Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 04-Value-added services commands | 149.59 KB |
Contents
rate-limit dual-stack separate
service rate-limit mode (EDSG service policy view)
Display commands for value-added-service user information
display value-added-service user
display value-added-service user { ip-address | ipv6-address }
Value-added services commands
ITA policy commands
accounting-level
Use accounting-level to specify a traffic level for ITA accounting.
Use undo accounting-level to remove the ITA accounting configuration for a traffic level.
Syntax
accounting-level level { { ipv4 | ipv6 } | car { inbound cir committed-information-rate [ pir peak-information-rate ] | outbound cir committed-information-rate [ pir peak-information-rate ] } * } *
undo accounting-level [ level ]
Default
No traffic levels are specified for ITA accounting.
Views
ITA policy view
Predefined user roles
network-admin
Parameters
level: Specifies a traffic level in the range of 1 to 8.
ipv4: Counts the traffic as IPv4 traffic.
ipv6: Counts the traffic as IPv6 traffic.
car: Specifies a CAR action for the level of traffic. If you do not specify this keyword, no CAR action is applied to the level of traffic.
inbound: Specifies the incoming traffic.
outbound: Specifies the outgoing traffic.
cir committed-information-rate: Specifies the committed information rate in kbps. The value range is 8 to 160000000.
pir peak-information-rate: Specifies the peak information rate in kbps. The value range is 8 to 160000000. The peak information rate cannot be smaller than the committed information rate. If you do not specify this option, the CAR action does not restrict traffic by peak information rate.
Usage guidelines
By defining different traffic levels based on the destination addresses of users' traffic, you can use ITA to separate the traffic accounting statistics of different levels for each user.
Execute this command multiple times to specify multiple traffic levels for ITA accounting or specify CAR actions for each traffic level. If you specify only CAR actions for a traffic level without specifying the ipv4 or ipv6 keyword, the device does not perform ITA accounting on the traffic of that level.
If you do not specify a level for the undo accounting-level command, this command removes the ITA accounting configuration for all traffic levels in the ITA policy.
If the IP protocol type specified for a traffic level is different from the actual IP protocol type, the device counts the traffic of this level as the traffic of the specified IP protocol.
If you do not specify the ipv4 or ipv6 keyword, the command does not perform accounting.
Examples
# In ITA policy ita1, specify traffic levels 2 and 4, and count the level-2 traffic as IPv4 traffic and the level-4 traffic as IPv6 traffic.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1] accounting-level 2 ipv4
[Sysname-ita-policy-ita1] accounting-level 4 ipv6
Related commands
display ita policy
accounting-merge enable
Use accounting-merge enable to enable the accounting merge feature.
Use undo accounting-merge enable to disable the accounting merge feature.
Syntax
accounting-merge enable
undo accounting-merge enable
Default
The accounting merge feature is disabled.
Views
ITA policy view
Predefined user roles
network-admin
Usage guidelines
When accounting merge is enabled, the device merges accounting statistics for the ITA traffic of all levels in the ITA policy. It reports the traffic as the lowest level of the policy to the accounting server.
Examples
# Enable the accounting merge feature for ITA policy ita1.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1] accounting-merge enable
Related commands
display ita policy
accounting-method
Use accounting-method to configure the accounting method for an ITA policy.
Use undo accounting-method to restore the default.
Syntax
accounting-method { none | radius-scheme radius-scheme-name [ none ] }
undo accounting-method
Default
The default accounting method of an ITA policy is none.
Views
ITA policy view
Predefined user roles
network-admin
Parameters
none: Does not perform accounting.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters.
Usage guidelines
Use this command to configure accounting methods for an ITA policy. ITA accounting is separated from accounting of other services.
You can specify one primary accounting method and one backup accounting method for an ITA policy.
When the primary method is invalid, the device uses the backup method. For example, the accounting-method radius-scheme radius-scheme-name none command specifies RADIUS accounting as the primary method and no accounting as the backup method. The device performs RADIUS accounting by default and does not perform accounting when the RADIUS server is invalid.
The remote accounting method is invalid in the following situations:
· The specified accounting scheme does not exist.
· Accounting packet sending fails.
· The device does not receive any accounting response packets from an accounting server.
Examples
# Specify RADIUS accounting scheme radius1 for ITA policy ita1.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1] accounting-method radius-scheme radius1
Related commands
display ita policy
radius scheme
display ita policy
Use display ita policy to display ITA policy information.
Syntax
display ita policy [ policy-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
policy-name: Specifies an ITA policy by its name, a case-insensitive string of 1 to 31 characters. If you do not specify an ITA policy, this command displays information about all ITA policies.
Examples
# Display information about all ITA policies.
<Sysname> display ita policy
Total 2 ITA policies.
