410Configuring NAS-Port-ID formatsThe NAS-Port-ID RADIUS attribute specifies access location of a user. The BRAS supports thefollowing formats for NAS-Port-ID:• version 1.0—Format for China Telecom.• version 2.0—Format specified in YDT 2275-2011 Subscriber Access Loop (Port) Identificationin Broadband Access Networks.You can configure the following settings if version 2.0 is used when the BRAS acts as a DHCP relay:• Configure DHCPv4 Option 82 or DHCPv6 Option 18 as a trusted DHCP option and obtaininformation from the trusted option.• Include the NAS information and obtained option information in NAS-Port-ID.To configure NAS-Port-ID formats:Step Command Remarks1. Enter system view. system-view N/A2. Enter interface view. interface interface-typeinterface-number N/A3. ConfigureNAS-Port-ID formats.• Configure the NAS-Port-ID formatfor IPv4 users:ip subscriber nas-port-idformat cn-telecom { version1.0| version2.0 }• Configure the NAS-Port-ID formatfor IPv6 users:ipv6 subscriber nas-port-idformat cn-telecom { version1.0| version2.0 }The default format is version1.0.4. (Optional.) Configuretrusted DHCP options.• Configure a trusted DHCP optionfor IPv4 users:ip subscriber trust option82• Configure a trusted DHCP optionfor IPv6 users:ipv6 subscriber trust option18By default, the BRAS does not trustOption 82 or Option 18.5. (Optional.) Include theNAS information andDHCP optioninformation inNAS-Port-ID.• For IPv4 users:ip subscriber nas-port-idnasinfo-insert• For IPv6 users:ipv6 subscriber nas-port-idnasinfo-insertBy default, the BRAS includes onlyinformation obtained from thetrusted option in NAS-Port-ID.Enabling IPoE access-out authenticationIn a dual-authentication network, one device performs access-in authentication and another deviceperforms access-out authentication. Users who pass access-in authentication can access theintranet and users who pass access-out authentication can access the extranet.To enable IPoE access-out authentication:Step Command Remarks1. Enter system view. system-view N/A
