
Faʻamatalaga Faʻamatalaga Faʻamatalaga - IPoE Dual-Stack 473 Sample Topology mo Dual-Stack 474
Fa'atonu Examples mo le Lua-Stack 474 Laasaga Fa'amaonia mo le Lua-Stack 477 eBGP i luga ole PPPoE 477 Sample Topology mo le eBGP i luga o le PPPoE 477 Fa'atonuga ma le fa'amaoniga o le eBGP i luga o le PPPoE 478 Sample Fa'atonuga mo le eBGP i luga o le PPPoE 480 Sauniga a le Tagata Fa'asalalau Fa'aalaala 486 Fa'asinomaga Fa'atonu Fa'asologa o Tulaga ma Fa'aoga 486 Sample Fa'atonuga mo le Sauniga Fa'asalalau Fa'asalalau 487 Fa'amaoniga o Fa'atonuga o Sauniga Fa'asalalau Fa'asalalau 489
Uiga DIAMETER 497 BNG DIAMETER Gx Application AVPs 497 BNG DIAMETER Gy Application AVPs 499 BNG DIAMETER NASREQ Application Cisco AVPs 500 DIAMETER Accounting AVP 503 DIAMETER Session-Id AVP 504 RADIUS Uiga i DIAMETER Messagesample Pa'u mo BNG DIAMETER Feau 506
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x xii
Upu Tomua
Manatua O lenei oloa ua o'o i le tulaga e gata ai le olaga. Mo nisi fa'amatalaga, va'ai le Fa'aaliga Fa'ai'uga o le Ola ma Fa'asilasilaga Fa'ai'uga.
Mai le Fa'asalalauga 6.1.2 i luma, ua fa'alauiloa e Cisco le lagolago mo le 64-bit Linux-based IOS XR operating system. O lo'o fa'atumauina le fa'atusa fa'apitoa i le va o le 32-bit ma le 64-bit si'osi'omaga. Se'i vagana ua fa'ailoga manino i se isi itu, o mea o lo'o i totonu o lenei pepa e talafeagai mo si'osi'omaga uma e lua. Mo nisi faʻamatalaga ile Cisco IOS XR 64 bit, faʻasino ile Faʻamatalaga Faʻamatalaga mo Cisco ASR 9000 Faʻasologa Faʻasologa, Faʻasalalau 6.1.2 pepa.
O lenei upu tomua e aofia ai vaega nei:
· Suiga i Lenei Pepa, i le itulau xiii · Fesootaiga, Auaunaga, ma Faamatalaga Faaopoopo, i le itulau xiii
Suiga i Lenei Pepa
Aso Mati 2017 Iulai 2017
Aotelega Fa'alauiloa muamua o lenei pepa. Toe lomia mo le Fa'asalalauga 6.2.2.
Feso'ota'iga, Au'aunaga, ma Fa'amatalaga Faaopoopo
· Ina ia maua faʻamatalaga talafeagai mai Cisco, saini i Cisco Profile Pule. · Ina ia maua le aafiaga o pisinisi o loʻo e sailia i tekinolosi e taua, asiasi Cisco Services. · Ina ia tuʻuina atu se talosaga tautua, asiasi Cisco Support. · Ina ia su'esu'e ma su'esu'e fa'aoga saogalemu, fa'amaonia-vasega atina'e, oloa, fofo ma auaunaga, asiasi
Cisco Maketi. · Mo le mauaina o fesoʻotaʻiga lautele, aʻoaʻoga, ma suafa faʻamaonia, asiasi Cisco Press. · Ina ia maua faʻamatalaga faʻamaonia mo se oloa faʻapitoa poʻo se aiga oloa, faʻaoga Cisco Warranty Finder.
Ta'iala Fa'atonuga o Feso'ota'iga Feso'ota'iga Fa'asalalau mo Cisco ASR 9000 Fa'asologa Fa'asologa, IOS XR Fa'asalalauga 6.2.x xiii
Upu Tomua
Upu Tomua
Cisco Bug Search Tool Cisco Bug Search Tool (BST) o se web-e fa'avae meafaigaluega e fai ma faitoto'a i le Cisco bug tracking system o lo'o tausia ai se lisi atoatoa o fa'aletonu ma fa'aletonu i Cisco oloa ma polokalama. E tu'uina atu e le BST ia oe fa'amatalaga au'ili'ili fa'aletonu e uiga i au oloa ma polokalame.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x xiv
1 LE MATAUPU
Fa'ailoga BNG Fou ma Suia
O lenei laulau o loʻo aoteleina ai faʻamatalaga fou ma suia mo le Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, ma taʻu atu ia te oe le mea o loʻo tusia ai.
· BNG Features Faʻaopoopo poʻo Suia i le IOS XR Release 6.2.x, i le itulau 1
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'aaliga
Fa'amatalaga
BNG lagolago i le Cisco O lenei vaega o le ASR 9000 Series 24-Port na faʻalauiloaina. ma 48-Port Dual-Rate 10GE/1GE Line Cards
BNG Geo Redundancy O lenei vaega sa
ma Satelite
folasia.
Suia ile Fa'asa'olotoga 6.2.2
Fa'asalalau 6.2.2
O Fea ua Faamauina
O'aview mataupu:
O'aview, i le itulau e 9
BNG Geo Redundancy mataupu:
BNG Geo Redundancy ma Satelite, i le itulau 383
Mo faʻatonuga, vaʻai i le Subscriber and Session Redundancy Commands chapter in Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 1
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'ailoga BNG Fou ma Suia
Fa'aaliga
Filifiliga DHCPv6 Fa'atonu 17
Fa'amatalaga
O lenei vaega na faʻalauiloaina.
Unconditional Proxy ARP O lenei vaega sa
Tali
folasia.
Suia ile Fa'asa'olotoga 6.2.1
Fa'asalalau 6.2.1
O Fea ua Faamauina
Fa'atuina o Sauniga a le Tagata Fa'asalalau mataupu:
Fa'atonu DHCPv6 Filifiliga 17, i le itulau 211
Va'ai le BNG DHCP Poloaiga mataupu i Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Fa'atuina o Sauniga a le Tagata Fa'asalalau mataupu:
Unconditional Proxy ARP Response, i le itulau 109
Va'ai le Subscriber and Session Redundancy Commands chapter in Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo fa'amatalaga i luga o poloaiga e feso'ota'i ma lenei vaega.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 2
Fa'ailoga BNG Fou ma Suia
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'aaliga
Fa'amatalaga
Suia i le Fa'asa'oloto
Fa'atasiga IGMP QoS mo le aufaipisinisi IPoE
O le IGMP QoS Correlation feature na fa'alauteleina i le aufaipisinisi IPoE.
Fa'asalalau 6.2.1
Femalaga'iga Vaivai vaivai DHCP
O lenei vaega na faʻalauiloaina.
Fa'asalalau 6.2.1
SNMP Lawful Intercept O lenei vaega sa
Fa'aaogaina o le Circuit-Id
folasia.
Fa'asalalau 6.2.1
O Fea ua Faamauina
Fa'atulagaina o vaega o mea e fai a le aufaitala:
IGMP QoS Correlation mo IPoE Subscribers, itulau 316
Va'ai le Subscriber and Session Redundancy Commands chapter in Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo fa'amatalaga i luga o poloaiga e feso'ota'i ma lenei vaega.
Fa'atuina o Sauniga a le Tagata Fa'asalalau mataupu:
DHCP Soft Pool Migration, i le itulau 204
Vaʻai le tuatusi Pool Service Poloaiga mataupu i Cisco ASR 9000 Faasologa Aggregation Auaunaga Router Broadband Network Gateway Poloaiga Faʻamatalaga, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Fa'atulagaina o vaega o mea e fai a le aufaitala:
SNMP Lawful Intercept Use Circuit-Id, itulau 295
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 3
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'ailoga BNG Fou ma Suia
Fa'aaliga
Fa'amatalaga
Lagolago Vasega Tele mo Ingress Police mo Tagata Fa'atau
O lenei vaega na faʻalauiloaina.
Puleaina o Fuafuaga a le Aufaitalafu i le Fa'aaogaina o Filifiliga Fa'akomepiuta
O lenei vaega na faʻalauiloaina.
Suia ile Fa'asa'olotoga 6.2.1
Fa'asalalau 6.2.1
O Fea ua Faamauina
Fa'atulagaina le Tulaga Tulaga Au'aunaga (QoS) mataupu:
Lagolago Vasega Tele mo Ingress Policing mo Tagata Fa'asalalau, itulau 274
Va'ai le QoS Poloaiga mataupu i Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Fa'atulagaina o vaega o mea e fai a le aufaitala:
Puleaina o Fuafuaga a le Aufaitalafu i le Fa'aaogaina o Filifiliga Fa'akomepiuta, ile itulau 350
Vaʻai le Subscriber ma le Sauniga Redundancy Poloaiga mataupu ma Pule Faiga Faavae Poloaiga i Cisco ASR 9000 Faasologa Aggregation Auaunaga Router Broadband Network Gateway Poloaiga Faʻamatalaga, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 4
Fa'ailoga BNG Fou ma Suia
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'aaliga
Fa'asologa o le tuatusi MAC fou mo le RADIUS User-name Attribute
Fa'amatalaga
Suia i le Fa'asa'oloto
O se tuatusi MAC fou Fa'asa'olotoina 6.2.1 fa'atulagaina mo le RADIUS User-name Attribute.
Fa'avae Matua Matua Fa'avae
O lenei vaega na faʻalauiloaina.
Fa'asalalau 6.2.1
O Fea ua Faamauina
Fa'atulagaina o le Fa'amaoni, Fa'atagaga, ma Galuega Tausitusi mataupu:
Fausia o Uiga Fa'apitoa, i le itulau 29
Vaʻai le BNG AAA Poloaiga mataupu i Cisco ASR 9000 Faasologa Aggregation Auaunaga Router Broadband Network Gateway Poloaiga Faʻamatalaga, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Fa'atulagaina le Tulaga Tulaga Au'aunaga (QoS) mataupu:
Fa'avae Matua Matua Fa'avae, ile itulau 275
Va'ai le QoS Poloaiga mataupu i Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 5
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'ailoga BNG Fou ma Suia
Fa'aaliga
Fa'amatalaga
PPP Vasega DHCPv6 O lenei vaega sa
Filifiliga Faiga
folasia.
Global PPPoE BBA-Vaega
O lenei vaega na faʻalauiloaina.
Suia ile Fa'asa'olotoga 6.2.1
Fa'asalalau 6.2.1
O Fea ua Faamauina
Fa'atuina o Sauniga a le Tagata Fa'asalalau mataupu:
Filifiliga Fa'atusa DHCPv6 Fa'avae Vasega PPP, i le itulau 183
Va'ai le BNG DHCP Poloaiga mataupu i Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Fa'atuina o Sauniga a le Tagata Fa'asalalau mataupu:
PPPoE Session Limit, i le itulau 139
Va'ai le PPPoE Poloaiga mataupu i Cisco ASR 9000 Faasologa Aggregation Auaunaga Router Broadband Network Gateway Poloaiga Faʻamatalaga, mo faʻamatalaga i luga o poloaiga e fesoʻotaʻi ma lenei vaega.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 6
Fa'ailoga BNG Fou ma Suia
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'aaliga
Fa'amatalaga
Geo Redundancy fa'aaoga SERG mo IPv6 ND Clients
O lenei vaega na faʻalauiloaina.
Geo Redundancy fa'aaoga SERG mo DHCPv6 Clients
O lenei vaega na faʻalauiloaina.
VPDN fa'apitonu'u mo LAC O lenei fa'aaliga na fa'aalia.
Suia ile Fa'asa'olotoga 6.2.1
Fa'asalalau 6.2.1
Fa'asalalau 6.2.1
O Fea ua Faamauina
BNG Geo Redundancy mataupu:
Fa'atulagaina ma le fa'amaonia o le toe faia o le Sauniga mo IPv6 ND Clients, i le itulau 373
Va'ai le Subscriber and Session Redundancy Commands chapter in Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo fa'amatalaga i luga o poloaiga e feso'ota'i ma lenei vaega.
BNG Geo Redundancy mataupu:
Fa'atulagaina ma le fa'amaonia o le fa'agaoioiga o Sauniga mo DHCPv6 Clients, i le itulau 365
Va'ai le Subscriber and Session Redundancy Commands chapter in Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, mo fa'amatalaga i luga o poloaiga e feso'ota'i ma lenei vaega.
Fa'atuina o Sauniga a le Tagata Fa'asalalau mataupu:
Fa'alotoifale VPDN RADIUS Enhancement, i le itulau 134
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 7
BNG Features Faʻaopoopo pe Faʻafouina ile IOS XR Faʻasalalau 6.2.x
Fa'ailoga BNG Fou ma Suia
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 8
2 LE MATAUPU
O'aview
O lenei mataupu o loʻo tuʻuina atu se faʻamatalagaview o le Broadband Network Gateway (BNG) galuega faatino faatino i le Cisco ASR 9000 Faasologa Router.
Laulau 1: Tala Fa'asolopito o Feso'otaiga Broadband Gateway Overview
Fa'asalalauga 4.2.0 Fa'asalalauga 5.3.3 Fa'asalalauga 6.1.2
Suiga Fa'alauiloa muamua ole BNG. Ua faaopoopo le lagolago RSP-880. Faʻaopoopo le BNG lagolago mo nei meafaigaluega:
· A9K-8X100G-LB-SE · A9K-8X100GE-SE · A9K-4X100GE-SE · A9K-MOD200-SE · A9K-MOD400-SE · A9K-MPA-1x100GE · A9K-MPA-2x100GE-A9Kx-20GE-10xXNUMXGE
Fa'asalalauga 6.1.2 Fa'asalalauga 6.1.2 Fa'asalalauga 6.2.2 Fa'asalalauga 6.2.2
Faʻaopoopoina le lagolago a le BNG mo le faʻaogaina o le Cisco NCS 5000 Series Router o se satelite.
Fa'aopoopoina le BNG atamai fa'ailoga laisene.
Faʻaopoopo le lagolago mo BNG Geo Redundancy i luga ole Cisco NCS 5000 Series Router satelite.
Faaopoopo le lagolago a le BNG mo meafaigaluega nei: · A9K-48X10GE-1G-SE · A9K-24X10GE-1G-SE
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 9
Malamalama BNG
O'aview
· Malamalama i le BNG, i le itulau 10 · BNG Architecture, i le itulau 10 · BNG Role in ISP Network Models, i le itulau 13 · BNG Packaging, i le itulau 14 · BNG Configuration Process, i le itulau 15 · Meafaigaluega Manaomia mo BNG, i le itulau 16 · BNG Interoperability, i le itulau 18 · BNG Smart Licensing, i le itulau 19
Malamalama BNG
Broadband Network Gateway (BNG) o le avanoa lea mo le au fai saofaga, lea latou te fesoʻotaʻi ai i le fesoʻotaʻiga lautele. A fa'amauina se feso'ota'iga i le va o le BNG ma le Tagata Fa'atau Meatotonu (CPE), e mafai e le tagata fai saofaga ona fa'aogaina auaunaga tau feso'ota'iga lautele e saunia e le Network Service Provider (NSP) po'o le Internet Service Provider (ISP). BNG fa'atūina ma fa'atautaia sauniga a le au fai saofaga. A fa'agaoioi se sauniga, e fa'apotopotoina e le BNG fefa'ataua'iga mai vasega eseese o le au fai saofaga mai se feso'ota'iga avanoa, ma fa'asalalau atu i le feso'ota'iga a le au'aunaga. BNG o loʻo faʻapipiʻiina e le kamupani e tuʻuina atu auaunaga ma o loʻo i ai i le vaega muamua faʻapipiʻi i le fesoʻotaʻiga, e pei o le router pito. O se alalaupapa pito, e pei o le Cisco ASR 9000 Series Router, e manaʻomia ona faʻatulagaina e fai ma BNG. Talu ai ona o le tagata fai saofaga e feso'ota'i sa'o i le alalaupapa pito, e pulea lelei e le BNG le avanoa o le au fai saofaga, ma galuega tau pulega e pei o:
· Fa'amaoni, fa'atagaga ma fa'amaumauga o fa'asalalauga a le au fai saofaga
· Tulaga tofi
· Puipuiga
· Pulea faiga faavae
· Tulaga Au'aunaga (QoS)
O nisi o fa'amanuiaga o le fa'aogaina o le BNG o le: · E le gata ina fa'atino e le router BNG le galuega fa'ata'ita'i ae fa'afeso'ota'i fo'i ma le fa'amaoni, fa'atagaina, ma le su'ega (AAA) e fa'atino ai le fa'atonuga o sauniga ma galuega tau pili. O le mea lea e sili atu ai le malamalama o le fofo BNG.
· Eseese tagata fai saofaga e mafai ona tuʻuina atu auaunaga fesoʻotaʻiga eseese. Ole mea lea e mafai ai e le au'aunaga ona fa'avasegaina le afifi broadband mo tagata fa'atau ta'itasi e fa'atatau i o latou mana'oga.
BNG Architecture
O le sini o le BNG architecture o le mafai lea e le BNG router ona fegalegaleai ma masini fa'apitonu'u (pei o le CPE) ma 'au'aunaga (pei o le AAA ma le DHCP), ina ia mafai ai ona tu'uina atu feso'ota'iga alalaupapa i tagata fai saofaga ma fa'atautaia sauniga a le au fai saofaga. O le fausaga faavae BNG o loʻo faʻaalia i lenei ata.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 10
O'aview Ata 1: BNG Architecture
BNG Architecture
O le fausaga o le BNG ua mamanuina e faatino ai galuega nei: · Feso'ota'i ma le Tagata Fa'atau Fale (CPE) e mana'omia ona tu'uina atu auaunaga tau feso'ota'iga lautele. · Fa'atuina sauniga a le au fai saofaga e fa'aaoga ai IPoE po'o PPPoE protocols. · Fegalegaleai ma le AAA server e faʻamaonia ai le au fai saofaga, ma tausia se tala o sauniga a le au fai saofaga. · Fegalegaleai ma le DHCP server e tuʻuina atu tuatusi IP i tagata faʻatau. · Fa'asalalauga ala o le au fai saofaga.
O galuega e lima a le BNG o lo'o fa'amatala fa'apuupuu i vaega nei.
