HP VPN Firewall Appliances Network Management Configuration Guide

120
Ste
p
Command Remarks
3. Enable PPP traffic statistics
collection.
ppp account-statistics enable [ acl { acl-number
| name acl-name } ]
Disabled by default.
Enabling extended PPP traffic statistics collection
With this feature enabled, AAA starts traffic statistics collection only after it is informed of the IP address
assigned to an authenticated PPP user by the peer during NCP negotiation.
With this feature disabled, AAA can start traffic statistics collection after an authenticated PPP user enters
NCP negotiation instead of being assigned an IP address.
To enable extended PPP traffic statistics collection:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Enable extended PPP traffic
statistics collection.
ppp account-statics extend
remote-address
Disabled by default.
Configuring PPP user binding
This function binds users in different domains with VT interfaces without knowing the domains of the users.
This feature is implemented in the following steps:
• Without knowing user domains, you must first authenticate users. If a user passes the authentication,
you can obtain the user domain name. The domain name varies with authentication results. For
more information, see authentication modes in "Configuring PPP authentication."
• If P
PP user bind
ing is enabled on an interface, the interface binds the user to a corresponding VT
interface according to the binding rules and obtained domain name, and creates a VA interface for
protocol negotiation and packet transmission at the network layer.
To configure PPP user binding:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VT interface view.
interface virtual-template
interface-number
N/A
3. Configure the local end
to authenticate the peer
by using PAP, CHAP,
MS-CHAP, or
MS-CHAP-V2.
ppp authentication-mode { chap |
ms-chap | ms-chap-v2 | pap } *
By default, no authentication is
performed.
When configuring this command, do
not specify the domain by using the
domain keyword.
4. Enable PPP user binding.
ppp user bind enable The default setting is disabled.
5. Configure the PPP user
binding rules.
ppp user bind virtual-template
number domain domainname
By default, no PPP user binding rules
are configured.