ITA policy: ita1
Accounting method : RADIUS=Rd1, None
Accounting merge : Enabled
Accounting levels :
Level 1 IPv4
Inbound CAR: CIR 100 kbps PIR 200 kbps
Outbound CAR: CIR 100 kbps PIR 200 kbps
Level 2 IPv6
Level 3 IPv4
Level 8 IPv6
Traffic separation : Enabled
Separated levels: 1, 2, 3, 4
Traffic quota-out action: Online
Send accounting update: No
ITA policy: ita2
Accounting method : None
Accounting merge : Disabled
Accounting levels : None
Traffic separation : Disabled
Traffic quota-out action: Online
Send accounting update: Yes
User group NAT instance
g1 cp1
g2 cp2
g3 -
Table 1 Command output
|
Field |
Description |
|
ITA policy |
ITA policy name. |
|
Accounting merge |
Status of the accounting merge feature: · Enabled—The accounting merge feature is enabled. The device merges the ITA traffic of all accounting rates in the ITA policy, and applies the lowest rate to the merged traffic. · Disabled—The accounting merge feature is disabled. The device sends separate traffic statistics for each accounting rate to the server. |
|
Accounting levels |
ITA traffic accounting levels: · Level m IPv4—Applies accounting level m to IPv4 traffic. The value range for the m argument is 1 to 8. · Level n IPv6—Applies accounting level n to IPv6 traffic. The value range for the n argument is 1 to 8. · None—No ITA traffic accounting level is configured. |
|
Inbound CAR |
Inbound CAR: · CIR—Committed information rate in kbps. · PIR—Peak information rate in kbps. |
|
Outbound CAR |
Outbound CAR: · CIR—Committed information rate in kbps. · PIR—Peak information rate in kbps. |
|
Traffic separation |
Whether the amount of ITA traffic is excluded from the overall traffic statistics sent to the accounting server: · Enabled—The amount of specific-level ITA traffic is excluded from the overall traffic statistics. · Disabled—ITA traffic is included in the overall traffic statistics. |
|
Separated levels |
Levels of ITA traffic of which statistics are excluded from the overall traffic statistics sent to the accounting server. |
|
Traffic quota-out action |
Access control for users that have used up their ITA data quotas: · Online—Users can access the authorized IP subnets after their ITA data quotas are used up. · Offline—Users cannot access the authorized IP subnets after their ITA data quotas are used up. |
|
Send accounting update |
Whether to send accounting-update packets to refresh users' data quotas: · Yes. · No. |
|
User group |
User group specified for the ITA policy. |
|
NAT instance |
NAT instance bound to the user group. This field displays a hyphen (-) if no NAT instance is bound to the user group. |
ita policy
Use ita policy to create an ITA policy and enter its view, or enter the view of an existing ITA policy.
Use undo ita policy to delete an ITA policy.
Syntax
ita policy policy-name
undo ita policy policy-name
Default
No ITA policies exist.
Views
System view
Predefined user roles
network-admin
Parameters
policy-name: Specifies the ITA policy name, a case-insensitive string of 1 to 31 characters.
Examples
# Create an ITA policy named ita1 and enter ITA policy view.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1]
Related commands
display ita policy
traffic-quota-out
Use traffic-quota-out to configure access control for users that have used up their ITA data quotas.
Use undo traffic-quota-out to restore the default.
Syntax
traffic-quota-out { offline | online } [ no-accounting-update ]
undo traffic-quota-out
Default
The device sends accounting-update packets to the server to request new data quotas for the users that have used up their data quotas. A user cannot access the authorized IP subnets if the device does not receive any new data quota from the server for the user.
Views
ITA policy view
Predefined user roles
network-admin
Parameters
offline: Prevents users from accessing the authorized IP subnets after their ITA data quotas are used up.
online: Permits users to access the authorized IP subnets after their ITA data quotas are used up.
no-accounting-update: Disables the device from sending accounting-update requests to refresh the users' quotas.
Usage guidelines
The server might divide the data quota of a user into multiple portions and assign one portion to the user each time. If the server does not support dividing user data quota, specify the no-accounting-update keyword to decrease the burden of the server as a best practice.
Examples
# In ITA policy ita1, prevent users from accessing the authorized IP subnets after their ITA data quotas are used up.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1] traffic-quota-out offline
Related commands
display ita policy
traffic-separate
Use traffic-separate enable to exclude the amount of specific-level ITA traffic from the overall traffic statistics that are sent to the accounting server.
Use undo traffic-separate enable to restore the default for an ITA traffic level.
Syntax
traffic-separate enable [ level level&<1-8> ]
undo traffic-separate enable [ level level&<1-8> ]
Default
The amount of ITA traffic is included in the overall traffic statistics that are sent to the accounting server.
Views
ITA policy view
Predefined user roles
network-admin
Parameters
level level&<1-8>: Specifies a space-separated list of up to eight ITA traffic levels. If you do not specify an ITA traffic level, this command excludes the amount of ITA traffic at all levels from the overall traffic statistics that are sent to the accounting server.