Fa'afeso'ota'i ma le CPE BNG e feso'ota'i ile CPE e ala ile multiplexer ma le Home Gateway (HG). O le CPE o lo'o fa'atusalia le tautua ta'i tolu i feso'ota'iga, e ta'ua, leo (telefoni), vitiō (set top box), ma fa'amaumauga (PC). E fa'afeso'ota'i masini ta'ito'atasi i le HG. I lenei example, e feso'ota'i le tagata fai saofaga i le feso'ota'iga i luga o se feso'ota'iga Digital Subscriber Line (DSL). O le mea lea, e feso'ota'i le HG ile DSL Access Multiplexer (DSLAM). E mafai ona fa'afeso'ota'i le tele o HG i se DSLAM e tasi e tu'uina atu le fa'aputuga o fefa'atauaiga i le BNG router. O le alalaupapa BNG o lo'o fa'auluina felauaiga i le va o masini fa'aoga mamao (pei o le DSLAM po'o le Ethernet Aggregation Switch) ma le feso'ota'iga e tu'uina atu auaunaga.
Fa'atuina o Sauniga a le Aufaitalafu O tagata fai saofaga ta'itasi (po'o le sili atu, o se talosaga o lo'o fa'aogaina i luga o le CPE) e fa'afeso'ota'i le feso'ota'iga e ala i se sauniga talafeagai. Faʻavae i luga o le faʻaoga faʻaoga, o vasega o le au fai saofaga e faʻavasegaina i ituaiga e lua:
· PPPoE tagata fai saofaga-O le PPP i luga o le Ethernet (PPPoE) fa'aulufaleina sauniga e fa'atūina e fa'aaoga ai le fa'asologa o le point-to-point (PPP) e fa'atautaia i le va o le CPE ma le BNG.
· Fonotaga a le au fai saofaga IPoE–O le IP i luga o le Ethernet (IPoE) fa'aulufaleina sauniga ua fa'avaeina e fa'aaoga ai le IP protocol lea e fa'atautaia i le va o le CPE ma le BNG; Ole tuatusi IP e faia ile fa'aogaina ole DHCP protocol.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 11
BNG Architecture
O'aview
Fegalegaleai ma le RADIUS Server
E fa'alagolago le BNG i se 'au'auna mai fafo o le Fa'amautuga Mamao Va'aiga Fa'aaogā (RADIUS) e tu'uina atu ai galuega fa'amaoni, Fa'atagaga, ma Fa'amatalaga Tausitusi (AAA). I le faagasologa o le AAA, e faʻaogaina e BNG le RADIUS e:
· fa'amaonia se tagata fai saofaga a'o le'i fa'atuina se sauniga a le au fai saofaga
· fa'atagaina le tagata fai saofaga e fa'aogaina auaunaga fa'apitoa po'o punaoa
· siaki le fa'aogaina o feso'ota'iga feso'ota'iga mo fa'amatalaga tau tupe po'o pili
O le RADIUS server o loʻo i ai se faʻamaumauga atoa o tagata fai saofaga uma a se kamupani tuʻuina atu auaunaga, ma tuʻuina atu faʻamatalaga faʻamaumauga a le au fai saofaga i le BNG i foliga o uiga i totonu o feʻau RADIUS. O le BNG, i le isi itu, e tuʻuina atu faʻamatalaga faʻaoga (faʻamatalaga) i le RADIUS server. Mo nisi faamatalaga e uiga i uiga o le RADIUS, tagai i Uiga o le RADIUS, i le itulau 443.
E lagolagoina e le BNG feso'ota'iga ma sili atu ma le tasi le 'au'aunaga RADIUS e fa'aletonu i le toe fa'agaoioiga i le faiga AAA. Mo example, afai o loʻo galue le RADIUS server A, ona faʻatonuina lea e BNG feʻau uma i le RADIUS server A. Afai e leiloa le fesoʻotaʻiga ma le RADIUS server A, e toe faʻafeiloaʻi e le BNG feʻau uma ile RADIUS server B.
I le taimi o fegalegaleai i le va o le BNG ma le RADIUS servers, BNG e faʻatinoina le paleni o uta i se faiga faʻasolosolo. I le faagasologa o le faapaleniina o uta, e auina atu e le BNG talosaga AAA i le RADIUS server A pe afai e iai le bandwidth e fai ai le gaioiga. A leai, o le talosaga e lafo i le RADIUS server B.
Fegalegaleai ma le DHCP Server
E fa'alagolago le BNG ile server ole Dynamic Host Configuration Protocol (DHCP) mo le fa'asoaina o tuatusi ma galuega fa'atulagaina o tagata. E mafai e le BNG ona fa'afeso'ota'i i le sili atu ma le tasi le server DHCP e fa'aletonu i le toe fa'agaoioiga i le faiga o fa'amatalaga. O le DHCP server o loʻo i ai se vaitaele tuatusi IP, lea e tuʻuina atu ai tuatusi ile CPE.
I le taimi o fegalegaleaiga i le va o le BNG ma le DHCP server, BNG e galue o se DHCP relay poʻo DHCP sui.
A'o le DHCP relay, e maua e le BNG fa'asalalauga DHCP mai le tagata o tausia CPE, ma tu'uina atu le talosaga i le DHCP server.
I le avea ai ma sui o le DHCP, o le BNG lava ia e tausia le vaituloto tuatusi e ala i le mauaina mai le DHCP server, ma pulea foi le lisi o tuatusi IP. E feso'ota'i le BNG ile Layer 2 ma le client Home Gateway, ma le Layer 3 ma le server DHCP.
E suia e le DSLAM ia pepa DHCP e ala i le faʻaofiina o faʻamatalaga e iloagofie ai le au fai saofaga. E faʻaogaina e le BNG faʻamatalaga faʻamatalaga faʻapipiʻiina e le DSLAM, faʻapea foʻi ma le tuatusi na tuʻuina atu e le server DHCP, e faʻamaonia ai le tagata fai saofaga i luga o le upega tafailagi, ma mataʻituina le lisi o tuatusi IP.
Fa'asalalauga Fa'asalalau Auala
Mo le faʻatinoga sili ona lelei i fofo faʻataʻitaʻiga lea e faʻasalalau ai e le Border Gateway Protocol (BGP) auala o le au fai saofaga, o le BNG e faʻasalalau le subnet atoa ua tofia i le au fai saofaga e faʻaaoga ai le faʻatonuga o fesoʻotaʻiga i le BGP configuration.
E toe tufatufa atu e le BNG ia ala o tagata fai saofaga na'o fa'aaliga e tu'uina atu ai e le server Radius le tuatusi IP i le tagata fai saofaga ma e leai se auala e iloa ai po'o fea BNG o le a fa'afeso'ota'i e lena tagata fai saofaga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 12
O'aview
Matafaioi a le BNG ile ISP Network Models
Matafaioi a le BNG ile ISP Network Models
O le matafaioi a le BNG o le tuʻuina atu lea o fefaʻatauaiga mai le tagata fai saofaga i le ISP. O le auala e faʻafesoʻotaʻi ai le BNG i le ISP e faʻalagolago i le faʻataʻitaʻiga o le fesoʻotaʻiga o loʻo i ai. E lua ituaiga o faʻataʻitaʻiga fesoʻotaʻiga:
· Tuuina atu o Auaunaga Feso'ota'i, i le itulau e 13 · Avanoa Fa'asoa feso'ota'iga, i le itulau e 13
Feso'ota'iga Au'aunaga Tu'uina atu O lo'o fa'aalia le ata o lo'o i lalo le topology o se fa'ata'ita'iga a le Au'aunaga Tau feso'ota'iga.
Ata 2: Fa'ata'ita'iga a le 'au'aunaga o Feso'otaiga
I le fa'ata'ita'iga a le Network Service Provider, o le ISP (e ta'ua fo'i o le fa'atau oloa) e tu'u sa'o mai ai le feso'ota'iga alalaupapa i le tagata fai saofaga. E pei ona faʻaalia i le ata o loʻo i luga, o le BNG o loʻo i le pito o le router, ma o lana matafaioi o le faʻafesoʻotaʻi i le fesoʻotaʻiga autu e ala i luga o luga.
Access Network Provider O le ata o lo'o i lalo o lo'o fa'aalia ai le topology o se fa'ata'ita'iga Access Network Provider.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 13
BNG Packaging Ata 3: Avanoa Fa'ata'ita'iga Fa'asalalauga
O'aview
I le fa'ata'ita'iga a le Access Network Provider, o le telefoni feavea'i (e ta'ua fo'i o le tagata fa'atau oloa) e ana le atina'e o feso'ota'iga pito, ma tu'uina atu le feso'ota'iga alalaupapa i le tagata fai saofaga. Ae ui i lea, e le o iai e le kamupani telefoni le fesoʻotaʻiga lautele. Nai lo lena, e fesoʻotaʻi le telefoni feaveaʻi i se tasi o ISP o loʻo pulea le fesoʻotaʻiga lautele.
O le BNG o loʻo faʻatinoina e le telefoni feaveaʻi ma o lana matafaioi o le tuʻuina atu lea o fefaʻatauaiga o le au fai saofaga i se tasi o le tele o ISP. Ole galuega ole lima, mai le ave taavale ile ISP, o loʻo faʻatinoina e le Layer 2 Tunneling Protocol (L2TP) poʻo le Layer 3 Virtual Private Networking (VPN). L2TP e manaʻomia ni vaega eseese se lua:
· L2TP Access Concentrator (LAC)–O le LAC e saunia e le BNG.
· L2TP Network Server (LNS)–O le LNS e saunia e le ISP.
BNG afifiina
O le pai BNG, asr9k-bng-px.pie e mafai ona faʻapipiʻi ma faʻagaoioia ile Cisco ASR 9000 Series Router e faʻaogaina ai foliga BNG. O le faʻapipiʻiina, aveese, faʻagaoioia ma faʻateʻaina gaioiga e mafai ona faia e aunoa ma le toe faʻafouina o le router.
E fautuaina ina ia aveese faʻasalalauga BNG talafeagai mai le faʻaogaina o le router, aʻo leʻi tapeina pe faʻateʻaina le pai BNG.
Faʻapipiʻi ma faʻagaoioia le BNG Pie ile Cisco ASR 9000 Series Router
Fai lenei galuega e faʻapipiʻi ma faʻagaoioia le pai BNG i le Cisco ASR 9000 Series Router:
LAASAGA AOTELEGA
1. admin 2. fa'apipi'i fa'aopoopo {pie_location | puna | ta}
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 14
O'aview
BNG Fa'asologa Fa'asologa
3. fa'apipi'i fa'agaoioi {pie_name | id}
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga admin ExampLe:
Faamoemoega Ulufale i le faiga pulega.
Laasaga 2
RP/0/RSP0/CPU0:router# admin
fa'apipi'i fa'aopoopo {pie_location | puna | ta} EsoampLe:
Fa'apipi'i le pai mai le nofoaga tftp, agai i le Cisco ASR 9000 Series Router.
Laasaga 3
RP/0/RSP0/CPU0:router(admin)# install add tftp://223.255.254.254/softdir/asr9k-bng-px.pie
fa'apipi'i fa'agaoioi {pie_name | id} ExampLe:
Fa'aagaoioia le pai fa'apipi'i i le Cisco ASR 9000 Fa'asologa Fa'asologa.
RP/0/RSP0/CPU0:router(admin)# fa'apipi'i fa'agaoioia asr9k-bng-px.pie
O le a le isi mea e fai
Faʻaaliga I le taimi o le faʻaleleia mai le Faʻasalalauga 4.2.1 i le Faʻasalalau 4.3.0, e fautuaina e faʻapipiʻi le Cisco ASR 9000 base image pie (asr9k-mini-px.pie) aʻo leʻi faʻapipiʻi le BNG pai (asr9k-bng-px.pie). ).
A maeʻa ona faʻapipiʻi pai BNG, e tatau ona e kopiina faʻasalalauga fesoʻotaʻi BNG mai le moli poʻo le tftp nofoaga i le router. Afai o le pai BNG ua le toe faʻaaogaina ma toe faʻagaoioia, ona utaina lea o faʻasalalauga BNG ua aveese e ala i le faʻatinoina o le faʻatonuga o le uta na aveese mai le faʻatonuga.
Fa'aaliga O le tele o fa'asologa o foliga BNG o lo'o si'i atu i se vaeluaga fou o igoa, ma o le mea lea e le maua ai fa'aaliga BNG i le taimi nei. Ina ia aloese mai faʻasalalauga BNG le fetaui muamua, poʻo le maeʻa ona faʻapipiʻi le pai BNG, faʻataʻitaʻi le faʻatonuga manino o le faʻatonuga, i le EXEC mode.
BNG Fa'asologa Fa'asologa
Configuring BNG i le Cisco ASR 9000 Faasologa Router e aofia ai nei stages: · Fa'atulagaina o le RADIUS Server–BNG ua fa'atulaga e fegalegaleai ma le server RADIUS mo le fa'amaoni, fa'atagaina, ma galuega tau tupe. Mo fa'amatalaga, va'ai Fa'atonuga Fa'amaoni, Fa'atagaga, ma Galuega Tausitusi, i le itulau 21.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 15
Meafaigaluega Manaomia mo BNG
O'aview
· Fa'agaoioia Faiga Fa'atonu - Fa'atonu faiga fa'avae e fa'ailoa ai le gaioiga e faia e le BNG pe a tutupu ni mea fa'apitoa. O fa'atonuga mo le gaioiga o lo'o tu'uina atu ile fa'afanua o faiga fa'avae. Mo faamatalaga auiliili, tagai i le Activating Control Policy, i le itulau e 75.
· Fa'atuina o Sauniga a le Tagata Fa'asalalau-Ua faia fa'atonuga e fa'atulaga ai se tasi pe sili atu vasega talafeagai, mai le tagata fai saofaga i le feso'ota'iga, mo le mauaina o auaunaga tau feso'ota'iga lautele. O vasega ta'itasi e tulaga ese le mata'ituina ma le fa'afoeina. Mo fa'amatalaga, va'ai le Fa'atuina o Sauniga o Tagata Faitala, i le itulau 87.
· Fa'atinoina o le QoS–Quality of Service (QoS) ua fa'atulagaina e tu'uina atu ai le fa'atonuga i luga o le tele o feso'ota'iga feso'ota'iga ma ituaiga o feoaiga. Mo example, e mafai e le kamupani tu'uina atu auaunaga ona pulea punaoa (example bandwidth) fa'asoa i tagata fai saofaga ta'itasi, tu'uina atu auaunaga fa'apitoa, ma ave le fa'amuamua i felauaiga o lo'o fa'atatau i talosaga fa'apitoa. Mo fa'amatalaga, va'ai le Deploying the Quality of Service (QoS), i le itulau 227.
· Fa'atulagaina o Fa'asinomaga Fa'asinomaga-Ua faia fa'atonuga e fa'agaoioi ai nisi o vaega o le au fai saofaga e maua ai fa'aopoopoga fa'aopoopo e pei o faiga fa'avae fa'avae, fa'atonutonu avanoa e fa'aaoga ai le lisi avanoa ma vaega avanoa, ma multicast auaunaga. Mo fa'amatalaga, taga'i i le Fa'atulagaina o Fa'ailoga a le Tagata Fa'asalalau, i le itulau 277.
· Fa'amaonia le Fa'avaeina o Sauniga-E fa'amaonia ma mata'ituina sauniga fa'avae ina ia mautinoa o lo'o avanoa pea feso'ota'iga mo le fa'aoga. O le faʻamaoniga e masani lava ona faia i le faʻaaogaina o le "faʻaali" poloaiga. Fa'asino i le Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference guide mo le lisi o poloaiga "fa'aalia" eseese.
Mo le fa'aogaina o se fa'atonuga a le BNG, e tatau ona e i ai i se vaega fa'aoga e feso'ota'i ma se vaega o galuega e aofia ai ID galuega talafeagai. O le Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference guide e aofia ai ID galuega e manaʻomia mo poloaiga taʻitasi. Afai e te masalomia o lo'o taofia oe mai le fa'aogaina o se fa'atonuga a le vaega fa'aoga, fa'afeso'ota'i lau pule AAA mo se fesoasoani.
Tapulaa
Ole Filifilia VRF Download (SVD) e tatau ona faʻagata, pe a faʻapipiʻi le BNG. Mo nisi faʻamatalaga e uiga i le SVD, vaʻai i le Cisco IOS XR Routing Configuration Guide mo le Cisco XR 12000 Series Router.
Meafaigaluega Manaomia mo BNG
O meafaigaluega nei e lagolagoina le BNG: · Le Satellite Network Virtualization (nV) system. · Le auala sui processors, RSP-440, RSP-880 ma RSP-880-LT-SE. · Le auala processor, A99-RP-SE, A99-RP2-SE, i le Cisco ASR 9912 ma Cisco ASR 9922 chassis. · O le siata o lo'o i lalo o lo'o lisiina ai Line Cards ma Modular Port Adapters e lagolagoina le BNG.
Fuafuaga 2: Line Cards ma Modular Port Adapters Lagolagoina ile BNG
Fa'amatalaga o oloa
24-Port 10-Gigabit Ethernet Line Card, Au'aunaga Edge Optimized
36-Port 10-Gigabit Ethernet Line Card, Au'aunaga Edge Optimized
Vaega Numera A9K-24X10GE-SE
A9K-36X10GE-SE
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 16
O'aview
Meafaigaluega Manaomia mo BNG
Fa'amatalaga o oloa
Numera Vaega
40-Port Gigabit Ethernet Line Card, Auaunaga Edge A9K-40GE-SE Optimized
4-Port 10-Gigabit Ethernet, 16-Port Gigabit
A9K-4T16GE-SE
Ethernet Line Card, 40G Au'aunaga Edge Optimized
Cisco ASR 9000 Maualuluga 100GE Ethernet A9K-8X100G-LB-SE
kata laina:
A9K-8x100GE-SE
· Cisco ASR 9000 8-taulaga 100GE "LAN-na'o" Auaunaga Edge Optimized Line Card, Manaomia
A9K-4x100GE-SE
CPAK optics
· Cisco ASR 9000 8-taulaga 100GE "LAN / WAN / OTN" Auaunaga Edge Optimized Line Card, Manaomia CPAK optics
· Cisco ASR 9000 4-taulaga 100GE "LAN / WAN / OTN" Auaunaga Edge Optimized Line Card, Manaomia CPAK optics
Cisco ASR 9000 Fa'asologa 24-taulaga lua-fua 10GE / 1GE auaunaga edgeoptimized laina kata
A9K-24X10-1GE-SE
Cisco ASR 9000 Fa'asologa 48-taulaga lua-fua 10GE / 1GE auaunaga edgeoptimized laina kata
A9K-48X10-1GE-SE
80 Gigabyte Modular Line Card, Au'aunaga Edge A9K-MOD80-SE Optimized
160 Gigabyte Modular Line Card, Au'aunaga Edge A9K-MOD160-SE Optimized
20-Tau Gigabit Ethernet Taulaga Fa'afeso'ota'i Fa'atonu A9K-MPA-20GE (MPA)
ASR 9000 200G Modular Line Card, Auaunaga Edge A9K-MOD200-SE Optimized, e manaʻomia ni mea faʻapipiʻi uafu faʻaogaina.
