access-ip-limit
Function
The access-ip-limit command configures the maximum number of IP addresses for PPP users who log in from a specified slot or a specified BAS interface.
The undo access-ip-limit command deletes the preconfigured limit on the number of IP addresses for PPP users who log in from a specified slot or a BAS interface.
By default, no limit on the number of IP addresses for PPP users is configured on a slot or a BAS interface.
This command is supported only on the NetEngine 8000 F1A.
Parameters
| Parameter | Description | Value |
|---|---|---|
| max-number |
Specifies the maximum number of IP addresses for users allowed to log in. |
The value is an integer ranging from 0 to 2147483647. |
| user-type ppp |
Indicates that the number of login PPP users is restricted. |
- |
| exclude |
Indicates that the number of users logging in from a BAS interface is not added to, and is therefore not limited by, the number of users logging in from a slot. This parameter is specified on BAS interfaces. |
- |
Usage Guidelines
Usage Scenario
To balance the traffic load of users among different slots and interfaces, run the access-ip-limit command to configure the maximum number of IP addresses for PPP users allowed to log in from a specified slot or BAS interface. When the number of PPP users reaches the maximum number, the slot or interface stops responding the PADO packets of PPP users, and no additional users can log in.
Prerequisites
The access-type command has been run to configure the BAS interface as a Layer 2 common user interface.
Configuration Impact
The command applies only to PPPoE users. The single-stack users are counted as one user, and dual-stack users are counted as two users, dual-stack LAC users are counted as one user. When the number of login PPP users reaches the maximum value configured on a BAS interface or slot, the interface or slot stops responding PADO packets of new access PPP users.
If the number of PPP users logging in from a BAS interface reaches the maximum number of IP addresses for PPP users configured on a slot, the BAS interface stops responding PADO packets of new access PPP users. However, the BAS interfaces configured with exclude have no such limitation. If the BAS interface is a member of an inter-board Eth-Trunk interface, the number of login PPP users counted on the interface may not be accurate. Running this command is not recommended if the BAS interface is a member of the inter-board Eth-Trunk interface. If the BAS interface is an inter-board PW-VE interface, the number of login PPP users counted on the interface may not be accurate. Running this command is not recommended if a BAS interface is a PW-VE interface. This command limits the number of PPP users who have been assigned IP addresses. If the AAA server responds slowly with authentication response packets, the number of login PPP users counted on the interface may not be accurate. In an inter-board trunk scenario, the IP address limit based on the slot ID must be configured on all member boards. Otherwise, the IP address limit configured using this command may be inaccurate.Precautions
In VS mode, this command is supported only by the admin VS.
Example
<HUAWEI> system-view [~HUAWEI] interface GigabitEthernet 0/1/1.2 [*HUAWEI-GigabitEthernet0/1/1.2] commit [~HUAWEI-GigabitEthernet0/1/1.2] bas [~HUAWEI-GigabitEthernet0/1/1.2-bas] access-type layer2-subscriber [*HUAWEI-GigabitEthernet0/1/1.2-bas] commit [~HUAWEI-GigabitEthernet0/1/1.2-bas] access-ip-limit 3000 user-type ppp