Examples
# In ITA policy ita1, exclude the amount of level-1 ITA traffic from the overall traffic statistics that are sent to the accounting server.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1] traffic-separate enable level 1
Related commands
accounting-level
display ita policy
user-group (ITA policy view)
Use user-group to specify a user group for an ITA policy.
Use undo user-group to remove a user group specified for an ITA policy.
Syntax
user-group name group-name [ nat-instance instance-name ]
undo user-group [ name group-name ]
Default
No user groups are specified for an ITA policy.
Views
ITA policy view
Predefined user roles
network-admin
Parameters
name group-name: Specifies a user group by its name, a case-insensitive string of 1 to 32 characters.
nat-instance instance-name: Specifies a NAT instance to be bound to the user group by its name, a case-sensitive string of 1 to 31 characters. If the name of the NAT instance includes blank spaces, enclose the NAT instance name with quotation marks, "xxx xxx", for example. If you do not specify a NAT instance, the device does not perform NAT on ITA traffic in the user group.
Usage guidelines
Use this command to mark users' ITA services with accounting levels and limit the service traffic by traffic policing parameters on a user group basis. In actual networks, you can implement dynamic management of traffic policing parameters applied to users' different ITA services by assigning different ITA policies to the users.
You can specify a maximum of 32 NAT instance-bound user groups and 1 NAT instance-unbound user group for an ITA policy. The system selects a user group used to process a user's ITA traffic as follows:
· If the non-ITA service traffic of the user is being processed by a NAT instance, the ITA services of the user are assigned to the user group associated with the NAT instance. If the user group is not specified for the ITA policy, the ITA services of the user are not assigned to a new user group. The ITA services are processed in the same user group as non-ITA services.
· If the non-ITA service traffic of the user is not being processed by a NAT instance, the ITA services of the user are assigned to the user group that is not bound with a NAT instance. If no such a user group is specified for the ITA policy, the ITA services of the user are not assigned to a new user group. The ITA services are processed in the same user group as non-ITA services.
For more information about NAT instances, see NAT configuration in Layer 3—IP Services Configuration Guide. You must configure a QoS policy to identify users' ITA services that belong to different user groups and remark the accounting levels of the ITA service traffic. For more information about QoS policies, see QoS configuration in ACL and QoS Configuration Guide.
If you do not specify a user group in the undo form this command, all user groups specified for the ITA policy will be removed.
A user group can be bound only to one NAT instance.
For the user group and NAT instance binding to take effect, bind a user group to an existing NAT instance.
Change to or removal of a user group specified for an ITA policy affects only users authorized with the ITA policy after the user group is modified or removed.
Examples
# Specify user group g1 for ITA policy ita1 and bind the user group to NAT instance cp1.
<Sysname> system-view
[Sysname] ita policy ita1
[Sysname-ita-policy-ita1] user-group name g1 nat-instance cp1
Related commands
display ita policy
user-group (system view)
EDSG service policy commands
accounting-method
Use accounting-method to specify accounting methods for the EDSG service.
Use undo accounting-method to restore the default.
Syntax
accounting-method { none | radius-scheme radius-scheme-name [ none ] }
undo accounting-method
Default
The device does not perform accounting on the EDSG service.
Views
EDSG service policy view
Predefined user roles
network-admin
Parameters
none: Does not perform accounting.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters.
Usage guidelines
Use this command to perform independent accounting on the EDSG service. The accounting methods can be different from those used for non-EDSG services.
You can specify one primary accounting method and a backup accounting method for the EDSG service. When the primary method is invalid, the device attempts to use the backup method. For example, the accounting-method radius-scheme radius-scheme-name none command specifies a primary RADIUS accounting method and a backup method (no accounting). The device first attempts to perform RADIUS accounting. If the RADIUS accounting method is invalid, the device does not perform accounting.
The remote accounting method is invalid in the following situations:
· The specified accounting scheme does not exist.
· Accounting packet sending fails.
· The device does not receive any accounting response packets from an accounting server.
Examples
# In EDSG service policy sp1, perform RADIUS accounting on the EDSG service based on RADIUS scheme rd.
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1] accounting-method radius-scheme rd1
Related commands
display service policy
radius scheme
authentication-method
Use authentication-method to specify authentication methods for the EDSG service.
Use undo authentication-method to restore the default.
Syntax
authentication-method { none | radius-scheme radius-scheme-name [ none ] }
undo authentication-method
Default
The device does not perform authentication on the EDSG service.
Views
EDSG service policy view
Predefined user roles
network-admin
Parameters
none: Does not perform authentication.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters.
Usage guidelines
Use this command to perform independent authentication on the EDSG service. The authentication methods can be different from those used for non-EDSG services.