ASR 9000 400G Modular Line Card, Auaunaga Edge A9K-MOD400-SE Optimized, e manaʻomia ni mea faʻapipiʻi uafu faʻaogaina.
2-taulaga 10-Gigabit Ethernet Modular Port Feso'ota'iga A9K-MPA-2X10GE (MPA)
4-Port 10-Gigabit Ethernet Modular Port Adapter A9K-MPA-4X10GE (MPA)
ASR 9000 20-port 10-Gigabit Ethernet Modular A9K-MPA-20x10GE Port Adapter, manaʻomia SFP + optics
2-taulaga 40-Gigabit Ethernet Modular Port Feso'ota'iga A9K-MPA-2X40GE (MPA)
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 17
BNG Felagolagomai
O'aview
Fa'amatalaga o oloa
Numera Vaega
1-Port 40-Gigabit Ethernet Modular Port Adapter A9K-MPA-1X40GE (MPA)
ASR 9000 1-taulaga 100-Gigabit Ethernet Modular A9K-MPA-1x100GE Port Adapter, manaʻomia CFP2-ER4 poʻo CPAK optics
ASR 9000 2-taulaga 100-Gigabit Ethernet Modular A9K-MPA-2x100GE Port Adapter, manaʻomia CFP2-ER4 poʻo CPAK optics
BNG Felagolagomai
Ole feso'ota'iga a le BNG e mafai ai e le BNG ona fa'afesuia'i ma fa'aoga fa'amatalaga ma isi feso'ota'iga tele. O mea taua ia:
· BNG fa'atasi ma le ASR9001:
O le ASR9001 o se 'auala e mafai ona fa'agaoioiga fa'apitoa e fa'aogaina e aofia ai le auala e sui ai le auala (RSP), laina laina (LC), ma le ethernet plugs (EPs). O vaega uma o le BNG o loʻo lagolagoina atoatoa ile ASR9001 chassis.
· BNG Lagolago le nV Satelite:
Pau lava le topology o loʻo lagolagoina ma le BNG-nV Satellite - faʻapipiʻiina ports Ethernet i le itu CPE o le node Satelite e fesoʻotaʻi ma le Cisco ASR 9000 e ala i le faʻapipiʻiina e le faʻapipiʻi (static-pinning). O lena lava,
CPE — Fusi — [Satelite] — E le o le Fusi ICL — ASR9K
E ui lava o loʻo lagolagoina le topology o loʻo i lalo ile Satellite nV System (mai Cisco IOS XR Software Release 5.3.2 i luga), e le lagolagoina ile BNG:
· Fa'apipi'i uafu Ethernet i le itu CPE o le node satelite, e feso'ota'i atu i le Cisco ASR 9000 e ala i le fusiga Ethernet feso'ota'iga.
Mai Cisco IOS XR Software Release 6.1.2 ma mulimuli ane, BNG lagolagoina le faʻaogaina o Cisco NCS 5000 Series Router o se Satelite.
Mai Cisco IOS XR Software Release 6.2.2 ma mulimuli ane, o loʻo lagolagoina le BNG geo redundancy feature i le Cisco IOS XR 32 bit operating system ma Cisco NCS 5000 Series satellite. Ae, o le mea lava e tasi e le lagolagoina mo Cisco ASR 9000v satelite. Mo faʻamatalaga, vaʻai BNG Geo Redundancy mataupu i Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide.
Mo faʻamatalaga i luga o le NV Satellite configuration, vaʻai le nV System Configuration Guide mo Cisco ASR 9000 Series Routers o loʻo maua iinei.
· BNG felagolagomai ma Carrier Grade NAT (CGN):
Ina ia fa'atalanoaina le fa'amata'u fa'amata'u mai le fa'aitiitiga o avanoa o le tuatusi IPv4, e fautuaina le fa'asoaina atu o tuatusi IPv4 o lo'o totoe pe avanoa i le aofa'i tele o tagata fa'atau. E faia lenei mea e ala i le faʻaaogaina o le CGN, lea e toso muamua ai le tuʻufaʻatasia o le tuatusi i se NAT sili atu ona tuʻufaʻatasia i le fesoʻotaʻiga tuʻuina atu auaunaga. NAT44 ose tekinolosi e fa'aogaina le CGN ma fesoasoani i le fa'atonutonuina o fa'afitauli fa'aletonu ole avanoa ole tuatusi IPv4. E lagolagoina e le BNG le agava'a e fa'atino ai le fa'aliliuga a le NAT44 ile IPoE ma le PPPoE-fa'avae BNG fa'asalalauga sauniga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 18
O'aview
BNG Smart Licensing
Fa'aaliga Mo le feso'ota'iga BNG ma le CGN, fetu'una'i le BNG interface ma le application service virtual interface (SVI) i le VRF lava e tasi.
Fa'atapula'a · Na'o le fa'aogaina o fusi fa'atasi ma ICL e le o fa'apipi'i e lagolagoina mo feso'ota'iga BNG i luga o feso'ota'iga avanoa i le Satellite nV System.
BNG Smart Licensing
E lagolagoina e le BNG le Cisco Smart Software Licensing e maua ai se auala faigofie mo tagata fa'atau e fa'atau ai laisene ma fa'atautaia i latou i luga o latou feso'otaiga. O lenei mea e maua ai se faʻataʻitaʻiga faʻapitoa e faʻaaogaina e faʻatatau i le faʻalauteleina o fesoʻotaʻiga a le tagata faʻatau. E maua ai fo'i le fetu'una'i e vave fa'afou pe fa'afou fa'atonuga fa'apitoa e fa'atūina ai auaunaga fou i le taimi. Mo nisi faʻamatalaga e uiga i Cisco Smart Software Laisene, vaai Software Entitlement i le Cisco ASR 9000 Faasologa Router mataupu o le System Management Configuration Guide mo Cisco ASR 9000 Series Routers. Mo fa'afouga lata mai, fa'afeso'ota'i le lomiga lata mai o ta'iala o lo'o iai i le http://www.cisco.com/c/en/us/support/ios-nx-os-software/ios-xr-software/products-installation-and- configuration-guides-list.html. BNG Smart Licensing e lagolagoina Geo redundancy fa'apea fo'i ma le fa'a-Geo redundancy sessions. E tasi le laisene e manaʻomia mo vaega taʻitasi o le 8000 tagata fai saofaga poʻo se vaega. Mo example, lua laisene e manaʻomia mo le 9000 tagata fai saofaga. O PIDs laisene polokalame mo BNG:
· S-A9K-BNG-LIC-8K –mo vasega e le o le geo redundancy sessions · S-A9K-BNG-ADV-8K –mo le geo redundancy sessions
E mafai ona e fa'aogaina le fa'atonuga o le laisene show sessionmon e fa'aali ai fuainumera o le vasega o le au fai saofaga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 19
BNG Smart Licensing
O'aview
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 20
3 LE MATAUPU
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
O lenei mataupu o loʻo tuʻuina atu ai faʻamatalaga e uiga i le faʻatulagaina o faʻamaoniga, faʻatagaina, ma faʻamaumauga (AAA) galuega i luga o le BNG router. BNG fegalegaleai ma le RADIUS server e faatino galuega AAA. O se vaega o 'au'aunaga RADIUS o lo'o fausia se vaega fa'aumau e tu'uina atu i ai galuega fa'apitoa a le AAA. O se lisi o metotia o lo'o fa'amatalaina i luga o se 'au'aunaga po'o se vaega fa'aumau o lo'o lisi ai auala e fa'atino ai le fa'atagaga. O nisi o vaega o le RADIUS e aofia ai le fatuina o fa'asologa o uiga AAA, paleni o uta o 'au'aunaga RADIUS, fa'ato'a fa'amauina fa'amaumauga a le RADIUS, Suiga o Fa'atagaga (CoA), ma le Tausitusi o Auaunaga mo QoS.
Laulau 3: Tala Fa'asolopito mo le Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'asalalauga 4.2.0 Fa'asalalauga 5.3.1 Fa'asalalauga 5.3.2 Fa'asalalauga 6.2.1
Fa'asalalau 6.6.3
Suiga
Fa'asalalauga muamua
RADIUS i luga o le IPv6 na faʻalauiloaina.
Sa fa'aopoopoina le lagolago tau tupe a le au'aunaga mo le au fa'atau pepa laina.
Na fa'alauiloa mai se fa'asologa o le tuatusi MAC fou mo le RADIUS User-name Attribute.
Fa'atonu Faiga Fa'avae Si'itia i luga ole RADIUS Interface mo le BNG Subscriber na fa'alauiloaina.
O lenei mataupu e aofia ai mataupu nei:
· Fa'atulagaina le Fa'amaoni, Fa'atagaga, ma Galuega Tausi Tusi, i le itulau 22 · AAA Overview, i le itulau e 22 · Faʻaaogaina le RADIUS Server Group, i le itulau 24 · Faʻamaonia Metotia Lisi, i le itulau 26 · Faʻamatalaina o Uiga AAA, i le itulau 28 · Faia o le RADIUS Server Sets, i le itulau 40 · Faʻapaleniina o Fefaʻatauaiga Load i luga o le RADIUS Server, i le itulau 47 · Fa'asalaina o Fa'amaumauga a le RADIUS, i le itulau 50 · Suiga o Fa'atagaga (CoA) i luga ole RADIUSview, i le itulau e 54 · Fa'amaoniga ma le Fa'atagaga a le Tagata i le Nofoaga Fa'alotoifale, i le itulau 62 · Auaunaga Tausitusi, i le itulau 67
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 21
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
· Malamalama i le Per-VRF AAA Galuega, i le itulau 72 · RADIUS i luga o le IPv6, i le itulau 73 · Fa'amatalaga Faaopoopo, i le itulau 73
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
O lenei mataupu o loʻo tuʻuina atu ai faʻamatalaga e uiga i le faʻatulagaina o faʻamaoniga, faʻatagaina, ma faʻamaumauga (AAA) galuega i luga o le BNG router. BNG fegalegaleai ma le RADIUS server e faatino galuega AAA. O se vaega o 'au'aunaga RADIUS o lo'o fausia se vaega fa'aumau e tu'uina atu i ai galuega fa'apitoa a le AAA. O se lisi o metotia o lo'o fa'amatalaina i luga o se 'au'aunaga po'o se vaega fa'aumau o lo'o lisi ai auala e fa'atino ai le fa'atagaga. O nisi o vaega o le RADIUS e aofia ai le fatuina o fa'asologa o uiga AAA, paleni o uta o 'au'aunaga RADIUS, fa'ato'a fa'amauina fa'amaumauga a le RADIUS, Suiga o Fa'atagaga (CoA), ma le Tausitusi o Auaunaga mo QoS.
Laulau 4: Tala Fa'asolopito mo le Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'asalalauga 4.2.0 Fa'asalalauga 5.3.1 Fa'asalalauga 5.3.2 Fa'asalalauga 6.2.1
Fa'asalalau 6.6.3
Suiga
Fa'asalalauga muamua
RADIUS i luga o le IPv6 na faʻalauiloaina.
Sa fa'aopoopoina le lagolago tau tupe a le au'aunaga mo le au fa'atau pepa laina.
Na fa'alauiloa mai se fa'asologa o le tuatusi MAC fou mo le RADIUS User-name Attribute.
Fa'atonu Faiga Fa'avae Si'itia i luga ole RADIUS Interface mo le BNG Subscriber na fa'alauiloaina.
O lenei mataupu e aofia ai mataupu nei:
Ua uma le AAAview
O le AAA o loʻo galue o se faʻavae mo le pulea lelei o fesoʻotaiga ma le saogalemu. E fesoasoani i le puleaina o punaoa o fesoʻotaʻiga, faʻamalosia faiga faʻavae, suʻeina o fesoʻotaʻiga faʻaoga, ma tuʻuina atu faʻamatalaga e fesoʻotaʻi ma pili. E feso'ota'i le BNG i se 'au'aunaga RADIUS i fafo e tu'uina atu galuega a le AAA.
O le RADIUS server o loʻo faʻatinoina galuega faʻamaonia tutoatasi e tolu (faʻamaonia, faʻatagaina, ma le faʻamaumauga) e faʻamautu ai fesoʻotaʻiga e faasaga i avanoa e le faʻatagaina. O lo'o fa'atautaia e le 'au'aunaga a le RADIUS le feso'ota'iga Fa'asinomaga Mamao-I totonu Au'aunaga Fa'aaogā (RADIUS). (Mo fa'amatalaga e uiga i le RADIUS protocol, tagai ile RFC 2865). O le RADIUS server e pulea le faagasologa o le AAA e ala i le fegalegaleai ma le BNG, ma faʻamaumauga ma faʻamaumauga o loʻo i ai faʻamatalaga faʻaoga.
O le RADIUS protocol o lo'o fa'agaoioia i luga o se faiga fa'asoa fa'atau-vaega. O le RADIUS client e tamo'e i luga ole BNG (Cisco ASR 9000 Series Router) e tu'uina atu talosaga fa'amaoni i se server RADIUS tutotonu. O le 'au'aunaga RADIUS o lo'o iai uma fa'amaoniga a tagata fa'aoga ma fa'amatalaga avanoa mo feso'ota'iga.
O faiga AAA, o le matafaioi a le RADIUS server i le taimi o nei faiga, ma nisi o BNG faʻatapulaʻaina, o loʻo faʻamatalaina i vaega nei:
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 22
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Ua uma le AAAview
Fa'amaoni
O le faʻamaoniga faʻamaonia e faʻamaonia ai se tagata fai saofaga i luga o le fesoʻotaʻiga, aʻo leʻi tuʻuina atu le avanoa i fesoʻotaʻiga ma fesoʻotaʻiga auaunaga. O le faʻagasologa o le faʻamaonia e galue i luga o se seti tulaga ese o taʻiala o loʻo i ai i le au fai saofaga taʻitasi mo le mauaina o avanoa i le fesoʻotaʻiga. E masani lava, o le RADIUS server e faia le faʻamaoni e ala i le faʻafetauiina o faʻamaoniga (igoa faʻaoga ma upu faʻaulu) e ulufale le tagata fai saofaga ma i latou o loʻo i totonu o le database mo lena tagata fai saofaga. Afai e fetaui fa'amaoniga, e fa'atagaina le tagata fai saofaga i le feso'ota'iga. A leai, e le manuia le faagasologa o le faʻamaoniga, ma faʻafitia le avanoa i fesoʻotaiga.
Fa'atagaga
A maeʻa le faʻamaoniga faʻamaonia, ua faʻatagaina le tagata fai saofaga mo le faia o nisi gaioiga. O le fa'atagaga o le fa'agasologa lea e iloa ai le ituaiga o gaioiga, puna'oa, po'o auaunaga e fa'atagaina e le tagata fai saofaga e fa'aoga. Mo example, pe a uma ona ulufale i totonu o le upega tafailagi, e mafai e le tagata fai saofaga ona taumafai e maua se faʻamaumauga, poʻo se faʻatapulaʻaina webnofoaga. O le fa'agasologa o fa'atagaga e iloa ai pe i ai i le tagata fai saofaga le pule e maua ai nei punaoa feso'otaiga.
O le faatagaga a le AAA e galue e ala i le tuufaatasia o se seti o uiga faʻavae i luga o faʻamaoniga faʻamaonia na tuʻuina atu e le tagata fai saofaga. O le RADIUS server e faʻatusatusa nei uiga, mo se igoa faʻapitoa, ma faʻamatalaga o loʻo i totonu o se database. O le fa'ai'uga e toe fa'afo'i i le BNG e fa'amautu ai le gafatia ma tapula'a e tatau ona fa'aoga mo lea tagata fai saofaga.
Tausitusi
O lo'o fa'amauina e le fa'amaumauga alaga'oa o lo'o fa'aogaina e le tagata fai saofaga i le taimi e maua ai feso'ota'iga. O lo'o fa'aogaina le fa'amaumauga mo pili, su'esu'ega o aga, su'esu'eina o alagā'oa, ma galuega fa'atino fuafuaga. I le faagasologa o le tausiga o tusi, e tausia se ogalaau mo fuainumera o le faaaogaina o fesootaiga. O fa'amatalaga mata'ituina e aofia ai, ae le fa'atapula'aina i - fa'asinomaga a le au fai saofaga, fa'aoga fa'aoga i le tagata fai saofaga, taimi amata ma taofi o feso'ota'iga feso'ota'iga, ma le aofa'i o pa'u ma bytes e fa'aliliu i, ma mai, le feso'ota'iga.
E lipoti atu e le BNG le gaioiga a le au fai saofaga i le server RADIUS i le tulaga o faamaumauga tau tupe. O fa'amaumauga fa'amaumauga ta'itasi o lo'o i ai se tau fa'auiga tau tupe. O lenei tau e suʻesuʻeina ma faʻaaogaina e le RADIUS server mo le puleaina o fesoʻotaʻiga, pili o tagata faʻatau, suʻega, ma isi.
