User Types

Individual Users

Individual users log in to the NetEngine 8000 F through layer 2 devices such as the LAN switch and IP DSLAM. Each individual user has independent service attributes. The NetEngine 8000 F authenticates and charges each individual user separately.

Individual users can log in to the NetEngine 8000 F through PPP, 802.1X, and VLAN. In the case of VLAN, users send Dynamic Host Configuration Protocol (DHCP) packets, Address Resolution Protocol (ARP) packets, ND packets, DHCPv6 packets, IPv6 packets, and IP packets to trigger authentication.

The authentication methods available for individual users are as follows:

• PPP authentication for users who dial in through PPP

• 802.1x authentication for users who dial in through 802.1x

Web authentication, fast authentication, binding authentication or 802.1x authentication for users who trigger the authentication by sending DHCP, ARP, or IP packets

Leased Line Users

An Ethernet interface or certain VLANs/PVCs on an interface of the NetEngine 8000 F can be leased to users.

A leased line may connect to multiple hosts, but the leased line users are regarded as a single user on the NetEngine 8000 F. The NetEngine 8000 F performs centralized authentication, accounting, bandwidth control, access right control, and QoS for the users.

The NetEngine 8000 F supports the following types of leased line:

• Layer 2 leased line

  Figure 1 Layer 2 leased line access Network Diagram
  

  Through a layer 2 device such as a LAN switch and a DSLAM, leased line users access an interface of the NetEngine 8000 F or VLANs/PVCs on the interface. A leased line user can access the network through DHCP or ARP. If DHCP is used, the leased line user is assigned a dynamic IP address; if ARP is used, the leased line user is assigned a static IP address.

  Layer 2 leased line services are not provided for IPv6 users.

• Layer 3 leased line

  Figure 2 Layer 3 leased line access Network Diagram
  

  Through a layer 3 device such as a router, the layer 3 leased line users connect to an interface of the NetEngine 8000 F or the VLANs/PVCs under the interface. The router (not the NetEngine 8000 F) is responsible for allocating IP addresses to the users.

  In the case of layer-3 leased line, the NetEngine 8000 F functions as a forwarding router. It checks the validity of the source IP address and controls bandwidth. The router allocates IP addresses to the layer 3 leased line users.

  Layer 3 leased line services can be provided for IPv6 users.

• PPP leased line

  The PPP leased line also accesses the NetEngine 8000 F through the layer-3 devices such as a router. In PPP leased line mode, a Layer 3 device accesses the NetEngine 8000 F as a Layer 2 user through the PPP dial-up. Therefore, the NetEngine 8000 F can only see one Layer 2 user, instead of the actual users under the Layer 3 device.

  The upstream packets of the layer-3 users are sent to the NetEngine 8000 F through the PPP link and forwarded as the packets of a single user.

  The NetEngine 8000 F configures a route to the layer-3 device according to the Framed-Route message sent from the RADIUS server. In this way, the downstream packets with the destination address of the PPP leased line network segment can be delivered to the PPP egress router through the PPP link.

  The numbered routed scenario on an IPv6 network provides the leased line functionality of an IPv4 network. The NetEngine 8000 F assigns addresses to WAN interfaces and allocates IPv6 prefixes to LAN interfaces of home gateways. The NetEngine 8000 F can identify only home gateways but not user terminals.