You can specify one primary authentication method and a backup authentication method for the EDSG service. When the primary method is invalid, the device attempts to use the backup method. For example, the authentication-method radius-scheme radius-scheme-name none command specifies a primary RADIUS authentication method and a backup method (no authentication). The device first attempts to perform RADIUS authentication. If the RADIUS authentication method is invalid, the device does not perform authentication.
The remote authentication method is invalid in the following situations:
· The specified authentication scheme does not exist.
· Authentication packet sending fails.
· The device does not receive any authentication response packets from an authentication server.
Examples
# In EDSG service policy sp1, perform RADIUS authentication on the EDSG service based on RADIUS scheme rd.
<Sysname> system-view
[Sysname] service-policy sp1
[Sysname-service-policy-sp1] authentication-method radius-scheme rd1
Related commands
display service policy
car
Use car to set CAR parameters for the EDSG service.
Use undo car to restore the default.
Syntax
car { inbound | outbound } cir cir-value [ pir pir-value ] [ cbs cbs-value ] [ ebs ebs-value ]
undo car { inbound | outbound }
Default
No CAR parameters are set for the EDSG service.
Views
EDSG service policy view
Predefined user roles
network-admin
Parameters
inbound: Performs CAR for upstream EDSG traffic.
outbound: Performs CAR for downstream EDSG traffic.
cir cir-value: Specifies the CIR, in kbps. The value range for the cir-value argument is 300 to 10000000.
pir pir-value: Specifies the PIR, in kbps. The value range for the pir-value argument is 300 to 10000000. If you specify the PIR, make sure the PIR is equal to or higher than the CIR. If you do not specify the PIR, the value of PIR is the same as the value of the CIR.
cbs cbs-value: Specifies the CBS, in bytes. The value range for the cbs-value argument is 4096 to 187500000. If you do not specify the CBS, the CBS of the EDSG traffic is not restricted.
ebs ebs-value: Specifies the EBS, in bytes. The value range for the ebs-value argument is 0 to 256000000. If you do not specify the EBS, the EBS of the EDSG traffic is not restricted.
Usage guidelines
Use this command to limit the rate of the EDSG traffic.
Examples
# For upstream EDSG traffic, set the CIR to 100 kbps and the PIR to 500 kbps. For downstream EDSG traffic, set the CIR to 200 kbps and the PIR to 2000 kbps.
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1] car inbound cir 100 pir 500
[Sysname-service-policy-sp1] car outbound cir 200 pir 2000
Related commands
display service policy
display service policy
Use display service policy to display EDSG service policy configuration.
Syntax
display service policy [ policy-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
policy-name: Specifies an EDSG service policy by its name, a case-insensitive string of 1 to 31 characters. The EDSG service policy name cannot contain a left bracket ([), right bracket (]), or semicolon (;). If you do not specify an EDSG service policy, this command displays the configuration for all EDSG service policies.
Examples
# Display the configuration for EDSG service policy sp1.
<Sysname> display service policy sp1
Service policy: sp1
Service ID : 4
Authentication method : RADIUS=Rd1, None
Accounting method : RADIUS=Rd1, None
Traffic statistics : Separate
Inbound CAR : CIR=222 kbps, PIR=2222 kpbs, CBS=5678 bytes, EBS=5678 bytes
Outbound CAR : CIR=222 kbps, PIR=2222 kpbs
Dual-stack rate limit mode : Merge
# Display the configuration for all EDSG service policies.
<Sysname> display service policy
Total 2 service policies.
Service policy: sp1
Service ID : 4
Authentication method : RADIUS=Rd1, None
Accounting method : RADIUS=Rd1, None
Traffic statistics : Separate
Inbound CAR : CIR=222 kbps, PIR=2222 kpbs, CBS=5678 bytes, EBS=5678 bytes
Outbound CAR : CIR=222 kbps, PIR=2222 kpbs
Dual-stack rate limit mode : Separate
Service rate-limit mode : Separate
Service policy: test
Service ID : 4
Authentication method : None
Accounting method : RADIUS=Rd2, None
Traffic statistics : Separate
Inbound CAR : CIR=100 kbps, PIR=640000 kpbs
Outbound CAR : CIR=5000 kbps, PIR=640000 kpbs
Dual-stack rate limit mode : Merge
Service rate-limit mode : Merge
Table 2 Command output
|
Field |
Description |
|
Total xx service policies |
Total number of EDSG service policies. |
|
Service ID |
ID of the EDSG service policy. |
|
Authentication method |
Authentication methods for the EDSG service policy. |
|
Accounting method |
Accounting methods for the EDSG service policy. |
|
Traffic statistics |
Traffic statistics mode for the EDSG service: · Merge—The EDSG service traffic of a user is included in the overall traffic of the user. · Separate—The EDSG service traffic of a user is excluded from the overall traffic of the user. |
|
Inbound CAR |
CAR parameters for incoming traffic of the EDSG service: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. · EBS—Excess burst size, in bytes. |
|
Outbound CAR |
CAR parameters for outgoing traffic of the EDSG service: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. · EBS—Excess burst size, in bytes. |
|
Dual-stack rate limit mode |
Rate limit mode for IPv4 and IPv6 EDSG traffic: · Merge—Collectively limits the rate of IPv4 and IPv6 EDSG traffic. · Separate—Separately limits the rates of IPv4 and IPv6 EDSG traffic. |
|
Service rate-limit mode |
Rate limit mode for EDSG services: · Merge—In-band mode. In this mode, the device limits the overall rates of both EDSG traffic and non-EDSG traffic for a user within the available basic bandwidth of the user. The bandwidth for the EDSG traffic is preferentially guaranteed. · Separate—Out-band mode. In this mode, the device limits the rate of EDSG traffic within an independent bandwidth. The bandwidth for the non-EDSG traffic is not affected. |
rate-limit dual-stack separate
Use rate-limit dual-stack separate to enable separate mode to separately limit the rates of IPv4 and IPv6 EDSG traffic.