E mafai ona fa'amuta fa'amaumauga o fa'amaumauga a le au fai saofaga pe a le maua e le BNG ni fa'ailoga mai le server RADIUS. O lenei taimi malolo e mafai ona mafua ona o le RADIUS server ua le mafai ona o'o atu pe ona o fesoʻotaʻiga fesoʻotaʻiga faʻafitauli e mafua ai le faʻagesegese o le faʻaogaina o le RADIUS server. Afai e le taliaina vasega i luga o le BNG mo le latou talosaga Amata-Amata, leiloa o vasega i luga o le auala processor ua le manuia (RPFO) ma isi faaletonu mata'utia ua lipotia. O le mea lea e fautuaina ai se RADIUS server taimi mate e configured i luga o le BNG, e aloese mai le leiloa o sauniga. O le taimi lava e faʻatulagaina ai lenei tau, ma afai e le maua e se vasega se tali faʻamatalaga e tusa lava pe a maeʻa ona toe faʻataʻitaʻi, ona manatu lea o le RADIUS server faapitoa e le o galue ma e le auina atu nisi talosaga i lena server.
Ole radius-server deadtime limit command e mafai ona fa'aoga e fa'atulaga ai le taimi e mate ai mo le RADIUS server. Mo fa'amatalaga, va'ai Fa'atonu Fa'atonu RADIUS Server, i le itulau 41.
Tapulaa
· I le motusia o le sauniga, o le tuʻuina atu o le talosaga Tausitusi-Taofi i le RADIUS e mafai ona tuai mo ni nai sekone aʻo faʻatali le faiga mo le aoina o fuainumera o le vasega "mulimuli" mai meafaigaluega. Le Taimi-Taimiamp le uiga i lena talosaga Tausitusi-Taofi e tatau, peitaʻi, e atagia mai ai le taimi e motusia ai le kalani, ae le o le taimi e faʻasalalau ai.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 23
Fa'aaogā le RADIUS Server Group
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'aaogā le RADIUS Server Group
O le RADIUS server group o se vaega fa'aigoaina o se tasi pe sili atu sa'u RADIUS. O vaega ta'itasi ta'itasi e fa'aogaina mo se auaunaga fa'apitoa. Mo example, i se AAA network configuration e lua vaega server RADIUS, o le vaega server muamua e mafai ona tofia le galuega faʻamaonia ma le faʻatagaina, ae o le vaega lona lua e mafai ona tuʻuina atu le galuega tau tupe.
E mafai e kulupu a le 'au'aunaga ona aofia ai le tele o fa'amatalaga talimalo mo le server lava e tasi. Ae ui i lea, e tatau ona i ai se faʻamatalaga tulaga ese. O lenei faʻamatalaga tulaga ese e faia e ala i le tuʻufaʻatasia o se tuatusi IP ma se numera o le UDP. O ports eseese o le 'auʻaunaga, o le mea lea, e mafai ona faʻamalamalamaina faʻapitoa o tagata taʻitoʻatasi RADIUS e tuʻuina atu se auaunaga AAA faʻapitoa. I se isi faaupuga, o lenei faʻamatalaga tulaga ese e mafai ai e RADIUS talosaga ona lafo i vaʻaiga UDP eseese i luga o le server tutusa. E le gata i lea, afai e lua faʻasalalauga talimalo eseese i luga o le server RADIUS e tasi e faʻapipiʻiina mo le auaunaga lava e tasi (pei o le faʻamaoniga faʻamaonia), ona avea lea o le faʻafeiloaʻiga lona lua e fai ma faʻamaufaʻailoga mo le muamua. O lona uiga, afai e le mafai e le au talimalo muamua ona tuʻuina atu auaunaga faʻamaonia, e taumafai le BNG i le ulufale lona lua. (O faʻamaumauga a le RADIUS e faʻataʻitaʻiina i le faasologa na faia ai.)
Mo le tu'uina atu o gaioiga fa'apitoa i le vaega o le server, tagai i le Fa'atulagaina o le RADIUS Server Group, i le itulau e 24.
Fa'atulagaina le RADIUS Server Group
Fa'atino lenei galuega e fa'amatala ai se vaega fa'aumau igoa e fai ma 'au'aunaga.
LAASAGA AOTELEGA
1. fetuutuuna'i 2. aaa vaega ole igoa ole laina laina 3. tausitusi talia radius_attribute_list_name 4. faatagaga tali talia radius_attribute_list_name 5. taimi e gata ai 6. uta-paleni auala e sili ona mata'ina le lapopoa o le tele e le amanaiaina-preferred-server 7. server host_name acct-port accounting_port_number auth-port authentication_port_number 8. source-interface name value 9. vrf name 10. Fa'aoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2
RP/0/RSP0/CPU0:router# configure
aaa kulupu radius igoa fa'asao Fa'ataampLe:
Fa'atulaga le vaega server RADIUS e igoa r1.
RP/0/RSP0/CPU0:router(config)# aaa vaega server radius r1
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 24
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina le RADIUS Server Group
Laasaga 3 Laasaga 4 Laasaga 5 Laasaga 6 Laasaga 7
Laasaga 8 Laasaga 9
Fa'atonuga po'o Fa'agaioiga fa'amaumauga talia radius_attribute_list_name ExampLe:
Faamoemoega
Fa'atonu le fa'amama uiga o le radius mo le fa'agasologa o fa'amaumauga e talia na'o uiga fa'amaoti i le lisi.
RP/0/RSP0/CPU0:router(config-sg-radius)# talia le accounting att_list
tali fa'ataga talia radius_attribute_list_name Fa'atulaga le fa'amama uiga fa'ata'oto mo le fa'atagaga
ExampLe:
faiga e talia na'o uiga fa'amaoti i le lisi.
RP/0/RSP0/CPU0:router(config-sg-radius)# tali fa'atagaina talia att_list1
tapula'a taimi e oti EampLe:
Fa'atulaga le RADIUS server-group taimi mate. Ole tapula'a ole taimi e fa'atonuina ile minute. Ole laina ole 1 ile 1440, ma ole faaletonu ole 0.
RP/0/RSP0/CPU0:router(config-sg-radius)# taimi mate 40
ala-paleni auala aupito sili ona mata'utia le lapopoa o le fa'aa'oa'oina-preferred-server
ExampLe:
Fa'atonu le tele o le fa'a-paleni o uta pe a mae'a ona filifilia lea o le isi talimalo.
RP/0/RSP0/CPU0:router(config-sg-radius)# auala faapaleni uta e aupito itiiti le mata'utia le tele o vaega 50
le amanaia-preferred-server
server host_name acct-port accounting_port_number Fa'ama'oti le 'au'aunaga radius, ma lona tuatusi IP po'o le igoa talimalo.
auth-port authentication_port_number
Fa'atulaga le uafu UDP mo RADIUS accounting ma
ExampLe:
talosaga fa'amaoni. Ole numera ole tau fa'amautu ma fa'amaoni e amata mai le 0 i le 65535. Afai e leai se tau
faʻamaonia, o le faaletonu o le 1645 mo auth-port, ma le 1646
RP/0/RSP0/CPU0:router(config-sg-radius)# server 1.2.3.4 acct-port 455 auth-port 567
mo acct-port.
Mai Cisco IOS XR Software Release 5.3.1 ma mulimuli ane, e mafai foi ona faʻatulagaina le tuatusi IPv6 mo le server RADIUS. Ae, o le filifiliga igoa talimalo e lagolagoina na o le IPv4 domain, ae le mo IPv6.
fa'aupuga-fa'afeso'ota'i igoa tau aogā ExampLe:
Fa'atulaga le RADIUS server-group source-interface name ma le tau mo le Bundle-Ether.
RP/0/RSP0/CPU0:router(config-sg-radius)# source-interface Bundle-Eteru 455
vrf igoa ExampLe:
Fa'atulaga le vrf o lo'o i ai le vaega radius server.
RP/0/RSP0/CPU0:router(config-sg-radius)# vrf vrf_1
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 25
Fa'atonu Lisi Metotia
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Laasaga 10
Poloaiga po'o Fa'atino Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
Faamoemoega
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le Radius Server-Group: O se fa'auluample
configure aaa vaega server radius r1 accounting talia r1 r2 faatagaga tali talia a1 a2 matemate 8 uta-paleni auala aupito itiiti-matagofie vaega-tele 45 le amana'ia-mana'omia-server server host_name acct-port 355 auth-port 544 source-interface Bundle-Eter100.10. 1 vrf vrf_XNUMX ! i'uga
Fa'atonu Lisi Metotia
Lisi o metotia mo le AAA e faʻamalamalamaina ai metotia e faʻaaogaina ai le faʻatagaina, ma le faʻasologa o loʻo faʻatinoina ai nei metotia. A'o le'i faia so'o se auala fa'amaonia fa'amaonia, e tatau ona fa'aoga le lisi o metotia i le fa'aogaina o masini e nafa ma le fa'amaoniaina o fa'amaumauga a tagata fa'aoga. Pau lava le tuusaunoaga i lenei manaʻoga o le lisi o metotia faʻaletonu (faʻaigoaina "faʻaletonu"). Ole lisi ole auala e otometi lava ona fa'aoga pe a leai se isi lisi ole auala e fa'amalamalamaina. O se lisi o metotia fa'amalamalamaina e fa'asili i le lisi o metotia fa'aletonu.
I luga o le BNG, e tatau ona e faʻamaonia le lisi o metotia ma le vaega faʻaumau o le a faʻaaogaina mo auaunaga AAA. Mo le fa'amautuina o lisi o metotia, tagai i le Fa'atulagaina o Lisi o Metotia mo le AAA, i le itulau 26.
Fa'atonu Lisi Metotia mo le AAA
Fa'atino lenei galuega e tu'uina atu ai le lisi o metotia e fa'aoga e le vaega fa'aumau mo le fa'amaoni a le au fai saofaga, fa'atagaga, ma le fa'amaumauga.
LAASAGA AOTELEGA
1. fetuutuunai 2. aaa fa'amaoniaga le au fai saofaga faaletonu metotia-lisi-igoa vaega server-vaega-igoa 3. aaa fa'atagaga tagata fai saofaga auala-lisi-igoa vaega server-vaega-igoa |radius
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 26
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atonu Lisi Metotia mo le AAA
4. aaa accounting subscriber faaletonu auala-lisi-igoa vaega server-vaega-igoa 5. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2 Laasaga 3 Laasaga 4 Laasaga 5
RP/0/RSP0/CPU0:router# configure
aaa authentication subscriber default method-list-name Fa'atulaga le metotia-lisi lea o le a fa'aaogaina e ala i le faaletonu
vaega server-vaega-igoa
mo le fa'amaoniaina o le au fai saofaga. E mafai ona e ulufale i le 'default'
ExampLe:
po'o se igoa fa'auigaina mo le lisi o metotia AAA. E le gata i lea, ulufale i le igoa o le vaega o le server, lea o loʻo i ai le lisi o metotia
fa'aaoga.
RP/0/RSP0/CPU0:router(config)# aaa fa'amaoni
tagata fai saofaga auala1 vaega vaega1 alalaupapa
vaega vaega2 vaega vaega3 …
aaa fa'atagaga le au fai saofaga fa'aletonu metotia-lisi-igoa Fa'atulaga le metotia-lisi lea o le a fa'aogaina e ala i le fa'aletonu
vaega server-vaega-igoa |radius
mo le faatagaga a le au fai saofaga. E mafai ona e ulufale i le 'default'
ExampLe:
po'o se igoa fa'auigaina mo le lisi o metotia AAA. E le gata i lea, ulufale i le igoa o le vaega o le server, lea o loʻo i ai le lisi o metotia
fa'aaoga.
RP/0/RSP0/CPU0:router(config)# aaa faatagaga
tagata fai saofaga auala1 vaega vaega1 alalaupapa
vaega vaega2 vaega vaega3 …
aaa accounting tagata fai saofaga faaletonu metotia-lisi-igoa vaega server-vaega-igoa
ExampLe:
RP/0/RSP0/CPU0:router(config)# aaa accounting subscriber method default1 group group1 radius group group2 group group3 …
Fa'atulaga le metotia-lisi o le a fa'aaogaina e ala i le fa'aletonu mo le fa'atausitusi a le au fai saofaga. E mafai ona e ulufale i totonu o le 'default' po'o se igoa fa'auigaina mo le AAA method-list. E le gata i lea, ulufale i le igoa o le vaega o le server, lea e faʻaoga ai le lisi o metotia.
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 27
Fa'amatalaina Uiga AAA
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o Metotia-lisi mo le AAA: O se example
fetuutuunai aaa fa'amaoniga tagata fai saofaga fa'aletonu vaega radius vaega rad2 vaega rad3.. aaa fa'atagaina le lesitala fa'aletonu vaega radius vaega rad1 vaega rad2 vaega rad3.. ! i'uga
Fa'amatalaina Uiga AAA
O le uiga AAA o se elemene o le pusa RADIUS. O se pusa RADIUS e fa'aliliuina fa'amatalaga i le va o le RADIUS server ma le RADIUS client. O le fa'ailoga o le uiga o le AAA, ma lona tau - fa'atupuina le Attribute Value Pair (AVP). O le AVP e ave faʻamatalaga mo talosaga uma ma tali mo le fefaʻatauaiga a le AAA.
O uiga o le AAA e mafai ona muai fa'auigaina e pei o le Initaneti Inisinia Task Force (IETF) uiga po'o le fa'atau fa'amatalaina i uiga fa'atau-fa'apitoa (VSAs). Mo nisi fa'amatalaga e uiga i le lisi o uiga lagolago a le BNG, va'ai Uiga RADIUS, i le itulau 443.
O le RADIUS server e tuʻuina atu faʻafouga faʻaleleia i le BNG i foliga o uiga i feʻau RADIUS. E mafai ona fa'aoga le fa'afouga o fa'amaumauga i luga o le tagata fai saofaga i le taimi o le fa'atulagaina o le sauniga e ala i auala masani e lua- fa'atagata ta'itasi uiga, lea e fa'aogaina le fa'atulagaina i luga o le tagata fai saofaga e avea o se vaega o le fa'amaoni a le tagata fai saofaga Access Accept, po'o ala i le fa'asinomaga, taulaga, po'o le fa'atagaina o auaunaga Access Accepts. O nei mea uma e pulea e le Policy Rule Engine's configuration i le tagata fai saofaga.
A tuʻuina atu e le BNG se faʻamaoniga poʻo se faʻatagaga talosaga i se server RADIUS i fafo e avea o se Talosaga Avanoa, e toe faʻafoʻi atu e le server faʻafouga faʻaopoopo i le BNG o se vaega o le Access Accept. I le faaopoopo atu i le RADIUS faʻapipiʻiina se tagata fai saofaga i le taimi o le seti, e mafai e le 'auʻaunaga ona tuʻuina atu se suiga o le faʻatagaina (CoA) feʻau tutoʻatasi i le BNG i le taimi o le taamilosaga o le olaga o le tagata fai saofaga, e tusa lava pe leʻi tuʻuina atu e le BNG se talosaga. O nei fa'afouga a le RADIUS CoA o lo'o galue o ni fa'afouga malosi, fa'asino i elemene fa'atulagaina i le BNG ma fa'atonu le BNG e fa'afou se faiga fa'atonutonu fa'apitoa po'o se faiga fa'avae tautua.
E lagolagoina e le BNG le manatu o se "au'aunaga", o se vaega o vaega fa'atulagaina o lo'o galulue fa'atasi e fai ma sui o lena auaunaga. 'Au'aunaga e mafai ona fa'atusalia e pei o foliga fa'apipi'i i luga o fa'ata'ita'iga fa'amalosi e ala i le CLI, po'o ni fa'ailoga ua fa'atulagaina e pei o uiga RADIUS i totonu o Radius Servers. Au'aunaga e fa'agaoioia sa'o mai le CLI po'o le RADIUS e ala i le fa'atulagaina o le "fa'agaoioia" gaioiga i luga o le Policy Rule Engine, po'o le CoA "activate-service" talosaga. E mafai fo'i ona fa'ate'a sa'o au'aunaga (ave'ese uma vaega o lo'o a'afia ai i totonu o le tautua ua ta'ua) e ala i le fa'atulagaina o le "fa'ate'aina" gaioiga i luga o le Faiga Fa'avae Tulafono Engine po'o le CoA "deactivate-auaunaga" talosaga.
O uiga taua na maua mai le RADIUS e fegalegaleai ma le au fai saofaga i le auala lenei:
· BNG tu'ufa'atasia tulaga taua na maua i le RADIUS fa'afouga fa'atasi ma fa'atauga o lo'o i ai nei na tu'uina atu fa'atasi e ala i fa'atonuga a le CLI, po'o mai fa'afouga muamua a le RADIUS.
· I tulaga uma lava, o fa'atauga e maua i se fa'afouga a le RADIUS e fa'amuamua i so'o se fa'atatauga tu'ufa'atasi a le CLI po'o fa'afouga muamua a le RADIUS. E tusa lava pe e te toe faʻaleleia le faʻatulagaina o tau o le CLI, e le faʻaogaina e le polokalama uiga o sauniga poʻo foliga na maua i se faʻafouga RADIUS.
· Suiga ua faia i le CLI aiaiga o le fa'ata'ita'iga malosi e fa'amanaia vave lava i vasega uma e fa'aaoga ai lena fa'ata'ita'iga, ma fa'apea e le'i fa'ato'a soloia e le RADIUS. E fa'atatau fo'i i fa'afouga o auaunaga na faia e ala i talosaga a le CoA "au'aunaga-fa'afouina".
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 28
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fausia o Uiga Fa'apitoa
Lisi Uiga AAA
O le lisi o uiga o lo'o ta'ua lisi o lo'o i ai se seti o uiga. E mafai ona e faʻatulagaina le RADIUS server e faʻaaoga ai se lisi faʻapitoa e faʻatino ai le galuega AAA.
Ina ia fatuina se lisi o uiga, tagai i le Faatulagaina o Lisi o Uiga o le RADIUS, i le itulau 34.
Fa'asologa o uiga AAA
E mafai ona fa'amatalaina se fa'asologa fa'apitoa mo nisi uiga. O le faʻasologa faʻatulagaina mo le fatuina o se faatulagaga fou o le:
faatulagaga uiga aaa faatulagaga- manoa [umi] *[ ] o fea:
· format-igoa - Fa'amaoti le igoa ua tu'uina atu i le fa'asologa o uiga. O lenei igoa e ta'ua pe a fa'aoga le fa'atulagaga i luga o se uiga.
