Configuring a Static User

A user that requires a fixed IP address can be configured as a static user.

Prerequisites

BAS has been configured on the interfaces for static user access.

Context

  • The IPv4 address allocated to a Layer 2 static user must belong to a configured address pool. If the address pool is a local address pool, you must run the excluded-ip-address command to prevent a specified range of IP addresses from being dynamically allocated to other users.

  • If an IPv6 address or IPv6 delegation prefix needs to be allocated from a local address pool to a Layer 2 static user, you must configure a local address pool first and run the excluded-ipv6-address command to prevent a specified range of IPv6 addresses or IPv6 delegation prefixes from being allocated. If the allocation is required from a remote address pool, the remote address pool does not need to be configured on the local device.

  • An IPv4 address or IPv6 address/IPv6 delegation prefix may not be allocated to a Layer 3 static user from a local address pool or local prefix pool. If the allocation is required from such a pool, you must run the excluded-ip-address command or excluded-ipv6-address command to prevent a specified range of IPv4 addresses or IPv6 addresses/IPv6 prefixes from being allocated.

Perform the following steps on the router.

Procedure

  1. Run system-view

    The system view is displayed.

  2. (Optional) Bind a static user access interface list to an access interface.
    1. Run static-user interface-list list-name

      An access interface list is configured for static users.

    2. Run interface interface-type interface-number

      An access interface for static users is bound to the access interface list.

    3. Run quit

      Return to the system view.

  3. Run either of the following commands:

    • To create a static user and allow the user to go online through a specified interface, run the static-user [ description ] { start-ip-address [ end-ip-address ] [ gateway ip-address ] | start-ipv6-address [ end-ipv6-address ] [ delegation-prefix start-ipv6-prefix [ end-ipv6-prefix ] prefix-length ] ipv6-gateway ipv6-gateway-address} * [ vpn-instance instance-name ] [ domain-name domain-name | interface { interface-name | interface-type interface-number } [ vlan vlan-id [ qinq qinq-vlan ] ] | mac-address mac-address | detect | export | keep-online ] * command.

      If detect is specified, the NetEngine 8000 F proactively triggers a static user to go online upon detection of the user. If detect is not specified:

      • For an IPv4 static user, run the arp-trigger or ip-trigger command on the BAS interface so that the IPv4 static user can send ARP or IPv4 packets to go online.
      • For an IPv6 static user, run the ipv6-trigger or nd-trigger command on the BAS interface so that the IPv6 static user can send IPv6 or NS/NA packets to go online.
    • To create a static user and allow the user to go online through the interfaces of a specified interface list, run the static-user [ description ] start-ip-address [ end-ip-address ] [ gateway gateway-ip-address ] [ vpn-instance instance-name ] [ domain-name domain-name | interface-list list-name | mac-address mac-address | export | keep-online ] * command.

    When creating a static user, you can specify the IP address (and the VPN instance to which the IP address belongs), interface through which the user is connected to the NetEngine 8000 F, domain to which the user belongs, and MAC address.

    • IPv4 single-stack static users can go online through multiple interfaces bound to an interface list, but the NetEngine 8000 F cannot initiate ARP or IP packets for the static users to go online. When you configure IPv4 single-stack static users to go online through interfaces bound to an interface list, the detect and vlan parameters cannot be specified in the static-user command.
    • The interfaces through which IPv6 static users go online cannot be bound to an interface list.

  4. (Optional) Run static-user detect interval interval-value

    The interval at which the router detects whether static users are online is configured.

  5. Run layer3-subscriber { start-ip-address [ end-ip-address ] | start-ipv6-address [ end-ipv6-address ] | delegation-prefix start-ipv6-prefix [ end-ipv6-prefix ] prefix-length } * [ vpn-instance instance-name ] domain-name domain-name

    The IP address segment and authentication domain are configured for Layer 3 static users.

    The device can only have a limited number of IP address segments configured. If IPv4 addresses of user access packets do not belong to the IP address segments configured, the packets are discarded, and users cannot go online. Running the layer3-subscriber ip-address any domain-name domain-name command is recommended in scenarios where there are a large number of IP address segments on the network so that users whose IP addresses do not belong to the IP address segments configured can go online through the configured domain.

  6. (Optional) Run layer3-subscriber ipv4 vpn-instance switch enable [ export host-route ] command

    Dynamic VPN instance switching is enabled for Layer 3 static users.

    This function applies only to IPoEv4 scenarios.

  7. Run commit

    The configuration is committed.

Parent Topic: Configuring and Managing Users
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
Next topic >