Use undo rate-limit dual-stack separate to disable separate mode for collectively limiting the rate of IPv4 and IPv6 EDSG traffic.
Syntax
rate-limit dual-stack separate
undo rate-limit dual-stack separate
Default
Separate rate limit mode is disabled for IPv4 and IPv6 EDSG traffic. The device collectively limits the rate of IPv4 and IPv6 EDSG traffic.
Views
EDSG service policy view
Predefined user roles
network-admin
Usage guidelines
This feature takes effect only when the rate limit mode for EDSG services is set to in-band. To set the rate limit mode for EDSG services to in-band, use the service rate-limit mode merge command in ISP domain view or EDSG service policy view.
Examples
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1] rate-limit dual-stack separate
Related commands
display service policy
service rate-limit mode (EDSG service policy view)
service rate-limit mode (ISP domain view)
service rate-limit mode (EDSG service policy view)
Use service rate-limit mode to set the rate limit mode for EDSG services.
Use undo service rate-limit mode to restore the default.
Syntax
service rate-limit mode { merge | separate }
undo service rate-limit mode
Default
The rate limit mode used in ISP domain view applies.
Views
EDSG service policy view
Predefined user roles
network-admin
Parameters
merge: Specifies the in-band mode. In this mode, the device limits the overall rates of both EDSG traffic and non-EDSG traffic for a user within the available basic bandwidth of the user. The bandwidth for the EDSG traffic is preferentially guaranteed.
separate: Specifies the out-band mode. In this mode, the device limits the rate of EDSG traffic within an independent bandwidth. The bandwidth for the non-EDSG traffic is not affected.
Usage guidelines
Assume that the available basic bandwidth for a user is 20 Mb and the available bandwidth for EDSG traffic of the user is 12 Mb.
· In in-band mode, the EDSG bandwidth is excluded from the basic bandwidth. The actual bandwidth for the user is 32 Mb, in which 12 Mb is exclusively used for EDSG services.
· In out-band mode, the EDSG bandwidth is included in the basic bandwidth. The actual bandwidth for the user is 20 Mb, in which 12 Mb is exclusively used for EDSG services, and the remaining 8 Mb is used for non-EDSG services.
The rate limit mode set in EDSG service policy view takes precedence over the rate limit mode set in ISP domain view.
Examples
# In EDSG service policy sp1, set the rate limit mode for EDSG services to out-band mode.
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1] service rate-limit mode separate
Related commands
display service policy
service rate-limit mode (ISP domain view)
service policy
Use service policy to create an EDSG service policy and enter its view, or enter the view of an existing EDSG service policy.
Use undo service policy to delete an EDSG service policy.
Syntax
service policy policy-name
undo service policy policy-name
Default
No EDSG service policies exist.
Views
System view
Predefined user roles
network-admin
Parameters
policy-name: Specifies the name of an EDSG service policy, a case-insensitive string of 1 to 31 characters. The EDSG service policy name cannot contain a left bracket ([), right bracket (]), or semicolon (;).
Examples
# Create an EDSG service policy named sp1 and enter its view.
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1]
Related commands
display service policy
service-id
Use service-id to set the ID for an EDSG service policy.
Use undo service-id to restore the default.
Syntax
service-id number
undo service-id
Default
No ID is set for an EDSG service policy.
Views
EDSG service policy view
Predefined user roles
network-admin
Parameters
number: Specifies the ID of the EDSG service policy, in the range of 1 to 8.
Usage guidelines
An EDSG service ID uniquely identifies an EDSG service.
You can set only one ID for an EDSG service policy. You can set the same ID for different EDSG service policies.