· umi — (Filifili) Fa'ailoa mai le umi aupito maualuga o le manoa uiga fa'atulagaina. Afai o le umi mulimuli o le manoa uiga e sili atu nai lo le tau o loʻo faʻamaonia i le LENGTH, e tipi i le LENGTH bytes. Ole maualuga ole tau fa'atagaina mo le LENGTH ole 255. Afai e le'i fa'atulagaina le finauga, ole fa'aletonu ole 255.
· manoa — O lo'o iai mataitusi masani ASCII e aofia ai fa'amatalaga fa'aliliuga. Na'o le % fa'ailoga e fa'atagaina e fai ma fa'amatalaga fa'aliliu i le STRING. O le tau STRING o lo'o fa'amauina i upusii fa'alua.
· Fa'asinomaga-Uiga - Fa'ailoa se sauniga, ma e aofia ai le igoa fa'aoga, tuatusi IP, ma tuatusi mac. O lo'o fa'aalia i luga ole CLI se lisi o uiga fa'asinomaga ua fa'amatalaina nei.
O le taimi lava e faʻamalamalamaina ai le faʻatulagaga, e mafai ona faʻaoga le FORMAT-NAME i uiga eseese AAA e pei o le username, nas-port-ID, calling-station-ID, ma le telefoni-station-ID. O uiga o le AAA e mafai ona faʻaogaina e faʻaogaina ai le gafatia faʻatulagaina o loʻo faʻamatalaina i le vaega o le Fausiaina o Uiga Faʻapitoa, ile itulau 29.
Ina ia faia se uiga fa'apitoa nas-port ma fa'aoga se fa'asologa ua mua'i fa'auigaina i le uiga nas-port-ID , va'ai le Fa'atulagaina o Fa'asologa o Uiga RADIUS, i le itulau 36.
O galuega fa'apitoa e mafai ona fa'amatalaina mo se fa'atulagaga uiga mo fa'amoemoega fa'apitoa. Mo exampma, afai o le igoa ole igoa ole "text@abc.com", ma e na'o le vaega pe a uma le "@" e mana'omia e avea ma igoa ole igoa, e mafai ona faauigaina se galuega e taofi na'o le vaega pe a uma le "@" o le igoa ole igoa. Ona aveese lea o le "tusitusiga" mai le mea e ulufale ai, ma o le igoa fou o le "abc.com". Ina ia fa'aogaina le galuega fa'auiga igoa i se fa'aigoa-uiga, va'ai le Fa'atulagaina o le Fa'asologa o Fa'asologa o Uiga AAA, i le itulau 38.
Fausia o Uiga Fa'apitoa
E lagolagoina e le BNG le faʻaogaina o uiga AAA e mafai ona faʻaogaina. O uiga AAA e mafai ona fetuutuunai e iai faʻamatalaga faʻapitoa e faʻaogaina e tagata faʻaoga. O vaega o lo'o i lalo o lo'o lisiina ai nisi o uiga AAA e mafai ona fa'aogaina na fa'aogaina e le BNG.
Username
BNG o loʻo i ai le malosi e fausia ai le igoa ole igoa ole AAA ma isi uiga faʻapipiʻiina mo le au fai saofaga e faʻaaoga ai le tuatusi MAC, circuit-ID, remote-ID, ma le DHCP Option-60 (ma se seti tele o tau o loʻo maua ile CLI). O le DHCP option-60 o se tasi lea o filifiliga fou e faʻafesoʻotaʻi e le DHCP client i le DHCP server i ana talosaga; o lo'o ave ai le Fa'ailoa Vasega Fa'atau (VCI) o meafaigaluega a le tagata fa'atau DHCP.
Ole uiga ole tuatusi MAC o loʻo faʻamaonia ile CLI format i se tasi o nei fomu:
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 29
Fausia o Uiga Fa'apitoa
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
· tuatusi mac: mo example, 0000.4096.3e4a
· mac-address-ietf: mo example, 00-00-40-96-3E-4A
· mac-address-raw: mo example, 000040963e4a
· mac-address-custom1: mo example, 01.23.45.67.89.AB (O lenei faʻamatalaga faʻapitoa MAC e maua naʻo le Cisco IOS XR Software Release 6.2.1 ma mulimuli ane).
O se tasiampLe o le fausiaina o se igoa ole igoa i le pepa "mac-address@vendor-class-ID" o le:
aaa uiga fa'atulagaina USERNAME-FORMAT format- manoa "%s@%s" mac-address dhcp-vendor-class
NAS-Port-ID O le NAS-Port-ID e fausia e ala i le tuʻufaʻatasia o faʻamatalaga o le taulaga BNG ma faʻamatalaga avanoa-node. O faʻamatalaga o le taulaga BNG e aofia ai se manoa i lenei fomu:
“eth phy_slot/phy_subslot/phy_port:XPI.XCI”
Mo le 802.1Q tunneling (QinQ), XPI o le VLAN pito i fafo tag ma XCI o le VLAN i totonu tag. Afai o le atinaʻe o QinQ, o le faʻaogaina o le nas-port-ID e aofia uma ai le VLAN tags; pe afai e tasi le fa'aoga tag, e aofia ai se VLAN e tasi tag. I le tulaga o se VLAN e tasi, e naʻo le VLAN i fafo e faʻapipiʻiina, faʻaaoga lenei syntax:
/ / /
I le tulaga o QinQ, o le VLAN ua faʻatulagaina e faʻaaoga ai lenei syntax:
/ / / .
I le tulaga o se fusi-interface, o le phy_slot ma le phy_subslot ua seti i le zero (0); ae o le numera phy_port o le numera fusi. Mo example, 0/0/10/30 o le NAS-Port-ID mo se Bundle-Ether10.41 faʻatasi ai ma se VLAN pito i fafo 30. Ua faʻalauteleina le poloaiga nas-port-ID e faʻaaoga ai le 'nas-port-type' filifiliga. ina ia mafai ona faʻaogaina le faʻatulagaina faʻapitoa (faʻatulagaina ma le poloaiga o loʻo faʻaalia i luga) i luga o se ituaiga faʻaoga faʻapitoa (nas-port-type). O le faʻatonuga nas-port-ID faʻalautele o le:
aaa radius uiga nas-port-id format [ituaiga ] Afai e le o faʻamaonia le filifiliga 'ituaiga', ona fausia lea o le nas-port-ID mo ituaiga uma o fesoʻotaʻiga e tusa ai ma le igoa faʻatulagaina o loʻo faʻamaonia i le poloaiga. O se exampLe o le fausiaina o le maualuga 128 byte NAS-Port-ID, e ala i le tuʻufaʻatasia o faʻamatalaga BNG port ma Circuit-ID o le:
aaa uiga fa'atulagaina NAS-PORT-ID-FORMAT1 fa'asologa- manoa umi 128 “eth %s/%s/%s:%s.%s %s” physical-slot physical-subslot physical-port outer-vlan-Id inner- vlan-id circuit-id-tag
O se tasiampO le fausiaina o le NAS-Port-ID mai na'o le BNG port information, ma le "0/0/0/0/0/0" fa'aopoopo i le pito mo le circuit-ID, o le:
aaa uiga fa'atulagaina NAS-PORT-ID-FORMAT2 format- manoa “eth %s/%s/%s:%s.%s 0/0/0/0/0/0” physical-slot physical-subslot physical-port fafo-vlan-Id totonu-vlan-id
O se tasiampLe o le fausiaina o le NAS-Port-ID mai na o le Circuit-ID o le:
aaa uiga fa'atulagaina NAS-PORT-ID-FORMAT3 format- manoa “%s” circuit-id-tag
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 30
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fausia o Uiga Fa'apitoa
O le NAS-Port-ID formats ua fa'atulagaina i le fa'ata'ita'iga i lugaamples, e mafai ona faʻamaonia i le nas-port-ID poloaiga, faʻapea:
Mo le IPoEoQINQ fa'aoga: aaa radius attribute nas-port-id format NAS-PORT-ID-FORMAT1 type 41
Mo Virtual IPoEoQINQ interface:aaa radius attribute nas-port-id format NAS-PORT-ID-FORMAT2 type 44
Mo le IPOEoE fa'afeso'ota'i: aaa radius attribute nas-port-id format NAS-PORT-ID-FORMAT3 type 39
NAS-Port-Type on Interface poʻo VLAN Sub-interface
Ina ia maua ni faʻataʻitaʻiga eseese o gaosiga mo le au fai saofaga i luga o le router BNG tutusa, ae eseese faʻafesoʻotaʻi faʻaletino o le ituaiga tutusa, o le NAS-Port-Type ua faʻatulagaina mo faʻaoga faʻapitoa taʻitasi, poʻo le VLAN sub-interface. Faatasi ai ma se tau ese NAS-Port-Type faʻatulagaina i luga o le atinaʻe, o le NAS-Port ma le NAS-Port-ID e faʻapipiʻiina e tusa ai ma faʻatulagaga faʻamatalaina i le lalolagi atoa mo le NAS-Port-Type fou faʻapipiʻiina i luga o le atinaʻe, nai lo le tau moni. o le NAS-Port-Type o loʻo i ai i le atinaʻe. O le mea lea e tuʻuina atu ai faʻasologa eseese o le NAS-Port, NAS-Port-ID ma le NAS-Port-Type i le RADIUS server mo le au fai saofaga i lalo o faʻataʻitaʻiga gaosiga eseese.
I le tulaga o sub-interfaces, o le faʻatonuga e mulimulitaʻia i le filifilia o le faatulagaga o le NAS-Port-Type e lafo i le RADIUS server o:
1. Fa'amautinoa pe fa'apipi'i le NAS-Port-Type i luga ole la'ititi o feso'ota'iga lea e taunu'u mai ai le sauniga a le au fai saofaga.
2. Afai e le configured NAS-Port-Type i luga o le sub-interface, faʻamaonia pe ua faʻapipiʻiina i luga o le faʻaogaina o le tino.
Ole faatulagaga ole NAS-Port poʻo le NAS-Port-ID e faʻavae ile NAS-Port-Type na maua ile Laasaga 1 poʻo le Laasaga 2.
3. Afai o le NAS-Port-Type e le faʻapipiʻiina i luga ole laʻititi poʻo le faʻaoga faʻapitoa, o le faatulagaga o le NAS-Port poʻo le NAS-Port-ID e faʻavae i luga o le faatulagaga o le faaletonu NAS-Port-Type o le sub. -fa'aoga.
4. Afai e le o fa'atulagaina se NAS-Port po'o le NAS-Port-ID format mo le NAS-Port-Type na maua mai i laasaga 1, 2 po'o le 3, o le faatulagaga o le NAS-Port po'o le NAS-Port-ID e fa'avae i luga o le faaletonu. faatulagaga o le NAS-Port poʻo le NAS-Port-ID.
Fa'aaoga le poloaiga lenei e fa'atulaga ai le NAS-Port-Type i le fa'aoga po'o le VLAN sub-interface:
aaa radius uiga nas-port-type
o fea:
o se numera mai le 0 i le 44, poʻo se manoa e faʻamaonia ai le nas-port-type.
Va'ai le Fa'atulagaina o le RADIUS Attribute Nas-port-type, i le itulau 37.
Calling-Station-ID ma Called-Station-ID
E lagolagoina e le BNG le faʻaogaina o le telefoni-nofoaga-ID ma le telefoni-nofoaga-ID. Ole vala'au-nofoaga-ID o se uiga RADIUS e fa'aogaina ai le Fa'ailoga Numera Autometi (ANI), po'o se tekonolosi fa'apena. E fa'atagaina ai le 'au'aunaga o feso'ota'iga feso'ota'iga (NAS) e lafo i le pusa Access-Request, le numera telefoni na sau ai le vala'au. O le telefoni-nofoaga-ID o se uiga RADIUS e fa'aogaina ai le Fa'ailoga Numera (DNIS), po'o se tekinolosi fa'apena. E mafai ai e le NAS ona lafo i le Access-Request packet, le numera telefoni na valaʻau mai ai le tagata faʻaoga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 31
Fausia o Uiga Fa'apitoa
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
O le poloaiga na faʻaaogaina e faʻapipiʻi ai le valaʻau-nofoaga-ID ma valaʻau-station-ID uiga o:
aaa radius uiga valaau-station-id faatulagaga aaa radius uiga e ta'ua-station-id format
Exampo le fausiaina o le telefoni-nofoaga-ID mai le mac-address, remote-ID, ma le circuit-ID o:
aaa radius attribute calling-station-id format CLID-FORMAT aaa attribute format CLID-FORMAT format- manoa “%s:%s:%s” client-mac-address-ietf remote-id-tag matagaluega-id-tag
Exampo le fausiaina o le-station-ID mai le mac-address, remote-ID, ma le circuit-ID o:
aaa radius attribute called-station-id format CLDID-FORMAT aaa attribute format CLDID-FORMAT format- manoa “%s:%s” client-mac-address-raw circuit-id-tag
NAS-Port Format NAS-Port o se tau 4-byte o loʻo i ai faʻamatalaga faʻamatalaga faʻapitoa o le Broadband Remote Access Server (BRAS), lea e fesoʻotaʻi ai le Access Aggregation network i le BNG. O lo'o fa'aogaina uma e le Access-Request packets ma Accounting-Request packets. Ina ia fa'ailoa fa'apitoa se uafu fa'aletino i luga ole BRAS, e tele fa'amatalaga e pei ole fata, slot, adapter, ma isi mea e fa'aoga fa'atasi ma le numera o le uafu. O se faatulagaga e mafai ona fetuutuunai ua ta'ua o le format-e ua faauigaina e faataga ai vaega ta'ito'atasi po o vaega o fasi i totonu ole 32 bits o le NAS-Port e fai ma sui pe fa'ailoga vaega eseese e aofia ai fa'amatalaga tau. O fasi ta'ito'atasi i le NAS-Port e mafai ona fa'ailogaina i mataitusi nei:
· Zero: 0 · Tasi: 1 · PPPoX slot: S · PPPoX adapter: A · PPPoX port: P · PPPoX VLAN Id: V · PPPoX VPI: I · PPPoX VCI: C · Session-Id: U · PPPoX Inner VLAN ID : Q
aaa radius attribute nas-port format e [manoa] [type {nas-port-type}] O le poloaiga o loʻo i luga o loʻo faʻaaogaina e faʻapipiʻi ai se manoa faʻapipiʻi-e mo se faʻaoga faapitoa o le ituaiga NAS-Port (RADIUS attribute 61). O tau fa'atagaina ituaiga nas-port e:
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 32
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fausia o Uiga Fa'apitoa
Nas-taulaga-ituaiga
ASYNC SYNC ISDN ISDN_V120 ISDN_V110 VIRTUAL ISDN_PIAFS X75 ETHERNET PPPATM PPPOEOA PPPOEOE PPPOEOVLAN PPPOEOQINQ VIRTUAL_PPPOEOE VIRTUAL_PPPOEOVLAN VIRTUAL_PPPOEOQINQ IPSECO IPECO VIRTUAL_IPOEOVLAN VIRTUAL_IPOEOQINQ
Tulaga taua
0 1 2 3 4 5 6 9 15 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44
Pe mafai ona taua Pe mafai ona iai
maua mai
configured i luga o le
feso'ota'iga feso'ota'iga fa'aoga feso'ota'iga
faiga
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Leai
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Leai
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Ioe
Examples:
For non-bundle: GigabitEthernet0/1/2/3.11.pppoe5
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 33
Fa'atulagaina Lisi Uiga RADIUS
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
lea: PPPoEoQinQ (faapea 2 vlan tags): interface-ituaiga 1: slot 2: adapter 3: port vlan-ids: po o le a lava le vlan-id fafo ma totonu na maua i le PADR e 5: session-id
uiga aaa radius fa'asologa nas-port ma SSAAPPPPQQQQQQQQQVVVVVVVVVUUUU ituaiga 34
Fausia NAS-Port:
01100011QQQQQQQQQQVVVVVVVVVVV0101
Mo fusi: Bundle-Ether17.23.pppoe8 lea: Virtual-PPPoEoQinQ (faapea 2 vlan tags): interface-ituaiga 0: slot 0: adapter 17 (bundle-id): port Vlan-Ids: po'o a lava vlan-id fafo ma totonu na maua i le PADR. 8: session-id
uiga o le aaa fa'aigoa nas-port format ma PPPPPPQQQQQQQQQVVVVVVVVVUUUUUU ituaiga 37
Fausia NAS-Port:
010001QQQQQQQQQQVVVVVVVVVVV000101
NAS-port format mo IP/DHCP sauniga o loʻo faʻatusalia i nei examples:
Mo Ipoeovlan Interface Ituaiga: AAA Shiphis uiga nas-taulaga o le SfaaspadappyDvvvvvvvvvvvvvvvvvvvvvvvvt ituaiga 40
Mo IPoEoQinQ: aaa radius uiga nas-port format e SSAAAPPPPPQQQQQQQQQQVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV
Mo IPoEoVLAN mata'utia: aaa radius uiga nas-port format ma PPPPPPPPVVVVVVVVVVVVVVUUUUUUU ituaiga 43
NAS-port format mo PPPoE sauniga o loʻo faʻatusalia i nei examples:
Mo PPPoEoVLAN ituaiga fa'afeso'ota'i: aaa radius uiga nas-port format e SSAAAPPPPPVVVVVVVVVVVVVVVVUUUU ituaiga 33
Mo Virtual PPPoEoVLAN:. uiga aaa radius nas-port format ma PPPPPPPPVVVVVVVVVVVVVVUUUUUUU ituaiga 36
Fa'aaliga Afai e le'i fa'atulagaina se NAS-Port-Type mo se NAS-Port-Type, e va'ava'ai le faiga mo se fa'aletonu CLI fa'atulagaina mo le fa'atulagaina o le NAS-Port. I le leai o nei faʻatonuga e lua, mo faʻasalalauga faʻatasi ma lena NAS-Port-Type, e le o lafoina le uiga NAS-Port i le server RADIUS.
Fa'atulagaina Lisi Uiga RADIUS
Fa'atino le galuega lea e fatu ai se lisi o uiga o le RADIUS e fa'aoga mo le fa'amamāina o fa'atagaga ma uiga fa'amaumauga.
