Table of Contents

Related Documents

04-Value-added services commands

Title	Size	Download
04-Value-added services commands	207.66 KB

Value-added services commands

Value-added services are supported only in standard mode. For more information about the system operating mode, see managing the device in Fundamentals Configuration Guide.

Value-added services are supported only by IPoE and PPPoE users.

Value-added services are available only for the following cards:

Card category	Cards
CEPC	CEPC-XP4LX, CEPC-XP24LX, CEPC-XP48RX, CEPC-CP4RX, CEPC-CP4RX-L
CSPEX	CSPEX-1304X, CSPEX-1404X, CSPEX-1502X, CSPEX-1504X, CSPEX-1602X, CSPEX-1804X, CSPEX-1512X, CSPEX-1612X, CSPEX-1812X, CSPEX-1802X, CSPEX-1812X-E, CSPEX-2304X-G
SPE	RX-SPE200, RX-SPE200-E

ITA policy commands

accounting-level

Use accounting-level to specify a traffic level for ITA accounting.

Use undo accounting-level to remove the ITA accounting configuration for a traffic level.

Syntax

accounting-level level { { ipv4 | ipv6 } | car { inbound cir committed-information-rate [ pir peak-information-rate ] | outbound cir committed-information-rate [ pir peak-information-rate ] } * } *

undo accounting-level [ level ]

Default

No traffic levels are specified for ITA accounting.

Views

ITA policy view

Predefined user roles

network-admin

Parameters

level: Specifies a traffic level in the range of 1 to 8.

ipv4: Counts the traffic as IPv4 traffic.

ipv6: Counts the traffic as IPv6 traffic.

car: Specifies a CAR action for the level of traffic. If you do not specify this keyword, no CAR action is applied to the level of traffic.

inbound: Specifies the incoming traffic.

outbound: Specifies the outgoing traffic.

cir committed-information-rate: Specifies the committed information rate in kbps. The value range is 8 to 160000000.

pir peak-information-rate: Specifies the peak information rate in kbps. The value range is 8 to 160000000. The peak information rate cannot be smaller than the committed information rate. If you do not specify this option, the CAR action does not restrict traffic by peak information rate.

Usage guidelines

By defining different traffic levels based on the destination addresses of users' traffic, you can use ITA to separate the traffic accounting statistics of different levels for each user.

Execute this command multiple times to specify multiple traffic levels for ITA accounting or specify CAR actions for each traffic level. If you specify only CAR actions for a traffic level without specifying the ipv4 or ipv6 keyword, the device does not perform ITA accounting on the traffic of that level.

If you do not specify a level for the undo accounting-level command, this command removes the ITA accounting configuration for all traffic levels in the ITA policy.

If the IP protocol type specified for a traffic level is different from the actual IP protocol type, the device counts the traffic of this level as the traffic of the specified IP protocol.

If you do not specify the ipv4 or ipv6 keyword, the system does not perform accounting.

Examples

# In ITA policy ita1, specify traffic levels 2 and 4, and count the level-2 traffic as IPv4 traffic and the level-4 traffic as IPv6 traffic.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1] accounting-level 2 ipv4

[Sysname-ita-policy-ita1] accounting-level 4 ipv6

Related commands

display ita policy

accounting-merge enable

Use accounting-merge enable to enable the accounting merge feature.

Use undo accounting-merge enable to disable the accounting merge feature.

Syntax

accounting-merge enable

undo accounting-merge enable

Default

The accounting merge feature is disabled.

Views

ITA policy view

Predefined user roles

network-admin

Usage guidelines

When accounting merge is enabled, the device merges accounting statistics for the ITA traffic of all levels in the ITA policy. It reports the traffic as the lowest level of the policy to the accounting server.

Examples

# Enable the accounting merge feature for ITA policy ita1.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1] accounting-merge enable

Related commands

display ita policy

accounting-method

Use accounting-method to configure the accounting method for an ITA policy.