If the RADIUS server assigns multiple EDSG service policies that have different IDs, all the assigned EDSG service policies take effect. If the RADIUS server assigns multiple EDSG service policies that have the same ID, only the EDSG service policy that successfully triggers EDSG authentication takes effect. For all EDSG service policies assigned to a user to take effect, make sure the EDSG server assigns EDSG policies that have different IDs to the user.
Examples
# In EDSG service policy sp1, set the EDSG service ID to 3.
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1] service-id 3
Related commands
display service policy
traffic statistics
Use traffic statistics to set the EDSG traffic statistics mode.
Use undo traffic statistics to restore the default.
Syntax
traffic statistics { merge | separate }
undo traffic statistics
Default
The separate mode is used for EDSG traffic statistics. The device excludes the amount of EDSG traffic from the overall traffic.
Views
EDSG service policy view
Predefined user roles
network-admin
Parameters
merge: Includes the amount of EDSG traffic into the overall traffic.
separate: Excludes the amount of EDSG traffic from the overall traffic.
Usage guidelines
The EDSG traffic statistics mode determines whether to include the EDSG traffic of a user into the overall traffic of the user or not.
The EDSG traffic statistics mode does not affect accounting for the EDSG service. An accounting packet for the EDSG traffic records the statistics only of the EDSG service traffic.
The EDSG rate limit mode does not affect the EDSG traffic statistics mode.
Examples
# In EDSG service policy sp1, set the EDSG traffic statistics mode to merge.
<Sysname> system-view
[Sysname] service policy sp1
[Sysname-service-policy-sp1] traffic statistics merge
Related commands
display service policy
Display commands for value-added-service user information
display value-added-service user
Use display value-added-service user to display statistics about value-added-service users.
Syntax
display value-added-service user [ edsg | ita | service | without-service ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
edsg: Specifies EDSG users (users that are assigned EDSG service policies).
ita: Specifies ITA users (users that are assigned ITA policies).
service: Specifies value-added-service users.
without-service: Specifies non-value-added-service users.
Usage guidelines
Value-added-service users refer to EDSG users and ITA users.
If you do not specify any parameters, this command displays statistics about all value-added-service users.
Examples
# Display statistics about all value-added-service users.
<Sysname> display value-added-service user
The used user IDs are:
0x37 0x38 0x39 0x40 0x81 0x82
0x83
Total users: 7
# Display statistics about ITA users.
<Sysname> display value-added-service user ita
The used user IDs with ITA are:
0x81 0x82 0x83
Total users: 3
# Display statistics about EDSG users.
<Sysname> display value-added-service user edsg
The used user IDs with EDSG are:
0x37 0x38 0x39 0x40
Total users: 4
# Display statistics about value-added-service users.
<Sysname> display value-added-service user service
The used user IDs with ITA are:
0x81 0x82 0x83
The used user IDs with EDSG are:
0x37 0x38 0x39 0x40
Total users: 7
# Display statistics about non-value-added-service users.
<Sysname> display value-added-service user without-service
The used user IDs without a service are:
0x89 0x90 0x91 0x92 0x93
Total users: 5
Table 3 Command output
|
Field |
Description |
|
The used user IDs are |
List of IDs for value-added-service users. |
|
The used user IDs with ITA are |
List of IDs for ITA users. |
|
The used user IDs with EDSG are |
List of IDs for EDSG users . |
|
The used user IDs without a service are |
List of IDs for non-value-added-service users. |
|
Total users |
Total number of the displayed access users. |
display value-added-service user { ip-address | ipv6-address }
Use display value-added-service user { ip-address | ipv6-address } to display information about a value-added-service user that uses a specific IP address.
Syntax
display value-added-service user { ip-address ipv4-address | ipv6-address ipv6-address } [ vpn-instance vpn-instance-name ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ip-address ipv4-address: Specifies a value-added-service user by its IPv4 address.
ipv6-address ipv6-address: Specifies a value-added-service user by its IPv6 address.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the user belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the user is on the public network, do not specify this option.
verbose: Displays detailed information about the user. If you do not specify this keyword, the command displays only brief information about the user.
Usage guidelines
Value-added-service users refer to EDSG users and ITA users.
