Просмотр Исходного

{code}
configure terminal

!!! Настройка параметров авторизации
aaa authorization exec default local
aaa authorization network default group CarbonRadius
aaa authorization commands default none
aaa authentication ppp default group CarbonRadius
aaa authentication login default local
aaa accounting update newinfo

!
aaa attribute format NAS-FORMAT
circuit-id
!
aaa attribute format NAS-PORT-ID
circuit-id plus remote-id
!
aaa attribute format NAS_PORT_FORMAT
circuit-id plus remote-id separator .
!


aaa radius attribute nas-port format e SSAAPPPPQQQQQQQQQQVVVVVVVVVVUUUU type 32
aaa radius attribute nas-port format e SSAAPPPPQQQQQQQQQQVVVVVVVVVVUUUU
aaa radius attribute nas-port-id format NAS-FORMAT
aaa accounting service default group CarbonRadius
aaa accounting subscriber default group CarbonRadius
aaa authorization subscriber default group CarbonRadius
aaa authentication subscriber default group CarbonRadius



!!! Настройка радиус
radius-server vsa attribute ignore unknown
radius-server host {{billing_ip}} auth-port 1812 acct-port 1813
key 7 {{radius_secret}}
timeout 5
retransmit 1
!

!!! Настройка coa
aaa server radius dynamic-author
port {{coa_port}}
client {{billing_ip}}
server-key 7 {{coa_psw}}
!
!

!!! Настройка радиус группы
aaa accounting network default start-stop group CarbonRadius
no aaa group server radius CarbonRadius
aaa group server radius CarbonRadius
server {{billing_ip}} auth-port 1812 acct-port 1813
source-interface {{to_billing_int}}







!!! Интерфейс для pppoe абонентов
interface Loopback128
ipv4 address 10.128.0.5 255.255.255.255

!!! Шаблон для pppoe абонентов
dynamic-template
type ppp DT_PPPoE
ppp authentication pap chap
ppp ipcp dns 8.8.8.8 8.8.4.4
accounting aaa list default type session periodic-interval 5
ipv4 unnumbered Loopback128
!


!!! Полиси мап для pppoe абонентов

policy-map type control subscriber PPPOE_PM
event session-start match-first
class type control subscriber PPP do-until-failure
10 activate dynamic-template DT_PPPoE
!
!
event session-activate match-first
class type control subscriber PPP do-until-failure
10 activate dynamic-template DT_PPPoE
20 authenticate aaa list default
!
!
end-policy-map


!!! bba
pppoe bba-group DT_PPPoE
service selection disable



!!! Настройка отправки netlfow
flow exporter-map Carbon
version v5
options sampler-table timeout 2000
template data timeout 10000
!
transport udp 9996
source {{to_billing_int}}
destination {{billing_ip}}
!

flow monitor-map Carbon
record ipv4
exporter Carbon
cache entries 50000
cache timeout active 2
cache timeout inactive 5
!






!!! На абонентский интерфейс назначаем полисим мап, bba и netflow monitor
@@@ for abon_int in abon_ints
interface {{abon_int}}
service-policy type control subscriber PPPOE_PM
pppoe enable bba-group DT_PPPoE
encapsulation ambiguous dot1q 2410 second-dot1q any
flow ipv4 monitor Carbon sampler nfm ingress
flow ipv4 monitor Carbon sampler nfm egress
!
@@@ endfor






end
exit
{code}