华为MA-5200MF与蓝海卓越计费系统对接说明
现在随着宽带运营商的不断发展,不少宽带运营商规模增大,为了提升设备性能和增强管理能力,采用了华为的BRAS设备做为拨号服务器,如BRAS-MA-5200系列,MA-5300系列,ME60系列BRASUTKK,并且配合市面上最好用易用的蓝海卓越计费系统,进行用户管理和公司管理,本文进行说明,如何使用华为的 BRAS产品与蓝海卓越的计费系统进行对接管理:
此文档实现了NatShell计费系统与华为BRAS配合进行的认证、计费、限速、停机、营帐管理等功能。(采用对接设备为华为的MA-5200 )
一、华为5200的Radius的详细配置可以参照MA5200手册
华为5200配置文件参考
[PPPOE_SERVER]display current-configuration
#
version 7145
sysname PPPOE_SERVER
#
system language-mode english
#
radius-server group natshell
#Radius与BRAS之间的共享密码
radius-server key natshell
#Radius地址和认证端口
radius-server authentication 192.168.10.1 1812
#Radius地址和计费端口
radius-server accounting 192.168.10.1 1813
radius-server key natshell
#Radius地址和认证端口
radius-server authentication 192.168.10.1 1812
#Radius地址和计费端口
radius-server accounting 192.168.10.1 1813
radius-server retransmit 5 timeout 3
#带宽以class的方式分配, 一定要记得配置
radius-server class-as-car
#带宽以class的方式分配, 一定要记得配置
radius-server class-as-car
radius-server attribute translate
#不使用域名支持
undo radius-server user-name domain-included
#带宽单位, 请设置成kbyte
radius-server traffic-unit kbyte
radius-server group login
#Radius服务地址与共享密码
radius-server authorization 192.168.10.1 shared-key natshell
#不使用域名支持
undo radius-server user-name domain-included
#带宽单位, 请设置成kbyte
radius-server traffic-unit kbyte
radius-server group login
#Radius服务地址与共享密码
radius-server authorization 192.168.10.1 shared-key natshell
#
undo trap-statistics 7242002
undo trap-statistics 7242003
undo trap-statistics 70f2000
undo trap-statistics 70f2001
undo trap-statistics 70f2002
undo trap-statistics 70f2003
undo trap-statistics 70f2004
undo trap-statistics 70f2005
undo trap-statistics 70f2008
undo trap-statistics 70f2009
undo trap-statistics 70f200c
undo trap-statistics 70f200d
undo trap-statistics 70f200e
undo trap-statistics 70f200f
undo trap-statistics 70f2017
undo trap-statistics 70f2018
undo trap-statistics 70f201c
undo trap-statistics 70f201d
undo trap-statistics 7032000
undo trap-statistics 7032001
undo trap-statistics 7032002
#
undo trap-statistics 7242002
undo trap-statistics 7242003
undo trap-statistics 70f2000
undo trap-statistics 70f2001
undo trap-statistics 70f2002
undo trap-statistics 70f2003
undo trap-statistics 70f2004
undo trap-statistics 70f2005
undo trap-statistics 70f2008
undo trap-statistics 70f2009
undo trap-statistics 70f200c
undo trap-statistics 70f200d
undo trap-statistics 70f200e
undo trap-statistics 70f200f
undo trap-statistics 70f2017
undo trap-statistics 70f2018
undo trap-statistics 70f201c
undo trap-statistics 70f201d
undo trap-statistics 7032000
undo trap-statistics 7032001
undo trap-statistics 7032002
#
#在Ethernet1接口建立PPPoE Server的虚拟模板(换言之, 在Eth1上开启PPPoE服务)
interface Ethernet1
pppoe-server bind Virtual-Template 1#
interface Ethernet2
#
interface Ethernet3
#
interface Ethernet4
#
interface Ethernet5
#
interface Ethernet6
#
interface Ethernet1
pppoe-server bind Virtual-Template 1#
interface Ethernet2
#
interface Ethernet3
#
interface Ethernet4
#
interface Ethernet5
#
interface Ethernet6
#
#与Radius通信的地址
interface Ethernet6.0
ip address 192.168.10.2 255.255.255.0
interface Ethernet6.0
ip address 192.168.10.2 255.255.255.0
#
interface Ethernet7
#
interface Ethernet8
#
interface Ethernet9
#
interface Ethernet10
#
interface Ethernet11
#
interface Ethernet12
#
interface Ethernet13
#
interface Ethernet14
#
interface Ethernet15
#
interface Ethernet16
#
interface Ethernet17
#
interface Ethernet18
#
interface Ethernet19
#
interface Ethernet20
#
interface Ethernet21
#
interface Ethernet22
#
interface Ethernet23
#
interface Ethernet24
#
interface Ethernet7
#
interface Ethernet8
#
interface Ethernet9
#
interface Ethernet10
#
interface Ethernet11
#
interface Ethernet12
#
interface Ethernet13
#
interface Ethernet14
#
interface Ethernet15
#
interface Ethernet16
#
interface Ethernet17
#
interface Ethernet18
#
interface Ethernet19
#
interface Ethernet20
#
interface Ethernet21
#
interface Ethernet22
#
interface Ethernet23
#
interface Ethernet24
#
#配置虚拟模板的重拨次数和间隔时间(详情参考手册)
interface Virtual-Template1
ppp keepalive interval 10 retransmit 5
interface Virtual-Template1
ppp keepalive interval 10 retransmit 5
#
interface GigabitEthernet25
#
interface GigabitEthernet26
#
interface NULL0
#
interface LoopBack0
#
interface Nm-Ethernet0
#
l2tp-group 1
#
interface GigabitEthernet25
#
interface GigabitEthernet26
#
interface NULL0
#
interface LoopBack0
#
interface Nm-Ethernet0
#
l2tp-group 1
#
#PPPoE Server的地址池,DNS地址等相关信息
ip pool natshell local
gateway 172.16.0.1 255.255.0.0
section 0 172.16.0.2 172.16.3.100
dns-server 61.134.1.4
dns-server 202.98.96.68 secondary
lease 999 23 59
ip pool natshell local
gateway 172.16.0.1 255.255.0.0
section 0 172.16.0.2 172.16.3.100
dns-server 61.134.1.4
dns-server 202.98.96.68 secondary
lease 999 23 59
#
ip pool test local
gateway 192.168.1.1 255.255.255.0
section 0 192.168.1.110 192.168.1.115
dns-server 61.134.1.4
dns-server 202.98.96.68 secondary
lease 3 12 0
#
dot1x-template 1
#
ip pool test local
gateway 192.168.1.1 255.255.255.0
section 0 192.168.1.110 192.168.1.115
dns-server 61.134.1.4
dns-server 202.98.96.68 secondary
lease 3 12 0
#
dot1x-template 1
#
#aaa配置
aaa
authentication-scheme radius
accounting-scheme radius
accounting realtime 3
domain natshell
authentication-scheme radius
accounting-scheme radius
radius-server group natshell
ip-pool natshell
#
local-aaa-server
aaa
authentication-scheme radius
accounting-scheme radius
accounting realtime 3
domain natshell
authentication-scheme radius
accounting-scheme radius
radius-server group natshell
ip-pool natshell
#
local-aaa-server
#
user-interface con 0
user-interface vty 0 4
#
user-interface con 0
user-interface vty 0 4
#
#portvlan配置, 使其支持PPP数据
portvlan ethernet 1 vlan 0 1
access-type layer2-subscriber
default-domain auth
portvlan ethernet 1 vlan 0 1
access-type layer2-subscriber
default-domain auth