Examples
# Display brief information about the value-added-service user at 1.1.1.1. (Applicable to ITA.)
<Sysname> display value-added-service user ip-address 1.1.1.1
Basic:
User ID : 0x1
User name : user1
Service type : ITA
ITA:
Accounting merge : Disabled
Traffic quota-out action : Online
Level-1 State : Online
# Display detailed information about the value-added-service user at 1.1.1.1. (Applicable to ITA.)
<Sysname> display value-added-service user ip-address 1.1.1.1 verbose
Basic:
User ID : 0x1
User name : user1
IP address : 1.1.1.1
IPv6 address : -
Service type : ITA
ITA:
Policy name : ita
Accounting merge : Disabled
Traffic quota-out action : Online
Level-1 State : Online(active)
Inbound CAR : CIR 1000kbps PIR 2000kbps
CBS -
Outbound CAR : CIR 1000kbps PIR 2000kbps
CBS -
Uplink packets/bytes : 4/392
Downlink packets/bytes : 4/392
IPv6 uplink packets/bytes : 0/0
IPv6 downlink packets/bytes : 0/0
Accounting start time : 2019-01-24 18:24:10
Online time (hh:mm:ss) : 0:00:12
Accounting state : Accounting
Session timeout : Unlimited
Time remained : Unlimited
Realtime accounting interval: 720 seconds
Traffic separate : Disabled
Traffic quota : Unlimited
Traffic remained : Unlimited
# Display brief information about the value-added-service user at 1.1.1.1. (Applicable to EDSG.)
<Sysname> display value-added-service user ip-address 1.1.1.1
Basic:
User ID : 0x2
User name : user1
Service type : EDSG
Service policy:
Service ID : 1
Policy name : sp1
Policy username : edsg
State : Online
Traffic statistics : Separate
Service rate-limit mode : Separate
Dual-stack rate limit mode : Merge
Traffic quota-out action : Online
# Display detailed information about the value-added-service user at 1.1.1.1. (Applicable to EDSG.)
<Sysname> display value-added-service user ip-address 1.1.1.1 verbose
Basic:
User ID : 0x1
User name : user1
IP address : 1.1.1.1
IPv6 address : -
Service type : EDSG
Service policy:
Service ID : 1
Policy name : sp1
Policy username : edsg
State : Online(active)
Traffic statistics : Separate
Service rate-limit mode : Separate
Dual-stack rate limit mode : Merge
Traffic quota-out action : Online
Inbound CAR : CIR 1000kbps PIR 2000kbps
CBS -
Outbound CAR : CIR 1000kbps PIR 2000kbps
CBS -
Uplink packets/bytes : 4/392
Downlink packets/bytes : 4/392
IPv6 uplink packets/bytes : 0/0
IPv6 downlink packets/bytes : 0/0
Accounting start time : 2019-01-24 18:24:10
Online time (hh:mm:ss) : 0:00:12
Accounting state : Accounting
Session timeout : Unlimited
Time remained : Unlimited
Realtime accounting interval : 720 seconds
Traffic quota : Unlimited
Traffic remained : Unlimited
|
Field |
Description |
|
Basic |
Basic information of the value-added-service user. |
|
IP address |
IPv4 address of the value-added-service user. If the user does not have an IPv4 address, this field displays a hyphen (-). |
|
IPv6 address |
IPv6 address of the value-added-service user. If the user does not have an IPv6 address, this field displays a hyphen (-). |
|
Service type |
Type of the value-added service for the user. · ITA. · EDSG. |
|
ITA |
ITA service information. |
|
Policy name |
Name of the value-added-service policy. |
|
Accounting merge |
Status of the ITA accounting merge feature: · Enabled—The accounting merge feature is enabled. The device merges the ITA traffic of all accounting rates in the ITA policy, and applies the lowest rate to the merged traffic. · Disabled—The accounting merge feature is disabled. The device sends separate traffic statistics for each accounting rate to the server. |
|
Traffic quota-out action |
Access control for users that have used up their value-added-service data quotas: · Online—Users can access the authorized IP subnets after their data quotas are used up. · Offline—Users cannot access the authorized IP subnets after their data quotas are used up. · Redirect—The Web visit requests of users are redirected after their data quotas are used up. |
|
Level-n |
ITA traffic accounting level, in the range of 1 to 8. |
|
State |
State of the value-added-service user: · Init—The user is being initialized. · Auth—The user is being authenticated. · StartAccounting—Accounting is starting for the user. · Online—The user is online. · GoingOffline—The user is going offline. · StopAccounting—Accounting is being stopped for the user. · Offline—The user has gone offline. This field also displays the activity state of the user in brackets. Available options: · active—The user is active. · inactive—The user is inactive. |
|
Offline reason |
Reason that the value-added-service user went offline: · Authentication failed. · Accounting failed. · Accounting update failed. · Failed to send accounting packets. · Traffic quota exhausted. · Session timed out. · Cut by the AAA server. · Logged out by the RADIUS proxy. This field is displayed only if the user has gone offline. |
|
Inbound CAR |
CAR parameters for incoming traffic: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. If a CAR parameter is not assigned to the user, the corresponding field displays a hyphen (-). |
|
Outbound CAR |
CAR parameters for outgoing traffic: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. If a CAR parameter is not assigned to the user, the corresponding field displays a hyphen (-). |
|
Uplink packets/bytes |
If IPv4 traffic and IPv6 traffic are counted collectively, this field displays the total number of IPv4 and IPv6 uplink value-added-service packets and bytes. If IPv4 traffic and IPv6 traffic are counted separately, this field displays the total number of IPv4 uplink packets and bytes. |
