... {code}
configure terminal
!!! Настройка радиус
radius-server vsa attribute ignore unknown
radius-server host {{billing_ip}} auth-port 1812 acct-port 1813
key 7 {{radius_secret}}
timeout 5
retransmit 1
!
!!! Настройка coa
aaa server radius dynamic-author
port {{coa_port}}
client {{billing_ip}}
server-key 7 {{coa_psw}}
!
!
!!! Настройка радиус группы
aaa accounting subscriber default-ipoe-static group CarbonRadiusIPoEStatic
no aaa group server radius CarbonRadiusIPoEStatic
aaa group server radius CarbonRadiusIPoEStatic
server {{billing_ip}} auth-port 1812 acct-port 1813
source-interface {{to_billing_int}}
!
aaa authorization exec default local
aaa authorization network default-ipoe-static group CarbonRadiusIPoEStatic
aaa authorization commands default none
aaa accounting service default-ipoe-static group CarbonRadiusIPoEStatic
aaa authorization subscriber default-ipoe-static group CarbonRadiusIPoEStatic
aaa authentication subscriber default-ipoe-static group CarbonRadiusIPoEStatic
aaa authentication login default local
aaa accounting update newinfo
aaa attribute format NAS_PORT_FORMAT
circuit-id plus remote-id separator .
!
subscriber
pta tcp mss-adjust 1280
!
!!! Шаблон для ipoe абонентов
dynamic-template
type ipsubscriber DYN_TMPL_IPoEStatic
accounting aaa list default-ipoe-static type session periodic-interval 600
!
!
!!! Полиси мап для ipoe абонентов
policy-map type control subscriber IPoEStatic_PM
event session-start match-all
|
class type control subscriber Unclass do-until-failure
1 activate dynamic-template DYN_TMPL_IPoEStatic
|
10 authorize aaa list default-ipoe-static identifier source-address-ipv4 password drugoytel servicemode
|
!
!
|
... event account-logoff match-all
class type control subscriber Unclass do-until-failure
1 disconnect
!
!
event authorization-failure match-all
class type control subscriber Unclass do-until-failure
1 disconnect
!
!
end-policy-map
!
!!! Настройка отправки netlfow
flow exporter-map Carbon
version v5
options sampler-table timeout 2000
template data timeout 10000
!
transport udp 9996
source {{to_billing_int}}
destination {{billing_ip}}
!
flow monitor-map Carbon
record ipv4
exporter Carbon
cache entries 50000
cache timeout active 2
cache timeout inactive 5
!
!!! Настройки абонентского интерфейса
@@@ for abon_int in abon_ints
interface {{abon_int}}
arp learning disable
service-policy type control subscriber IPoEStatic_PM
flow ipv4 monitor Carbon sampler nfm ingress
flow ipv4 monitor Carbon sampler nfm egress
ipsubscriber ipv4 l2-connected
initiator unclassified-source address-unique
!
!
@@@ endfor
end
exit
{code}
|