Use undo accounting-method to restore the default.

Syntax

accounting-method { none | radius-scheme radius-scheme-name [ none ] }

undo accounting-method

Default

The default accounting method of an ITA policy is none.

Views

ITA policy view

Predefined user roles

network-admin

Parameters

none: Does not perform accounting.

radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

Use this command to configure accounting methods for an ITA policy. ITA accounting is separated from accounting of other services.

You can specify one primary accounting method and one backup accounting method for an ITA policy.

When the primary method is invalid, the device uses the backup method. For example, the accounting-method radius-scheme radius-scheme-name none command specifies RADIUS accounting as the primary method and no accounting as the backup method. The device performs RADIUS accounting by default and does not perform accounting when the RADIUS server is invalid.

The remote accounting method is invalid in the following situations:

· The specified accounting scheme does not exist.

· Accounting packet sending fails.

· The device does not receive any accounting response packets from an accounting server.

Examples

# Specify RADIUS accounting scheme radius1 for ITA policy ita1.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1] accounting-method radius-scheme radius1

Related commands

display ita policy

radius scheme

display ita policy

Use display ita policy to display ITA policy information.

Syntax

display ita policy [ policy-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

policy-name: Specifies an ITA policy by its name, a case-insensitive string of 1 to 31 characters. If you do not specify an ITA policy, this command displays information about all ITA policies.

Examples

# Display information about all ITA policies.

<Sysname> display ita policy

Total 2 ITA policies.

ITA policy: ita1

Accounting method : RADIUS=Rd1, None

Accounting merge : Enabled

Accounting levels :

Level 1 IPv4

Inbound CAR: CIR 100 kbps PIR 200 kbps

Outbound CAR: CIR 100 kbps PIR 200 kbps

Level 2 IPv6

Level 3 IPv4

Level 8 IPv6

Traffic separation : Enabled

Separated levels: 1, 2, 3, 4

Traffic quota-out action: Online

Send accounting update: No

ITA policy: ita2

Accounting method : None

Accounting merge : Disabled

Accounting levels : None

Traffic separation : Disabled

Traffic quota-out action: Online

Send accounting update: Yes

User group NAT instance

g1 cp1

g2 cp2

g3 -

Table 1 Command output

Field	Description
ITA policy	ITA policy name.
Accounting merge	Status of the accounting merge feature: · Enabled—The accounting merge feature is enabled. The device merges the ITA traffic of all accounting rates in the ITA policy, and applies the lowest rate to the merged traffic. · Disabled—The accounting merge feature is disabled. The device sends separate traffic statistics for each accounting rate to the server.
Accounting levels	ITA traffic accounting levels: · Level m IPv4—Applies accounting level m to IPv4 traffic. The value range for the m argument is 1 to 8. · Level n IPv6—Applies accounting level n to IPv6 traffic. The value range for the n argument is 1 to 8. · None—No ITA traffic accounting level is configured.
Inbound CAR	Inbound CAR: · CIR—Committed information rate in kbps. · PIR—Peak information rate in kbps.
Outbound CAR	Outbound CAR: · CIR—Committed information rate in kbps. · PIR—Peak information rate in kbps.
Traffic separation	Whether the amount of ITA traffic is excluded from the overall traffic statistics sent to the accounting server: · Enabled—The amount of specific-level ITA traffic is excluded from the overall traffic statistics. · Disabled—ITA traffic is included in the overall traffic statistics.
Separated levels	Levels of ITA traffic of which statistics are excluded from the overall traffic statistics sent to the accounting server.
Traffic quota-out action	Access control for users that have used up their ITA data quotas: · Online—Users can access the authorized IP subnets after their ITA data quotas are used up. · Offline—Users cannot access the authorized IP subnets after their ITA data quotas are used up.
Send accounting update	Whether to send accounting-update packets to refresh users' data quotas: · Yes. · No.
User group	User group specified for the ITA policy.
NAT instance	NAT instance bound to the user group. This field displays a hyphen (-) if no NAT instance is bound to the user group.

ita policy

Use ita policy to create an ITA policy and enter its view, or enter the view of an existing ITA policy.