LAASAGA AOTELEGA
1. configure 2. radius-server attribute listname
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 34
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina Lisi Uiga RADIUS
3. attribute list_of_radius_attributes 4. attribute vendor-id vendor-type number 5. vendor-type vendor-type-value 6. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2
RP/0/RSP0/CPU0:router# configure
radius-server attribute listname ExampLe:
Fa'amatala le igoa o le lisi o uiga.
Laasaga 3 Laasaga 4 Laasaga 5 Laasaga 6
RP/0/RSP0/CPU0:router(config)# radius-server lisi uiga l1
lisi o uiga_of_radius_attributes
Fa'atumu le lisi i uiga fa'ata'amilo.
ExampLe:
Manatua
RP/0/RSP0/CPU0:router(config-attribute-filter)# uiga a1, a2
Mo nisi faamatalaga e uiga i uiga lagolago, tagai Uiga RADIUS, i le itulau 443 .
uiga fa'atau-id fa'atau-ituaiga numera
Fa'atonu le fa'amamāina o uiga e fa'aoga ile fa'atau
ExampLe:
uiga patino (VSAs) e ala i le faʻatagaina o faʻamatalaga faʻapitoa mo VSA e faʻamaonia i le lisi o uiga o le radius
RP/0/RSP0/CPU0:router(config)# 6456
uiga
fa'atau-id
CLI. Faʻamatalaga patino a le faʻatau e aofia ai le faʻatau-id, faʻatau-ituaiga, ma le igoa faʻapitoa i le tulaga o Cisco
VSA lautele. Ole fa'atau-id e amata mai ile 0 ile 4294967295.
fa'atau-ituaiga tagata fa'atau-ituaiga-taua Fa'ataampLe:
Fa'atonu le fa'atauga fa'amatalaga fa'apitoa e pei o le tagata fa'atau-ituaiga e fa'amaoti mai ile lisi o uiga fa'ata'amilo. Ole tele ole tau fa'atau-ituaiga mai le 1 i le 254.
RP/0/RSP0/CPU0:router(config-attribute-filter-vsa)# vendor-type 54
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 35
Fa'atulagaina o le RADIUS Attribute Format
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o le Lisi Uiga o le RADIUS: O se example
fetuutuunai radius-server attribute list list_! uiga BC uiga fa'atau-id fa'atau-ituaiga 10 fa'atau-ituaiga 30 ! i'uga
Fa'atulagaina o le RADIUS Attribute Format
Fai le galuega lea i le fa'avasegaina o uiga o le RADIUS mo le uiga o le nas-port, ma fa'aoga se fa'asologa o le nas-port-ID uiga.
LAASAGA AOTELEGA
1. fetuutuunai 2. aaa radius uiga 3. nas-port format ma manoa ituaiga nas-port-type value 4. nas-port-id format format name 5. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2
RP/0/RSP0/CPU0:router# configure
uiga aaa radius ExampLe:
Fa'atonu le uiga o le AAA radius.
RP/0/RSP0/CPU0:router(config)# aaa radius attribute
Laasaga 3 Laasaga 4
nas-port format ma manoa ituaiga nas-port-type value ExampLe:
Fa'atulaga le faatulagaga mo uiga nas-port. O le manoa o lo'o fa'atusalia ai se manoa e 32 uiga e fa'atusalia ai le fa'atulagaga e fa'aoga. O le nas-port-value e amata mai le 0 i le 44.
RP/0/RSP0/CPU0:router(config)# nas-port format ma format1 type 30
nas-port-id format format name ExampLe:
Fa'aoga se fa'asologa fa'ata'atia i le uiga nas-port-ID.
RP/0/RSP0/CPU0:router(config)# nas-port-id format format2
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 36
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o le RADIUS Attribute Nas-port-type
Laasaga 5
Poloaiga po'o Fa'atino Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
Faamoemoega
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le RADIUS Attribute Format: O se example
fetuutuuna'i aaa radius uiga nas-port format ma abcd type 40 nas-port-id format ADEF ! i'uga
Fa'atulagaina o le RADIUS Attribute Nas-port-type
Faia le galuega lea e fetuutuunai ai le RADIUS Attribute nas-port-type i luga o se atinaʻe faʻapitoa poʻo le VLAN sub-interface:
LAASAGA AOTELEGA
1. fetuutuuna'i 2. ituaiga fa'afeso'ota'i fa'aoga-igoa 3. aaa radius attribute nas-port-type {taua | igoa} 4. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
RP/0/RSP0/CPU0:router# configure
Laasaga 2
ituaiga fa'afeso'ota'i fa'aoga-igoa
ExampLe:
RP/0/RSP0/CPU0:router(config)# interface gigabitEthernet 0/0/0/0
Laasaga 3 aaa radius attribute nas-port-type {taua | igoa}
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi. Ulufale i le faiga fetuutuuna'i fa'aoga.
Fa'atulaga le RADIUS Attribute nas-port-type value.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 37
Fa'atonuga o le Fa'atulagaina o Uiga AAA
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Laasaga 4
Poloaiga po'o Fa'atinoga Fa'atasiampLe:
RP/0/RSP0/CPU0:router(config-afai)# aaa radius attribute nas-port-type 30
or
RP/0/RSP0/CPU0:router(config-afai)# aaa radius uiga nas-port-type Ethernet
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
Fa'amoemoega Ole va'aiga ole tau e mai le 0 i le 44. Va'ai le laulau ile NAS-Port Format, i le itulau 32, mo fa'ataga nas-port-type values i totonu o lenei laina.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga. fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le RADIUS Attribute Nas-port-type: O se example
fetuutuunai fa'aoga gigabitEthernet 0/0/0/0
aaa radius attribute nas-port-type Ethernet ! i'uga
Fa'atonuga o le Fa'atulagaina o Uiga AAA
Fa'atino lenei galuega e fa'atulaga ai se galuega mo le fa'asologa o uiga AAA. O le galuega e mo le aveese o le tagata-igoa seia oʻo i le faʻailoga.
LAASAGA AOTELEGA
1. fetuutuunai 2. aaa uiga fa'atulagaina fa'a-igoa 3. username-strip prefix-delimiter prefix_delimiter 4. Fa'aoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 38
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Taofi Uiga Lei Tofiaina
Laasaga 2 Laasaga 3 Laasaga 4
Poloaiga po o Gaioiga
Faamoemoega
RP/0/RSP0/CPU0:router# configure
aaa fa'asologa o uiga fa'atulagaina-igoa ExampLe:
Fa'ama'oti mai le igoa fa'asologa o lo'o fa'amatalaina ai le galuega.
RP/0/RSP0/CPU0:router(config)# aaa uiga uiga mumu
username-strip prefix-delimiter prefix_delimiter ExampLe:
Fa'atonu le galuega e aveese ai le igoa ole igoa o lo'o i luma ole fa'ailoga muamua, o le @.
RP/0/RSP0/CPU0:router(config-id-format)# username-strip prefix-delimiter @
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le Fa'asologa o Uiga AAA Galuega: O se example
fetuutuunai le aaa uiga fa'apena mūmū username-strip prefix-delimiter @ ! ! i'uga
Taofi Uiga Lei Tofiaina
E mafai ona e taofiofia uiga e le'i tofiaina (fa'ata'ita'i) e pei o le 196 e lafo i le taimi-talosaga e le BNG router ile RADIUS.
Fa'atonu Example Ina ia taofia uiga e le'i tofiaina (fa'ata'ita'i) e pei o le 196 e lafo i le taimi-talosaga e le BNG router i le RADIUS, e tatau ona e fa'amae'aina fa'atonuga nei: 1. Fausia se lisi o uiga e fa'amama ai se uiga, mo fa'atasi.ample uiga 196. 2. Fa'atulaga le radius server host i le vaega AAA.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 39
Faia o le RADIUS Server Settings
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
3. Filifili ma teena le lisi o uiga o loo i ai uiga 196 mai le auina atu i le RADIUS.
4. (Filifili) Fa'atulaga le tuatusi IP o le server RADIUS tumaoti mo le server vaega
5. (Filifili) Fa'atulaga le ki radius-server.
Fa'atonuga
/* Ulufale i le faiga fa'atulagaina o le lalolagi ona fai lea o se lisi o uiga e fa'amama ai se uiga. */ Router# configure Router(configure)# radius-server lisi o uiga Router(config-attribute-filter)# uiga Router(config-attribute-filter)# commit Router(config-attribute-filter)# alu ese
/ * Ulufale i le tulaga faʻatulagaina o le lalolagi ona faʻapipiʻi lea o le radius server host i le vaega AAA. */
Router(configure)# aaa vaega fa'aumau alalaupapa
/* Filifili ma teena le lisi o uiga o loʻo i ai uiga 196 mai le lafoina i le RADIUS. */
Router(config-sg-radius)# fa'atagaga talosaga teena
/* (Filifili) Fa'atulaga le tuatusi IP o le server RADIUS tumaoti mo le server vaega. */ Router(config-sg-radius)# server-private auth-port acct-taulaga
/* (Filifili) Fa'atulaga le ki radius-server. */ Router(config-sg-radius-private)# ki Router(config-sg-radius-private)# commit
Fa'atonuga tamo'e
Router# fa'aalia le fa'aogaina o le fa'atonuga o le fa'asologa o laina-server lisi o uiga FILTER-mm
uiga 196 ! aaa vaega 'au'au fa'aumau radius TEST.
talosaga fa'atagaga teena FILTER-mm server-tu'oti 192.0.2.0 auth-port 1 acct-port 2
ki 7
Faia o le RADIUS Server Settings
Ina ia mafai ona faʻafesoʻotaʻi le BNG ma le server RADIUS, e tatau ona faia ni faʻatonuga faʻapitoa i luga o le router BNG. O lo'o lisiina i lenei laulau nisi o fa'atulagaga autu:
Fa'atonu Fa'aumau fa'auiga Lisi o uiga 'au'auna ki Tūmau Tatau mate
Fa'amatalaga Fa'amatala fa'amatalaga a le server RADIUS e fa'afeso'ota'i i ai le BNG. Fa'amatala poo fea le lisi o uiga e tatau ona fa'aoga. Fa'amatala le tulaga fa'ailoga. Fa'amatala le ta'iala o lo'o fa'aogaina e fa'ailoga ai se server RADIUS ua mate.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 40
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o le RADIUS Server Settings
Fa'atonu
Fa'amatalaga
Retransmit tau Fa'amatala le numera o toe fa'ata'ita'iga e faia e le BNG e lafo ai fa'amaumauga ile server RADIUS.
Tau ole taimi Fa'amatala le umi e fa'atali ai le BNG mo le RADIUS server e tali mai.
Su'ega otometi
Fa'amatala le umi e amata ai su'ega otometi ma le igoa ole igoa ole a su'e.
IP DSCP
Fa'ataga le fa'ailoga RADIUS e fa'ailogaina i se tau ma'oti o le Differentiated Services Code Point (DSCP).
Mo nisi fa'aopoopoina o le fa'atulagaina o le server RADIUS, tagai i le Fa'atulagaina o Fa'atonuga o le RADIUS Server, i le itulau e 41. Mo nisi fa'aopoopoina o le fa'atulagaina o fa'ata'ita'iga otometi, tagai i le Fa'atulagaina o Su'ega Fa'autometi, i le itulau 45. Mo nisi fa'aopoopoina o le fa'atulagaina o le IP DSCP, tagai i le Fa'atulagaina o le IP DSCP mo le RADIUS Server, i le itulau e 46.
Tapulaa
Le tautua profile tulei po'o le tu'i fa'atasi se profile i le faiga e le lagolagoina. Ina ia sii mai se profile mai Radius, le profile e tatau ona talosagaina muamua o se vaega o le talosaga a le au fai saofaga. Na'o le fa'afouga-au'aunaga o lo'o lagolagoina ma e mafai ona fa'aoga e sui ai se tautua na la'uina muamua.
Fa'atulagaina o le RADIUS Server Settings
Fa'atino lenei galuega e fai ai fa'atonuga fa'apitoa a le server RADIUS i luga ole alalaupapa BNG.
LAASAGA AOTELEGA
1. fetuutuunai 2. radius-server host ip-address acct-port accounting_port_number auth-port
authentication_port_number 3. radius-server attribute list list_name attribute_list 4. radius-server key 7 encrypted_text 5. radius-server le faatagaina null-username 6. radius-server mate-critical time value 7. radius-server mate-criteria taumafai le tau 8. radius -server tapula'a ta'i 9. radius-server ipv4 dscp codepoint_value 10. radius-server load-balance method la'ititi-matagofie le amana'ia-preferred-server batch-size 11. radius-server toetransmit retransmit_value 12. radius-server source-port fa'alautele .
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 41
Fa'atulagaina o le RADIUS Server Settings
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2 Laasaga 3
RP/0/RSP0/CPU0:router# configure
radius-server host ip-address acct-port accounting_port_number auth-port authentication_port_number
ExampLe:
Fa'ailoa mai le 'au'aunaga radius ma lona tuatusi IP. Fa'atonu le uafu UDP mo fa'amaumauga a le RADIUS ma talosaga fa'amaoni. Ole numera ole tau fa'amaumauga ma fa'amaoniaga e amata mai i le 0 i le 65535. Afai e leai se tau fa'amaonia, o le fa'aletonu ole 1645 mo le auth-port ma le 1646 mo le acct-port.
RP/0/RSP0/CPU0:router(config)# radius-server host Mai Cisco IOS XR Software Release 5.3.1 ma mulimuli ane, IPv6
1.2.3.4 acct-port 455 auth-port 567
e mafai foi ona fetuutuunai tuatusi mo le server RADIUS
talimalo.
radius-server attribute list list_name attribute_list ExampLe:
Fa'amaoti le lisi o uiga o le 'au'auna, ma fa'avasega uiga o le 'au'ele'ele ua filifilia.
Laasaga 4 Laasaga 5
RP/0/RSP0/CPU0:router(config)# radius-server attribute list rad_list ab
radius-server ki 7 encrypted_text ExampLe:
Fa'ama'oti le ki fa'ailoga mo le server e fa'amalo ai le fa'aletonu, ma ave le tau 0 po'o le 7, lea e ta'u mai ai o le a mulimuli mai le ki e le'i fa'ailogaina.
RP/0/RSP0/CPU0:router(config-radius-host)# radius-server ki 7 rngiry
radius-server le faatagaina null-username ExampLe:
Fa'amaoti mai e le fa'atagaina le null-username mo le radius server.
Laasaga 6 Laasaga 7 Laasaga 8
RP/0/RSP0/CPU0:router(config)# radius-server le faatagaina null-username
radius-server mate-tulaga taimi tau ExampLe:
RP/0/RSP0/CPU0:router(config)# radius-server mate-tulaga taimi 40
radius-server mate-criteria taumafai le tau ExampLe:
RP/0/RSP0/CPU0:router(config)# radius-server mate-fa'ata'ita'iga taumafai 50
radius-server tapula'a taimi e oti EampLe:
Fa'ama'oti le ta'iala o le su'esu'eina o le server ua mate mo se server RADIUS ua fa'atulagaina. O le taimi (i sekone) o lo'o fa'amaoti mai ai le taimi la'ititi e tatau ona alu talu ona maua mai se tali mai lenei RADIUS server.
Fa'ailoa le tau mo le numera o taimi soso'o e tatau ona tupu i luga o le router a'o le'i fa'ailogaina le server RADIUS ua mate. O le tau e amata mai le 1 i le 100.
Fa'ailoa mai le taimi i minute o lo'o fa'ailogaina ai se server RADIUS ua mate. Ole tapula'a ole taimi e fa'amaoti ai ile minute
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 42
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o le RADIUS Server Settings
Laasaga 9 Laasaga 10
Laʻasaga 11 Laʻasaga 12 Laʻasaga 13 Laʻasaga 14 Laʻasaga 15 Laʻasaga 16
Poloaiga po o Gaioiga
RP/0/RSP0/CPU0:router(config)# radius-server taimi mate 67
Faamoemoega
ma va'aiga mai le 1 i le 1440. Afai e leai se tau fa'amauina, o le fa'aletonu o le 0.
radius-server ipv4 dscp codepoint_value ExampLe:
Fa'ataga le fa'ailoga fa'ailoga e fa'ailoga ai se fa'ailoga fa'ailoga o auaunaga eseese (DSCP). O lenei fa'ailoga numera e va'ava'ai mai le 0 i le 63.
RP/0/RSP0/CPU0:router(config)# radius-server ipv4 dscp 45
radius-server load-balance method least-outstanding Fa'atonu le radius load-balance options e ala i le pikiina
le amana'ia-preferred-server lapo'a tele
le 'au'aunaga e iai ni fefa'ataua'iga aupito itiiti. Lenei
ExampLe:
auala-paleni auala e faʻaaogaina ai le tele o vaega mo le filifilia o le 'auʻaunaga. Ole lapopoa e mai le 1 i le 1500. Afai e leai se tau
RP/0/RSP0/CPU0:router(config)# radius-server
ua faʻamaonia, o le faaletonu o le 25.
ala-paleni auala aupito itiiti-talaloa
le amanaia-preferred-server batch-size 500
radius-server toetransmit retransmit_value ExampLe:
RP/0/RSP0/CPU0:router(config)# radius-server toe lafo 45
Fa'ailoa mai le aofa'i o le toe taumafai i le server galue. O le tau toe fa'asalalau e fa'ailoa mai ai le aofa'i o toe su'esu'e ile numera ma va'ava'ai mai le 1 i le 100. Afai e leai se tau o fa'ailoa mai, o le fa'aletonu ole 3.
radius-server source-port extended ExampLe:
Fa'atulaga le BNG e fa'aoga ai le aofa'i o ports 200 e fai ma ports puna mo le tu'uina atu o talosaga RADIUS.
RP/0/RSP0/CPU0:router(config)# radius-server source-port faalautele
radius-server tau fa'agata EampLe:
RP/0/RSP0/CPU0:router(config)# radius-server taimi
radius-server vsa attribute le amanaia le iloa ExampLe:
Fa'ama'oti le taimi e fa'atali ai se 'au'aunaga radius e tali mai. O le tau o lo'o i sekone ma e amata mai le 1 i le 1000. O le fa'aletonu o le 5.
Le amana'ia uiga fa'atau-fa'apitoa e le iloa mo le 'au'aunaga radius.
