access-limit (BAS interface view)

Function

The access-limit command configures the maximum number of access users that can access the network from each VLAN or a specified VLAN on a BAS sub-interface or the maximum number of users that can access the network from the BAS main interface.

The undo access-limit command deletes the configured maximum number of access users on a BAS interface.

By default, the maximum number of access users is not configured on a BAS interface.

This command is supported only on the NetEngine 8000 F1A.

Format

access-limit user-number [ start-vlan start-vlan [ end-vlan end-vlan ] [ qinq qinq-vlan ] [ user-type { ipoe { ipv4 | ipv6 } | pppoe } ] ]

access-limit user-number

access-limit user-number user-type { ipoe | pppoe }

undo access-limit [ start-vlan start-vlan [ end-vlan end-vlan ] [ qinq qinq-vlan ] [ user-type { ipoe { ipv4 | ipv6 } | pppoe } ] ]

undo access-limit user-type { ipoe | pppoe }

undo access-limit

Parameters

Parameter	Description	Value
user-number	Specifies the maximum number of access users.	The value ranges from 0 to 2147483647 on a non-ATM board.
start-vlan start-vlan	Specifies the start VLAN ID.	The value is an integer ranging from 1 to 4094.
end-vlan end-vlan	Specifies the end VLAN ID.	The value is an integer ranging from 1 to 4094.
qinq qinq-vlan	Specifies the QinQ VLAN ID.	The value is an integer ranging from 1 to 4094.
user-type	Specifies the type of users.	-
ipoe	Specifies the IPoE users whose maximum number is limited.	-
ipv4	Specifies IPoE IPv4 users.	-
ipv6	Specifies IPoE IPv6 users.	-
pppoe	Specifies the PPPoE users whose maximum number is limited.	-

Views

BAS interface view (GE), BAS interface view (VE), BAS interface view (trunk)

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
bras-control	write

Usage Guidelines

Usage Scenario

Different VLANs may be set to represent different users during service planning. To prevent misuse of resources, you can run this command to set the maximum number of access users for each VLAN or for the specified VLAN on a BAS interface. When the maximum number of access users is reached, no more users can access. Even a DHCP user applies for IP addresses repeatedly by changing the MAC address constantly, the IP addresses will not be exhausted.

You can also specify the user-type parameter to limit the maximum number of access users based on user types.

Prerequisites

The access-limit command can be used on a BAS interface only if the access type of the BAS interface is set by using the access-type command.

Configuration Impact

If the access-limit command is configured on a BAS interface and the VLAN range is specified in the command, the number of the VLAN users who access the BAS interface is limited. If and are specified, is the maximum number of access users belonging to each of the VLANs ranging from to .

If the access-limit command is configured on a BAS interface and the VLAN range is not specified in the command, the number of the users who access the BAS interface is limited for each VLAN.

If the access-limit command with the specified VLAN range and the command without the specified VLAN range are configured on a same BAS interface, the number of the specified VLAN range user is limited by the command with the specified VLAN range, the number of the other user is limited by the command of without the specified VLAN range.

The access-limit command will take effect at once if the command is configured, but the users who have gone online can remain online.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Set the maximum number of PPPoE users per VLAN (VLAN ID ranging from 100 to 200) to 80 on the BAS interface GigabitEthernet 0/1/9.5.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/9.5
[~HUAWEI-GigabitEthernet0/1/9.5] commit
[~HUAWEI-GigabitEthernet0/1/9.5] user-vlan 100 200
[~HUAWEI-GigabitEthernet0/1/9.5-vlan-100-200] quit
[~HUAWEI-GigabitEthernet0/1/9.5] bas
[~HUAWEI-GigabitEthernet0/1/9.5-bas] access-type layer2-subscriber
[*HUAWEI-GigabitEthernet0/1/9.5-bas] commit
[~HUAWEI-GigabitEthernet0/1/9.5-bas] access-limit 80 start-vlan 100 end-vlan 200 user-type pppoe

# Set the maximum number of access users on the BAS interface GE 0/1/1 to 100.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet0/1/1
[~HUAWEI-GigabitEthernet0/1/1] bas
[~HUAWEI-GigabitEthernet0/1/1-bas] access-type layer2-subscriber
[*HUAWEI-GigabitEthernet0/1/1-bas] commit
[~HUAWEI-GigabitEthernet0/1/1-bas] access-limit 100

# Set the maximum number of access users per VLAN (VLAN ID ranging from 100 to 200) to 80 on the BAS interface GigabitEthernet 0/1/9.5.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/9.5
[~HUAWEI-GigabitEthernet0/1/9.5] commit
[~HUAWEI-GigabitEthernet0/1/9.5] user-vlan 100 200
[~HUAWEI-GigabitEthernet0/1/9.5-vlan-100-200] quit
[~HUAWEI-GigabitEthernet0/1/9.5] bas
[~HUAWEI-GigabitEthernet0/1/9.5-bas] access-type layer2-subscriber
[*HUAWEI-GigabitEthernet0/1/9.5-bas] commit
[~HUAWEI-GigabitEthernet0/1/9.5-bas] access-limit 80 start-vlan 100 end-vlan 200