Use undo ita policy to delete an ITA policy.

Syntax

ita policy policy-name

undo ita policy policy-name

Default

No ITA policies exist.

Views

System view

Predefined user roles

network-admin

Parameters

policy-name: Specifies the ITA policy name, a case-insensitive string of 1 to 31 characters.

Examples

# Create an ITA policy named ita1 and enter ITA policy view.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1]

Related commands

display ita policy

traffic-quota-out

Use traffic-quota-out to configure access control for users that have used up their ITA data quotas.

Use undo traffic-quota-out to restore the default.

Syntax

traffic-quota-out { offline | online } [ no-accounting-update ]

undo traffic-quota-out

Default

The device sends accounting-update packets to the server to request new data quotas for the users that have used up their data quotas. A user cannot access the authorized IP subnets if the device does not receive any new data quota from the server for the user.

Views

ITA policy view

Predefined user roles

network-admin

Parameters

offline: Prevents users from accessing the authorized IP subnets after their ITA data quotas are used up.

online: Permits users to access the authorized IP subnets after their ITA data quotas are used up.

no-accounting-update: Disables the device from sending accounting-update requests to refresh the users' quotas.

Usage guidelines

The server might divide the data quota of a user into multiple portions and assign one portion to the user each time. If the server does not support dividing user data quota, specify the no-accounting-update keyword to decrease the burden of the server as a best practice.

Examples

# In ITA policy ita1, prevent users from accessing the authorized IP subnets after their ITA data quotas are used up.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1] traffic-quota-out offline

Related commands

display ita policy

traffic-separate

Use traffic-separate enable to exclude the amount of specific-level ITA traffic from the overall traffic statistics that are sent to the accounting server.

Use undo traffic-separate enable to restore the default for an ITA traffic level.

Syntax

traffic-separate enable [ level level&<1-8> ]

undo traffic-separate enable [ level level&<1-8> ]

Default

The amount of ITA traffic is included in the overall traffic statistics that are sent to the accounting server.

Views

ITA policy view

Predefined user roles

network-admin

Parameters

level level&<1-8>: Specifies a space-separated list of up to eight ITA traffic levels. If you do not specify an ITA traffic level, this command excludes the amount of ITA traffic at all levels from the overall traffic statistics that are sent to the accounting server.

Examples

# In ITA policy ita1, exclude the amount of level-1 ITA traffic from the overall traffic statistics that are sent to the accounting server.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1] traffic-separate enable level 1

Related commands

accounting-level

display ita policy

user-group (ITA policy view)

Use user-group to specify a user group for an ITA policy.

Use undo user-group to remove a user group specified for an ITA policy.

Syntax

user-group name group-name [ nat-instance instance-name ]

undo user-group [ name group-name ]

Default

No user groups are specified for an ITA policy.

Views

ITA policy view

Predefined user roles

network-admin

Parameters

name group-name: Specifies a user group by its name, a case-insensitive string of 1 to 32 characters.

nat-instance instance-name: Specifies a NAT instance to be bound to the user group by its name, a case-sensitive string of 1 to 31 characters. If the name of the NAT instance includes blank spaces, enclose the NAT instance name with quotation marks, "xxx xxx", for example. If you do not specify a NAT instance, the device does not perform NAT on ITA traffic in the user group.

Usage guidelines

Use this command to mark users' ITA services with accounting levels and limit the service traffic by traffic policing parameters on a user group basis. In actual networks, you can implement dynamic management of traffic policing parameters applied to users' different ITA services by assigning different ITA policies to the users.