|
Downlink packets/bytes |
If IPv4 traffic and IPv6 traffic are counted collectively, this field displays the total number of IPv4 and IPv6 downlink value-added-service packets and bytes. If IPv4 traffic and IPv6 traffic are counted separately, this field displays the total number of IPv4 downlink packets and bytes. |
|
IPv6 uplink packets/bytes |
Total number of IPv6 uplink value-added-service packets and bytes. |
|
IPv6 downlink packets/bytes |
Total number of IPv6 downlink value-added-service packets and bytes. |
|
Accounting start time |
Time when the device started accounting for the user. This field displays a hyphen (-) if accounting for the user has not started. |
|
Online time (hh:mm:ss) |
User online duration. |
|
Accounting state |
Accounting state of the user: · Accounting—Accounting is being performed for the user. · Stop—Accounting is stopped for the user. |
|
Session timeout |
Maximum session timeout time assigned to the user, in seconds. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quotas. · The user is not assigned a session timeout time. |
|
Time remained |
The remaining session timeout time of the user, in seconds. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quotas. · The user is not assigned a session timeout time. |
|
Realtime accounting interval |
Real-time accounting interval, in seconds. If no real-time accounting interval is assigned, this field displays a hyphen (-). |
|
Traffic separate |
Whether the amount of ITA traffic is excluded from the overall traffic statistics sent to the accounting server: · Enabled—The amount of specific-level ITA traffic is excluded from the overall traffic statistics. · Disabled—ITA traffic is included in the overall traffic statistics. |
|
Traffic quota |
Traffic quota, in bytes. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quota. · The quota of the user is not limited. |
|
Traffic remained |
The remaining data of the user, in bytes. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quota. · The quota of the user is not limited. |
|
Service policy |
EDSG service policy information. |
|
Service ID |
EDSG service ID. |
|
Policy username |
Username assigned by EDSG. |
|
Traffic statistics |
Traffic statistics mode for the EDSG service: · Merge—The EDSG service traffic of a user is included in the overall traffic of the user. · Separate—The EDSG service traffic of a user is excluded from the overall traffic of the user. |
|
Service rate-limit mode |
Rate limit mode for EDSG services: · Merge—In-band mode. In this mode, the device limits the overall rates of both EDSG traffic and non-EDSG traffic for a user within the available basic bandwidth of the user. The bandwidth for the EDSG traffic is preferentially guaranteed. · Separate—Out-band mode. In this mode, the device limits the rate of EDSG traffic within an independent bandwidth. The bandwidth for the non-EDSG traffic is not affected. |
|
Dual-stack rate limit mode |
Rate limit mode for IPv4 and IPv6 EDSG traffic: · Merge—Collectively limits the rate of IPv4 and IPv6 EDSG traffic. · Separate—Separately limits the rates of IPv4 and IPv6 EDSG traffic. |
display value-added-service user user-id
Use display value-added-service user user-id to display information about a value-added-service user that uses a specific user ID.
Syntax
display value-added-service user user-id user-id [ edsg [ service-id service-id ] | ita-level level ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
user-id: Specifies the ID of the user in hexadecimal format. The value range is 1 to FFFF4240.
edsg: Specifies EDSG users.
service-id service-id: Specifies an EDSG service policy by its ID, in the range of 1 to 8. If you do not specify a service ID with the edsg keyword, this command displays information about all users that are assigned any EDSG service policies.
ita-level level: Specifies an ITA accounting level, in the range of 1 to 8.
Usage guidelines
Value-added-service users refer to access users that are assigned EDSG service policies or ITA policies.
If you do not specify any keyword, this command displays only brief information about the specified user.
Examples
# Display brief information about the user with ID 1.
<Sysname> display value-added-service user user-id 1
Basic:
User ID : 0x1
User name : user1
Service type : ITA
ITA:
Accounting merge : Disabled
Traffic quota-out action : Online
Level-1 State : Online
For more information about the field descriptions, see Table 4.
display value-added-service user username
Use display value-added-service user username to display information about a value-added-service user that uses a specific username.
Syntax
display value-added-service user username username [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
username: Specifies the username, a case-sensitive string of 1 to 253 characters.
verbose: Displays detailed information about the user. If you do not specify this keyword, the command displays brief information about the user.
Usage guidelines
Value-added-service users refer to access users that are assigned EDSG service policies or ITA policies.
Examples
# Display brief information about value-added-service user user1.
<Sysname> display value-added-service user username user1
Basic:
User ID : 0x1
User name : user1
Service type : ITA
ITA:
Accounting merge : Disabled
Traffic quota-out action : Online
Level-1 State : Online
For more information about the field descriptions, see Table 4.
