R0106-HP MSR Router Series Layer 2 - WAN Configuration Guide(V7)
43
threshold, the device discards the excessive requests, and outputs log messages. If the blocking time is set
to 0, the device does not block any requests, and it only outputs log messages.
The device uses a monitoring table and a blocking table to control PPP access rates:
• Monitoring table—Stores a maximum of 8000 monitoring entries. Each entry records the number of
PPPoE sessions created by a user within the monitoring time. When the monitoring entries reach the
maximum, the system stops monitoring and blocking session requests from new users. The aging
time of monitoring entries is determined by the session-request-period argument. When the timer
expires, the system starts a new round of monitoring for the user.
• Blocking table—Stores a maximum of 8000 blocking entries. The system creates a blocking entry
if the access rate of a user reaches the threshold, and blocks requests from that user. When the
blocking entries reach the maximum number, the system stops blocking session requests from new
users and it only outputs log messages. The aging time of the blocking entries is determined by the
blocking-period argument. When the timer expires, the system starts a new round of monitoring for
the user.
If the access rate setting is changed, the system removes all monitoring and blocking entries, and uses the
new settings to limit PPPoE access rates.
To limit the PPPoE access rate:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter Layer 3 Ethernet interface,
Layer 3 virtual Ethernet
interface, or Layer 3 aggregate
interface view.
interface interface-type
interface-number
The PPPoE server is enabled on
the interface.
3. Configure the PPPoE access
limit.
pppoe-server throttle per-mac
session-requests
session-request-period
blocking-period
By default, the PPPoE access rate
is not limited.
4. Display information about
blocked users
(MSR2000/MSR3000).
display pppoe-server throttled-mac
[ interface interface-type
interface-number ]
Available in any view.
5. Display information about
blocked users (MSR4000).
display pppoe-server throttled-mac
{ slot slot-number | interface
interface-type interface-number }
Available in any view.
Configuring the access line ID
The PPPoE server on a BAS device uses the RADIUS nas-port-id attribute to send the access line ID
received from a DSLAM device to the RADIUS server. The access line ID includes the circuit-id and
remote-id. The RADIUS server compares the received access line ID with the local line ID information to
verify the location of the user.
You can control the access line ID content that the PPPoE server sends to the RADIUS server.
To configure the access line ID:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A