RP/0/RSP0/CPU0:router(config)# radius-server vsa uiga le amanaiaina le iloa
radius source-interface Loopback value vrf vrf_name Fa'ailoa mai le loopback interface mo tuatusi puna ile RADIUS
ExampLe:
afifi. Ole tau e amata ile 0 ile 65535.
RP/0/RSP0/CPU0:router(config)# radius source-interface Loopback 655 vrf vrf_1
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 43
Fa'atulagaina o le RADIUS Server Settings
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Poloaiga po o Gaioiga
Fa'ai'uga fa'amoemoe - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le RADIUS Server Settings: Examples
\Configuring RADIUS Server Options configure radius-server attribute list1 ab radius-server mate-tulaga taimi 100 radius-server taimi mate 30 radius-server le faatagaina null-username radius-server host 1.2.3.4 acct-port 655 auth-port-566 server ipv4 dscp 34 radius-server key 7 ERITY$ radius-server load-balance method la'ititi-matagofie le amana'ia-preferred-server batch-size 25 radius-server toe fa'asalalau 50 radius-server source-port fa'alautele radius-server taimi 500 radius-server vsa uiga le amanaiaina le iloa ! ! i'uga
\Configuring RADIUS Attribute List radius-server attribute list list_! uiga BC uiga fa'atau-id fa'atau-ituaiga 10 fa'atau-ituaiga 30 ! i'uga
\Configuring RADIUS Server Host configure radius-server host 1.3.5.7 acct-port 56 auth-port 66 idle-time 45 ignore-acct-port ignore-auth-port 3.4.5.6 key 7 ERWQ retransmit 50 su'e username username time out 500 ! i'uga
\Configuring RADIUS Server Key configure radius-server ki 7 ERWQ ! i'uga
\ Fa'atulagaina le Paleni o uta mo le RADIUS Server
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 44
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o Su'ega Fa'autometi
fetu'una'i auala fa'aa'ai-fa'atau-paleni alalausi-server la'ititi lapopo'a lapopo'a-tele 25 fa'aalaisa-server auala fa'a-paleni fa'atauta'i la'ititi-ta'uta'ua le amana'ia-e mana'omia-server lapopo'a 45 ! i'uga
\ Le amana'ia Uiga VSA Le Malamalama i le RADIUS Server configure le radius-server vsa uiga le iloa le iloa ! i'uga
\Configuring Criteria Mate mo RADIUS Server configure radius-server mate-tulaga taimi 60 radius-server mate-criteria taumafai 60 ! i'uga
\Configuring Disallow Username configure radius-server disallow null-username! i'uga
\ Seti IP DSCP mo RADIUS Server configure radius-server ipv4 dscp 43 radius-server ipv4 dscp faaletonu ! i'uga
Fa'atulagaina o Su'ega Fa'autometi
Faia le galuega lea e su'e ai pe o le RADIUS server fafo o UP pe leai.
LAASAGA AOTELEGA
1. configure 2. radius-server idle-time idle_time 3. radius-server test username username 4. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
RP/0/RSP0/CPU0:router# configure
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 45
Fa'atulagaina le IP DSCP mo le RADIUS Server
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Laasaga 2 Laasaga 3 Laasaga 4
Poloaiga po'o Gaioiga radius-server idle-time idle_time ExampLe:
Faamoemoega
Fa'ama'oti le taimi fa'aletonu e tatau ona amata ai le su'ega otometi. O le taimi fa'aletonu e fa'amaoti i minute, ma e va'ava'ai mai le 1 i le 60.
RP/0/RSP0/CPU0:router(config-radius-host)# radius-server-taimi e leai se aoga 45
radius-server su'ega igoa fa'aoga igoa fa'aogaampLe:
Fa'amaoti le igoa ole igoa ole a su'eina mo le fa'atinoina ole su'ega otometi.
RP/0/RSP0/CPU0:router(config-radius-host)# radius-server su'ega username user1
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o Su'ega Fa'aautomatika: O se fa'auluample
fetuutuunai radius-server idle-taimi 60 radius-server su'ega username user_1 ! i'uga
Fa'atulagaina le IP DSCP mo le RADIUS Server
Faia le galuega lea e seti ai le IP differentiated services code point (DSCP) mo le server RADIUS.
LAASAGA AOTELEGA
1. configure 2. radius-server ipv4 dscp codepoint_value 3. radius-server ipv4 dscp default 4. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 46
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'apaleni le utaga o Fefa'ataua'iga i luga ole RADIUS Server
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2 Laasaga 3
RP/0/RSP0/CPU0:router# configure
radius-server ipv4 dscp codepoint_value
Fa'ataga afifi radius e fa'ailoga i se mea fa'apitoa
ExampLe:
'ese'ese 'au'aunaga code point (DSCP) tau e sui ai le IP tuai, se 3-bit fanua i le Ituaiga o
Au'aunaga byte o le ulutala IP na fa'aaoga muamua e fa'avasega ma
RP/0/RSP0/CPU0:router(config)# dscp 45
radius-server
ipv4
faamuamua ituaiga feoaiga. Ole tau ole numera ole code e afua mai
0 i le 63.
radius-server ipv4 dscp faaletonu ExampLe:
E fetaui ma pepa ma le dscp faaletonu (000000).
Laasaga 4
RP/0/RSP0/CPU0:router(config)# radius-server ipv4 dscp faaletonu
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina le IP DSCP mo le RADIUS Server: O se example
fetuutuunai radius-server ipv4 dscp 43 radius-server ipv4 dscp faaletonu ! i'uga
Fa'apaleni le utaga o Fefa'ataua'iga i luga ole RADIUS Server
O le RADIUS load-balancing feature o se faiga e fa'asoa ai le uta o le avanoa o le RADIUS ma fefa'ataua'iga tau tupe, i luga o se seti o 'au'aunaga RADIUS. O fa'agaioiga talosaga ta'itasi a le AAA e manatu ose fefa'ataua'iga. BNG tufatufa vaega o fefaʻatauaiga i 'auʻaunaga i totonu o se vaega faʻaumau.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 47
Fa'atulagaina o le Paleni Uta mo le Global RADIUS Server Group
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
A maua le fefa'ataua'iga muamua mo se mea fou, e fuafua e le BNG le 'au'aunaga ma le numera aupito maualalo o fefa'atauaiga mata'ina i lona laina. O lenei 'au'aunaga ua tu'uina atu i lena vaega o fefa'atauaiga. O lo'o fa'aauau pea ona toe faia e le BNG lenei faiga fa'ai'uga ina ia fa'amautinoa e maua e le 'au'aunaga fa'atauva'a fa'atauva'a se vaega fou. O lenei metotia ua lauiloa o le auala aupito sili ona mata'utia o le paleni o uta.
E mafai ona e fetuutuuna'i le vaega o le paleni o uta i le lalolagi atoa, po'o le RADIUS servers o se vaega o se vaega o le server. I totonu o le vaega o le server, afai e faʻamalamalamaina se server e sili ona fiafia i ai, e tatau ona e aofia ai le upu "ignore-preferred-server" i le faʻatulagaina o uta-paleni, e faʻamalo ai le manaʻoga.
Mo le fetuunaiga o le vaega o le paleni o uta i le lalolagi atoa, tagai i le Faatulagaina o le Paleni o uta mo le Global RADIUS Server Group, i le itulau 48.
Mo le fetuutuunai o le vaega o le faapaleniina o uta i luga o sapalai o le RADIUS o se vaega o se vaega o loo ta'ua o le server, tagai i le Faatulagaina o le Paleni o uta mo se Vaega Aumau o le RADIUS, i le itulau 49.
Fa'atulagaina o le Paleni Uta mo le Global RADIUS Server Group
Fa'atino lenei galuega e fa'agaoioi ai le galuega o le paleni o uta mo le vaega o le server RADIUS i le lalolagi atoa. I le avea ai ma se example, i lenei faatulagaga ua setiina le server sili e le amanaiaina.
LAASAGA AOTELEGA
1. fetuutuuna'i 2. auala fa'aa'ai-fa'atau-paleni alala'o-server lapopo'a lapopo'a lapopo'a sili ona mata'ina 3. auala fa'apaleni uta fa'aalaisa-auva'a e sili ona fa'aamana'ia-fa'ameamea-sili-sili-server lapopo'a lapopo'a 4. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2 Laasaga 3
RP/0/RSP0/CPU0:router# configure
radius-server load-balance method la'ititi la'ititi lapo'a lapo'a tele
ExampLe:
RP/0/RSP0/CPU0:router(config)# radius-server load-balance method la'ititi-matagofie vaega-tele 500
Fa'atulaga le radius load-balancing options e ala i le pikiina o le server ma fefa'ataua'iga aupito itiiti. O lenei auala fa'atatau o uta e fa'aogaina ai le lapopo'a mo le filifilia o le 'au'aunaga. Ole lapopo'a e mai le 1 i le 1500. Afai e leai se tau fa'amauina, ole fa'aletonu ole 25.
radius-server load-balance method la'ititi-talagofie le amana'ia-preferred-server lapo'a-tele
ExampLe:
RP/0/RSP0/CPU0:router(config)# radius-server load-balance method la'ititi-matagofie le amana'ia-preferred-server batch-size 500
Fa'atonu le radius load-balncing options e ala i le tapeina o le server e mana'omia mo lenei Vaega o Auaunaga. O lenei auala fa'atatau o uta e fa'aogaina ai le lapopo'a mo le filifilia o le 'au'aunaga. Ole lapopo'a e mai le 1 i le 1500. Afai e leai se tau fa'amauina, ole fa'aletonu ole 25.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 48
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o le Paleni Uta mo se Fa'aigoa RADIUS Server Group
Laasaga 4
Poloaiga po'o Fa'atino Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
Faamoemoega
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le Paleni Uta mo le RADIUS Server: O se example
fetu'una'i auala fa'aa'ai-fa'atau-paleni alalausi-server la'ititi lapopo'a lapopo'a-tele 25 fa'aalaisa-server auala fa'a-paleni fa'atauta'i la'ititi-ta'uta'ua le amana'ia-e mana'omia-server lapopo'a 45 ! i'uga
Fa'atulagaina o le Paleni Uta mo se Fa'aigoa RADIUS Server Group
Fa'atino le galuega lea e fa'agaoioi ai le galuega fa'apaleni uta mo se vaega fa'aumau igoa RADIUS. I le avea ai ma se example, i lenei faatulagaga ua setiina le server sili e le amanaiaina.
LAASAGA AOTELEGA
1. fetuutuunai 2. aaa vaega server radius server_group_name auala uta-paleni auala aupito sili ona mata'ina
lapopoa 3. aaa vaega server radius server_group_name metotia uta-paleni aupito sili ona mata'ina
le amana'ia-preferred-server batch-size size 4. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2
RP/0/RSP0/CPU0:router# configure
aaa vaega server radius server_group_name
Fa'atulaga le radius load-paleni filifiliga e ala i le pikiina
auala-paleni auala aupito sili ona mata'utia le lapopo'a o le 'au'aunaga ma fefa'ataua'iga aupito itiiti. Lenei
ExampLe:
auala fa'apaleni uta e fa'aaoga ai le lapo'a-tele mo le filifiliga
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 49
Fa'amauina o Fa'amaumauga a le RADIUS
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Laasaga 3 Laasaga 4
Poloaiga po o Gaioiga
Faamoemoega
o le server. Ole lapopoa e mai le 1 i le 1500. Afai e leai se tau
RP/0/RSP0/CPU0:router(config)# aaa group server radius sg1 uta-paleni auala aupito sili ona mata'ina
ua faʻamaonia, o le faaletonu o le 25.
vaega-tele 500
aaa vaega server radius server_group_name ala-paleni auala aupito itiiti-matagofie le amana'ia-filifili-filifiliga-server lapopoa-tele
ExampLe:
Fa'atonu le radius load-balncing options e ala i le tapeina o le server e mana'omia mo lenei Vaega o Auaunaga. O lenei auala fa'atatau o uta e fa'aogaina ai le lapopo'a mo le filifilia o le 'au'aunaga. Ole lapopo'a e mai le 1 i le 1500. Afai e leai se tau fa'amauina, ole fa'aletonu ole 25.
RP/0/RSP0/CPU0:router(config)# aaa group server radius sg1 uta-paleni auala aupito itiiti-matagofie le amana'ia-filifiliga-server vaega-tele 500
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'amauina o Fa'amaumauga a le RADIUS
O fa'amaumauga Fa'amauina o le AAA (RADIUS) o se faiga e 'alofia ai le fa'apopoleina o le RADIUS ma le fa'aletonu. E aoga lenei galuega i tulaga pe a le lava le bandwidth e faʻafeiloaʻi ai se faʻalavelave faʻafuaseʻi o talosaga a le AAA na faia e le BNG mo le server RADIUS.
A'o fa'apipi'iina le fa'atosina, o lo'o fa'amalamalamaina se fua fa'atatau, e fetaui ma le aofa'i maualuga o talosaga e le'i mae'a. E mafai ona fa'atulagaina fua fa'atatau mo le fa'aogaina (fa'amaoni ma le fa'atagaina) ma fa'atonuga tau fa'amaumauga. A mae'a ona o'o i se fa'atauga mo se 'au'aunaga, e leai se isi talosaga o lea ituaiga e lafo i le 'au'aunaga. Ae peita'i, mo talosaga o lo'o fa'atali, e amata le taimi e toe fa'asalalauina, ma afai o le numera o talosaga e le'i mae'a (lea e siaki pe a mae'a taimi uma), e itiiti ifo nai lo le fa'amata, ona lafo atu lea o le talosaga.
Talu ai e ono ta'oto se sauniga ona o le fa'ato'ato'a o talosaga mo avanoa, ua fa'atulaga se tapula'a mo le aofa'i o taumafaiga e toe fa'asalalau. A mae'a ona ausia lenei tapula'a, e toe fa'ate'a nisi talosaga mo avanoa. Ae ui i lea, o talosaga fa'atausitusi fa'atosina, e fa'agasolo i le fa'agaioiga failover-group.
E mafai ona fetuutuuna'i le fa'aogaina i le lalolagi atoa, pe mo se vaega-server. Ae ui i lea, o le tulafono lautele o le faʻatulagaina o mea e fiafia i ai o le faʻaogaina o le server-group e faʻafefe ai le faʻatulagaina o le lalolagi, pe a iai.
O le syntax mo le faʻatonuga o le CLI o le:
radius-server throttle {[accounting THRESHOLD] [access THRESHOLD [access-time out NUMBER_OF-TIMEOUTS]]}
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 50
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina le RADIUS Throttling Globally
o fea:
· accounting THRESHOLD–Fa'amaoti le tapulaa mo talosaga tau tupe. Ole laina ole 0 ile 65536. O le faaletonu ole 0, ma fa'ailoa mai e le mafai ona fa'agata mo talosaga tau tupe.
· avanoa THRESHOLD–Fa'amaoti le fa'ailoga mo talosaga mo avanoa. Ole laina ole 0 ile 65536. O le faaletonu ole 0, ma fa'ailoa mai e le mafai ona fa'agata mo talosaga tau tupe.
· Access-time out NUMBER_OF-TIMEOUTS–Fa'ama'oti le aofa'i o taimi soso'o e tatau ona tupu i luga o le alalaupapa, a mae'a ona tu'u ai lea o talosaga-maua. Ole laina ole ole mai le 0 ile 10. Ole faaletonu ole 3.
Fa'aaliga I le fa'aletonu, ua fa'aletonu le fa'aogaina o le fa'aogaina ile BNG.
Mo le fa'agaoioia o le fa'amalo i le lalolagi atoa, tagai i le Fa'atulagaina o le RADIUS Throttling i le lalolagi atoa, i le itulau e 51. Mo le fa'agaoioia o le fa'aoso i luga o se vaega o le server, tagai i le Fa'atulagaina o le RADIUS Throttling i luga o se Vaega o Auaunaga, i le itulau 52.
Fa'atulagaina le RADIUS Throttling Globally
Fai lenei galuega e fa'agaoioi ai le RADIUS throttling i le lalolagi atoa.
LAASAGA AOTELEGA
1. configure 2. radius-server throttle access threshold_value 3. radius-server throttle access threshold_value access-time out value 4. radius-server throttle access threshold_value access-time out value accounting threshold_value 5. radius-server throttle_value access thresholding value tau 6. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2 Laasaga 3
RP/0/RSP0/CPU0:router# configure
radius-server throttle access threshold_value ExampLe:
RP/0/RSP0/CPU0:router(config)# radius-server avanoa throttle 10
radius-server throttle access threshold_value access-time out value
Pulea le numera o talosaga avanoa e lafo ile server RADIUS. O le tau fa'ailoga e fa'ailoa mai ai le aofa'i o talosaga avanoa e le'i mae'a ona fa'atinoina lea e tatau ona fa'atino ai le fa'aitiitiga. Ole laina ole 0 ile 65535, ma ole tau ole 100.
Fa'amaoti mai le aofa'i o taimi fa'amuta, pe a mae'a ona fa'ato'a fa'ato'a fa'atalosaga le avanoa. O le tau e faʻaalia ai le numera
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 51
Fa'atulagaina o le RADIUS Throttling i luga o se Vaega o Auaunaga
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Laasaga 4 Laasaga 5 Laasaga 6
Poloaiga po'o Fa'atinoga Fa'atasiampLe:
RP/0/RSP0/CPU0:router(config)# radius-server avanoa throttle 10 avanoa-taimi 5
Faamoemoega
o taimi malolo mo se fefaʻatauaiga. Ole laina ole 1 ile 10, ma ole faaletonu ole 3.
radius-server throttle access threshold_value
Pulea le aofa'i o talosaga e tape avanoa e lafo i a
avanoa-taimi fa'agata tau fa'amatalaga tau fa'amautu_value
RADIUS server. O le tau fa'ailoga e fa'ailoa ai le numera
ExampLe:
o fa'atauga fa'atausitusi mata'ina pe a mae'a e tatau ona fa'atino le fa'aitiitia. Ole laina ole 0 ile 65535, ma ole
RP/0/RSP0/CPU0:router(config)# radius-server
tau e mana'omia e 100.
avanoa fa'amau 10 avanoa-taimi 5 fa'amaumauga 10
radius-server throttle accounting threshold_value Puleaina le aofa'i o talosaga tau tupe e lafo i se
tau aoga avanoa-taimi aoga
RADIUS server. O le tau fa'ailoga e fa'ailoa ai le numera
ExampLe:
o fa'atauga fa'atausitusi mata'ina pe a mae'a e tatau ona fa'atino le fa'aitiitia. Ole tau ile va ole 0 ile 65535
RP/0/RSP0/CPU0:router(config)# radius-server
ma o le tau sili e 100.
fa'amautu fa'amatalaga 56 avanoa 10 avanoa-taimi 5
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le RADIUS Throttling Globally: O se example
fetu'utu'una'i radius-server throttle access 10 avanoa-taimi 5 accounting 10 ! i'uga
Fa'atulagaina o le RADIUS Throttling i luga o se Vaega o Auaunaga
Fa'atino le galuega lea e fa'agaoioi ai le RADIUS throttling i luga o se vaega o le server.
