layer3-subscriber subnet-session

Function

The layer3-subscriber subnet-session command configures a mask so that an IPv4 address segment and authentication domain name are specified for Layer 3 static users.

The undo layer3-subscriber subnet-session command cancels the configuration.

By default, no IPv4 address segment or authentication domain name is specified for Layer 3 static users through a mask.

This command is supported only on the NetEngine 8000 F1A.

Format

layer3-subscriber subnet-session start-ip-address { mask-address | mask-length } [ vpn-instance instance-name ] domain-name domain-name

undo layer3-subscriber subnet-session start-ip-address { mask-address | mask-length } [ vpn-instance instance-name ] [ domain-name domain-name ]

Parameters

Parameter	Description	Value
start-ip-address	Specifies a start IPv4 address for the address segment to which Layer 3 static users belong.	The value is in dotted decimal notation.
mask-address	Specifies the IP address mask.	The value is in dotted decimal notation.
mask-length	Specifies a mask length.	The value is an integer ranging from 1 to 32.
vpn-instance instance-name	Specify a VPN instance.	The value is a string of 1 to 31 case-sensitive characters, spaces not supported. In addition, the VPN instance name must not be _public_. When double quotation marks are used around the string, spaces are allowed in the string.
domain-name domain-name	Specifies a domain name.	The value is a string of 1 to 64 case-insensitive characters.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
bras-control	write

Usage Guidelines

Usage Scenario

In the scenario where Layer 3 static users access an enterprise network, all user terminals are on the same network segment, and the users need to be authenticated on the BRAS before they can access the network. To allow the BRAS to centrally manage enterprise users, run the layer3-subscriber subnet-session command to configure a mask. When the first user in an enterprise goes online, the BRAS generates a network segment route. Subsequent users in the enterprise do not need to be authenticated on the BRAS, and the BRAS directly forwards the user traffic. This allows the BRAS to centrally manage user access and perform authentication and accounting for all terminal users of the enterprise.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Specify an IPv4 address segment and a domain name for Layer 3 static users who are on the same network segment.

<HUAWEI> system-view
[~HUAWEI] layer3-subscriber subnet-session 1.1.1.1 24 domain-name huawei