Configuring PUPP

Context

In per user per policy (PUPP) traffic management mode, a policy is specified for each user. Either the same policy or different policies can be specified for different users. When enterprise users access the router over a Layer 3 leased line, each enterprise belongs to a VPN. You can apply a traffic policy to a BAS interface to allow access control between users in the same enterprise. When Layer 2 or Layer 3 leased line users are not authenticated, applying a traffic policy to a BAS interface is also required to allow access control between Layer 2 or Layer 3 leased line users.

Procedure

Run system-view
The system view is displayed.
Run interface interface-type interface-number
The interface view is displayed.
Run bas
The BAS interface view is displayed.
Run access-type layer2-leased-line user-name uname password { cipher password | simple password } [ bas-interface-name bname | default-domain authentication dname | accounting-copy radius-server rd-name | nas-port-type { async | sync | isdn-sync | isdn-async-v120 | isdn-async-v110 | virtual | piafs | hdlc | x.25 | x.75 | g.3-fax | sdsl | adsl-cap | adsl-dmt | idsl | ethernet | xdsl | cable | wireless-other | 802.11 } ] ^* or access-type layer3-leased-line { user-name uname | user-name-template } password { cipher password | simple password } [ default-domain authentication dname | bas-interface-name bname | accounting-copy radius-server rd-name | nas-port-type { async | sync | isdn-sync | isdn-async-v120 | isdn-async-v110 | virtual | piafs | hdlc | x.25 | x.75 | g.3-fax | sdsl | adsl-cap | adsl-dmt | idsl | ethernet | xdsl | cable | wireless-other | 802.11 } | mac-address mac-address | client-id client-id ] ^*
The BAS interface is configured as a Layer 2 or Layer 3 leased line interface.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the BAS interface.
(Optional) Run match termination
ACL matching for low-priority traffic that matches the PUPP traffic policy is terminated.
Run quit
Return to the system view.
Run commit
The configuration is committed.