LAASAGA AOTELEGA
1. configure 2. aaa vaega server radius server_group_name 3. server hostname acct-port acct_port_value auth-port auth_port_value
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 52
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fa'atulagaina o le RADIUS Throttling i luga o se Vaega o Auaunaga
4. throttle access threshold_value access-time out value accounting threshold_value 5. Fa'aaoga le commit po'o le fa'ai'uga poloaiga.
LAASAGA FA'AMANATU
Laasaga 1
Poloaiga po'o Gaioiga configure ExampLe:
Fa'amoemoega Ulufale atu i le fa'atulagaina o le lalolagi.
Laasaga 2
RP/0/RSP0/CPU0:router# configure
aaa vaega server radius server_group_name ExampLe:
Fa'atulaga le AAA (RADIUS) fa'auigaina vaega-vaega.
Laasaga 3 Laasaga 4 Laasaga 5
RP/0/RSP0/CPU0:router(config)# aaa vaega server radius SG1
server hostname acct-port acct_port_value auth-port Fa'atonu se fa'amaumauga a le server RADIUS po'o le fa'amaoni
auth_port_value
uafu ma le tuatusi IP po'o le igoa talimalo (pei ona fa'amaonia).
ExampLe:
O le numera o le taulaga fa'amaumauga ma le numera o le tau fa'amaonia mai le 0 i le 65535.
RP/0/RSP0/CPU0:router(config-sg-radius)# server 99.1.1.10 auth-port 1812 acct-port 1813
throttle access threshold_value access-time out value Fa'atonu le RADIUS throttling options e pulea ai le
tau fa'atusitusi
numera o avanoa ma talosaga fa'amatalaga na lafo ile RADIUS
ExampLe:
server. O le tau fa'ailoga o lo'o fa'ailoa mai ai le aofa'i o talosaga fa'ato'a avanoa po'o fefa'ataua'iga tau tupe pe a mae'a
o le fea tootoga e tatau ona faia. Ole laina ole 0
RP/0/RSP0/CPU0:router(config-sg-radius)# radius-server avanoa throttle 10 avanoa-taimi 5 accounting 10
ia
65535,
ma
mo
e lua
avanoa
ma
tausitusi
talosaga
o le
tau e mana'omia e 100.
Fa'aaoga le fa'atonuga po'o le fa'ai'uga.
commit - Faʻasaoina suiga o le faʻatulagaina ma tumau i totonu o le faʻatulagaina o le sauniga.
fa'ai'uga - Fa'atonu le tagata fa'aoga e fai se tasi o nei taga:
· Ioe — Faasaoina suiga o le faatulagaga ma alu ese mai le sauniga faatulagaina.
· Leai –E alu ese mai le sauniga faatulagaina e aunoa ma le faia o suiga faatulagaina.
· Faʻaleaogaina -Tumau i le faʻatulagaga faʻatulagaina, e aunoa ma le faia o suiga faʻatulagaina.
Fa'atulagaina o le RADIUS Throttling i luga o se Vaega o Auaunaga: O se example
fetuutuunai aaa vaega server radius SG1
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 53
RADIUS Suiga o Fa'atagaga (CoA) Ua umaview
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
server 99.1.1.10 auth-port 1812 acct-port 1813 radius-server avanoa throttle 10 avanoa-taimi malolo 5 accounting 10 ! i'uga
RADIUS Suiga o Fa'atagaga (CoA) Ua umaview
O le Suiga o Fa'atagaga (CoA) galuega e mafai ai e le RADIUS server ona sui tulaga fa'atagaina mo se tagata fai saofaga ua uma ona fa'atagaina. O le CoA o se faʻaopoopoga i le RADIUS standard e faʻatagaina ai le auina atu o feʻau faʻafefe mai RADIUS servers i le RADIUS client, pei o le BNG.
Manatua O le CoA server e mafai ona ese mai le RADIUS server.
Ina ia iloa le tagata fai saofaga e manaʻomia ona suia lona faʻatulagaga, e lagolagoina ma faʻaogaina e le server RADIUS CoA le tele o ki (RADIUS attributes) e pei ole Accounting-Session-ID, Username, IP-Address, ma ipv4: vrf-id. E lagolagoina e le RADIUS CoA:
· account-logon - Pe a saini se tagata faʻaoga i totonu o se fesoʻotaʻiga, o se fafo web O le faitoto'a e lagolagoina le CoA e tu'uina atu se talosaga-logon i le BNG fa'atasi ai ma fa'amatalaga a le tagata fa'aoga (igoa fa'aoga ma upu fa'aulu). Account-logon i luga ole BNG ona taumafai lea e faʻamaonia le tagata faʻaoga e ala ile RADIUS ma na faʻamaoniga.
· account-logoff– E fa'agasolo e le BNG le talosaga-logoff e fai ma fa'alavelave mo le tagata fai saofaga ma fa'amuta le sauniga.
Manatua O le RADIUS CoA server e le'o fa'aseseina i le va na mafua ai le mea na motusia. O le mea lea, pe a maua e le BNG se faʻamatalaga-logoff talosaga mai le RADIUS CoA server, mo le faʻaaogaina e le faʻaaogaina ma le faʻatonuina o le pule, o le Acct-Terminate-Cuse e auina atu i le RADIUS server e masani lava ona setiina o le Admin-Reset. .
· fa'afou fa'amatalaga - BNG fa'asolo ma fa'aogaina uiga na maua o se vaega o le CoA profile. Na'o uiga fa'apitoa a le au fai saofaga o lo'o lagolagoina ma fa'aoga i le tagata fa'aoga profile.
· fa'agaoioi-au'aunaga - BNG e amata se auaunaga fa'avasegaina i se tagata fai saofaga. E mafai ona fa'auigaina fa'au'uga fa'apitonu'u e se fa'ata'ita'iga malosi, po'o le la'uina mai le server RADIUS.
· deactivate-auaunaga - BNG taofi se auaunaga na amataina muamua i luga o le tagata fai saofaga, lea e tutusa ma le deactivation o se dynamic-template.
Mo se lisi o Uiga Fa'atau-Fa'atau e lagolagoina mo le fa'agaioiina o teugatupe, va'ai Uiga Fa'apitoa Fa'atau mo Fa'agaioiga Fa'amatalaga, i le itulau 451.
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 54
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
RADIUS Suiga o Fa'atagaga (CoA) Ua umaview
Fa'aaliga Ina ia mafai e le BNG ona fa'ataga le fa'atupe le tumau, e fa'atulafonoina le talosaga a le CoA e maua uma le lisi o metotia fa'amatalaga mai le dynamic-template ma le Acct-Interim-Interval uiga mai le tagata fa'aoga profile. O lenei amio e fa'aoga mo fa'amatalaga fa'aagaaga e ala ile dynamic-template. Ae, mai Cisco IOS XR Software Release 5.3.0 ma mulimuli ane, o le talosaga a le CoA e manaʻomia naʻo le Acct-Interim-Interval attribute i le tagata faʻaoga profile.
Auaunaga Fa'agaoioia mai le CoA BNG e lagolagoina le fa'agaoioia o auaunaga e ala i talosaga a le CoA. O le CoA service-activate command e faʻaaogaina mo le faʻagaoioia o auaunaga. O le talosaga a le CoA mo le fa'agaoioia o auaunaga e tatau ona aofia ai uiga nei:
· “tagata fai saofaga:poloaiga=faagaoioia-auaunaga” Cisco VSA · “tagata fai saofaga:au'aunaga-igoa = ” Cisco VSA · O isi uiga o se vaega o le auaunaga profile
O le “ ” e mafai fo'i ona fa'aoga e fa'agaoioi ai auaunaga mai le CoA ma ala i le RADIUS. E mafai ona lafo atu i le BNG ni talosaga e fa'agaoioia auaunaga fa'alua mai le server CoA. E le faia e le BNG se gaioiga i luga o auaunaga ua uma ona faʻagaoioia. E auina atu e le BNG se fe'au CoA ACK i le CoA server i lalo o nei fa'aaliga:
· Pe a o'o mai se talosaga fa'alua fa'atasi ma fa'amaufa'ailoga tutusa e sau mai le CoA mo se tautua ua uma ona fa'agaoioia.
· Pe a o'o mai se talosaga fa'alua fa'atasi ma tapula'a tutusa mai le CoA e fa'aoga se auaunaga fa'avasega.
E auina atu e le BNG se feʻau CoA NACK i le CoA server ma se faʻailoga sese o se uiga le aoga i lalo o nei faʻaaliga:
· Pe a sau se talosaga mai le CoA e faʻateʻaina se auaunaga e le faʻaogaina e le faʻaogaina i le vasega.
· Pe a sau se talosaga mai le CoA e faʻateʻaina se auaunaga faʻapitoa e le faʻaaogaina i le vasega.
· Pe a faia se fa'aluaina talosaga e fa'aoga se auaunaga fa'avasegaina e faia fa'atasi ai ma ta'iala e le tutusa mai le CoA.
· Pe a o'o mai se talosaga e le tutusa ta'iala mai le CoA e fa'ate'aina se auaunaga fa'avasega.
Au'aunaga Fa'afouga mai le CoA O le fa'afouga o auaunaga e fa'atagaina ai se auaunaga-pro o iai neifile ia fa'afou i se lisi fou o uiga RADIUS e fai ma sui o le auaunaga fa'afouina. E a'afia ai so'o se tagata fai saofaga ua uma ona fa'agaoioia ma le tautua ma le tagata fai saofaga fou e fa'agaoioia le auaunaga i le lumana'i. O le CoA service-update command e faʻaaogaina mo le faʻagaoioia o lenei vaega. O le talosaga a le CoA mo le fa'afouga o auaunaga e tatau ona iai uiga nei:
· “tagata fai saofaga: poloaiga = auaunaga-faafouga” Cisco VSA · “faitalafu: tautua-igoa = ” Cisco VSA · O isi uiga o se vaega o le auaunaga profile
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 55
Suiga Fa'a-Fa'aagaaga Tele o Fa'atagaga
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
O se fa'afouga auaunaga CoA e tatau ona i ai se la'ititi o nei uiga:
· vsa cisco generic 1 manoa "subscriber: command = service-update"
· vsa cisco generic 1 manoa “subscriber:service-name= ”
Web Logn ma le RADIUS Based CoA
Ia lagolago Web Logon, o se seti o Faiga Faʻavae Tulafono e manaʻomia ona faʻatulagaina i se faiga faʻatonu. O mea nei e tutupu:
· sauniga-amata:
· I le amataga o se sauniga, ua setiina se tagata fai saofaga e maua ai le initaneti. O lo'o fa'agaoioia le 'au'aunaga e toe fa'afeiloa'i ai fefa'ataua'iga HTTP i a Web faitotoa mo web-fa'avae logon.
· Amata le taimi ma le umi mo le maualuga o le taimi faʻatali mo le faʻamaoni.
· account-logon — Le Web e aoina e le faitotoa fa'amatalaga fa'aoga e pei ole igoa ole igoa ma le fa'aupuga ma fa'aosoina ai se fa'atonuga o le CoA account-logon. A fa'atupuina lenei mea, e fa'amaonia e le server RADIUS le igoa ole igoa ma le uputatala. O le taimi lava e manuia ai le faʻamaoniga, o le HTTP redirect 'auʻaunaga e le faʻaaogaina, faʻatagaina tagata faʻaoga avanoa ile seti initaneti ua uma ona fesoʻotaʻi. E le gata i lea, e tatau ona taofi le taimi na fa'atuina i le vasega-amata. Ae peitaʻi, afai e le manuia le faʻamaoniga i le taimi o faʻamatalaga-logon, e tuʻuina atu e le BNG se talosaga NAK CoA, faʻatagaina mo nisi faʻamaoniga faʻamaonia e faia.
· taimi e muta ai le taimi — A uma le taimi, e motusia le sauniga a le au fai saofaga e faavae i le faatulagaga.
Suiga Fa'a-Fa'aagaaga Tele o Fa'atagaga
E lagolagoina e le BNG le tele-gaioiga Suiga o le Fa'atagaga (CoA) lea e mafai ai e kamupani o lo'o tu'uina atu auaunaga ona fa'agaoioia ma fa'ate'aina le tele o auaunaga e fa'aaoga ai se talosaga a le CoA e tasi. Ole tele-gaioiga CoA e lagolagoina mo le tautua-Logon ma le Service-Logoff CoA poloaiga. O le fa'atonuga a le Auaunaga-Logon e mafai ona aofia ai se tasi pe sili atu Au'aunaga-Fa'aagaoioia uiga, ma le filifiliga Auaunaga-Ta'e'ese uiga, mo le tele-gaioiga CoA e faʻamaonia ai auʻaunaga e faʻagaoioia pe faʻagata. E fa'apena fo'i, o le 'au'aunaga-Logoff command e mafai ona aofia ai se tasi po'o le sili atu Au'aunaga-Fa'ate'aina uiga, ma le filifiliga Auaunaga-Fa'agaoioia uiga, mo le tele-gaioiga CoA e fa'amaonia ai le au'aunaga e fa'ate'aina pe fa'agaoioia.
MA-CoA e lagolagoina e oʻo atu i le maualuga o le 10 faʻagaioiga auaunaga poʻo le faʻamalo i le talosaga a le MA-CoA, peitaʻi, e fautuaina e tuʻuina atu le ono faʻagaioiga poʻo le deactivation mo le MA-CoA talosaga.
I le taimi o le talosaga a le CoA e tele-action, afai e le mafai e le COA talosaga ona faʻagaoioia pe faʻagata, ona toe faʻafoʻi atu lea o soʻo se auaunaga ua faʻagaoioia pe faʻagata o se vaega o lena talosaga a le CoA i lona tulaga muamua. O le sauniga e toe faʻafoʻi i lona tulaga muamua-MA-CoA pe a le mafai ona faʻagaoioia pe faʻagata.
E mafai ona fetuutuuna'i se mea e toe fa'afo'i tua, fa'aletonu, e fa'amaoti mai ai po'o le a le gaioiga e tatau ona fai pe a le manuia le toe fa'afo'i mai o le tautua pe a mae'a le talosaga a le MA-CoA (o lona uiga, o se tulaga o le fa'alua-fa'aletonu). O le gaioiga e le mafai ona fai pe a le manuia le rollback o le faʻasaoina lea o le sauniga, peitaʻi, e mafai ona e faʻatulagaina e faamuta le sauniga.
O le example fa'amatalaga i le fa'aletonu o le toe fa'afo'i.
faiga faavae-fa'afanua ituaiga pulea tagata fai saofaga PL1 mea na tupu sauniga-amata fa'afetaui-vasega muamua ituaiga pulea le lesitala vasega-taua fai-uma 1 fa'agaoioi dynamic-template pkt-trig1
Broadband Network Gateway Configuration Guide mo Cisco ASR 9000 Series Routers, IOS XR Release 6.2.x 56
Fa'atulagaina o Fa'amaoniga, Fa'atagaga, ma Galuega Tausitusi
Fausia Faamaumauga Tausitusi
! ! fa'atasi mea na tutupu fa'atasi-muamua
ituaiga vasega pule fai saofaga coa-rollback-failu faia-uma 10 motusia
! ! !
O se Example o se Suiga Tele-Gaioiga o Fa'atagaga Fa'aaogā Tulaga O le fa'ata'ita'iga leaampLe lisi o le faasologa o mea e tutupu i le tulaga o le amataina o le PTA sauniga. 1. Fonotaga a le PTA web fefaʻatauaʻiga toe faʻafeiloaʻi i se faitotoa o le tautua (HTTP Redirect) 2. E faʻagaoioia e le tagata faʻaoga le tulaga muamua o le auaunaga e ala i le faitotoa o le tautua. Ole talosaga a le COA e tele gaioiga
o lo'o amataina i le fa'asologa o lo'o mulimuli mai. a. Taofi le toe faasino e. Fa'agaoioi Turbo Button 1 c. Fa'agaoioi le VoIP i ala e lua
3. E faʻagaoioia e le tagata faʻaoga le tulaga lona lua o le auaunaga e ala i le faitotoa o auaunaga. Ole talosaga a le COA e tele gaioiga e amata ile fa'asologa o lo'o mulimuli mai. a. Ta'e le Turbo Button 1 b. Fa'agaoioi Turbo Button 2 i. Fa'ate'aina le VoIP i ala e lua o. Fa'agaoioi le VoIP ma 4 alalaupapa
Feso'ota'iga ma Au'aunaga-Tulaga Tausitusi BNG e lagolagoina Au'aunaga-Tulaga Tausitusi, lea o se 'au'aunaga o se tu'ufa'atasiga o vaega e fa'agaoioia ma fa'agata o se vaega. Au'aunaga-Level Accounting ma MA-CoA vaega e tuto'atasi, o lona uiga, e mafai ona fa'aoga eseese. Ae ui i lea, MA-CoA faʻamatalaga mo auaunaga o loʻo faʻagaoioia pe faʻagata
Pepa / Punaoa
![]() |
CISCO ASR 9000 Fa'asologa Routers Broadband Network Gateway Configuration [pdf] Taiala mo Tagata Fa'aoga ASR 9000 Fa'asologa Fa'asologa Fa'asologa o alalaupapa Feso'ota'iga Feso'ota'iga, ASR 9000 Fa'asologa, Fa'asologa o alalaupapa alalaupapa Feso'ota'iga Feso'ota'iga, Feso'ota'iga Feso'ota'iga Feso'ota'iga, Feso'ota'iga faitoto'a feso'ota'iga, Fa'atonuga faitoto'a, Fa'atonuga |