You can specify a maximum of 32 NAT instance-bound user groups and 1 NAT instance-unbound user group for an ITA policy. The system selects a user group used to process a user's ITA traffic as follows:

· If the non-ITA service traffic of the user is being processed by a NAT instance, the ITA services of the user are assigned to the user group associated with the NAT instance. If the user group is not specified for the ITA policy, the ITA services of the user are not assigned to a new user group. The ITA services are processed in the same user group as non-ITA services.

· If the non-ITA service traffic of the user is not being processed by a NAT instance, the ITA services of the user are assigned to the user group that is not bound with a NAT instance. If no such a user group is specified for the ITA policy, the ITA services of the user are not assigned to a new user group. The ITA services are processed in the same user group as non-ITA services.

For more information about NAT instances, see NAT configuration in Layer 3—IP Services Configuration Guide. You must configure a QoS policy to identify users' ITA services that belong to different user groups and remark the accounting levels of the ITA service traffic. For more information about QoS policies, see QoS configuration in ACL and QoS Configuration Guide.

If you do not specify a user group in the undo form this command, all user groups specified for the ITA policy will be removed.

A user group can be bound only to one NAT instance.

For the user group and NAT instance binding to take effect, bind a user group to an existing NAT instance.

Change to or removal of a user group specified for an ITA policy affects only users authorized with the ITA policy after the user group is modified or removed.

Examples

# Specify user group g1 for ITA policy ita1 and bind the user group to NAT instance cp1.

<Sysname> system-view

[Sysname] ita policy ita1

[Sysname-ita-policy-ita1] user-group name g1 nat-instance cp1

Related commands

display ita policy

user-group (system view)

EDSG service policy commands

accounting-method

Use accounting-method to specify accounting methods for the EDSG service.

Use undo accounting-method to restore the default.

Syntax

accounting-method { none | radius-scheme radius-scheme-name [ none ] }

undo accounting-method

Default

The device does not perform accounting on the EDSG service.

Views

EDSG service policy view

Predefined user roles

network-admin

Parameters

none: Does not perform accounting.

radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

Use this command to perform independent accounting on the EDSG service. The accounting methods can be different from those used for non-EDSG services.

You can specify one primary accounting method and a backup accounting method for the EDSG service. When the primary method is invalid, the device attempts to use the backup method. For example, the accounting-method radius-scheme radius-scheme-name none command specifies a primary RADIUS accounting method and a backup method (no accounting). The device first attempts to perform RADIUS accounting. If the RADIUS accounting method is invalid, the device does not perform accounting.

The remote accounting method is invalid in the following situations:

· The specified accounting scheme does not exist.

· Accounting packet sending fails.

· The device does not receive any accounting response packets from an accounting server.

Examples

# In EDSG service policy sp1, perform RADIUS accounting on the EDSG service based on RADIUS scheme rd.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1] accounting-method radius-scheme rd1

Related commands

display service policy

radius scheme

authentication-method

Use authentication-method to specify authentication methods for the EDSG service.

Use undo authentication-method to restore the default.

Syntax

authentication-method { none | radius-scheme radius-scheme-name [ none ] }

undo authentication-method

Default

The device does not perform authentication on the EDSG service.

Views

EDSG service policy view

Predefined user roles

network-admin

Parameters

none: Does not perform authentication.

radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters.

Usage guidelines

Use this command to perform independent authentication on the EDSG service. The authentication methods can be different from those used for non-EDSG services.

You can specify one primary authentication method and a backup authentication method for the EDSG service. When the primary method is invalid, the device attempts to use the backup method. For example, the authentication-method radius-scheme radius-scheme-name none command specifies a primary RADIUS authentication method and a backup method (no authentication). The device first attempts to perform RADIUS authentication. If the RADIUS authentication method is invalid, the device does not perform authentication.

The remote authentication method is invalid in the following situations:

· The specified authentication scheme does not exist.

· Authentication packet sending fails.

· The device does not receive any authentication response packets from an authentication server.

Examples

# In EDSG service policy sp1, perform RADIUS authentication on the EDSG service based on RADIUS scheme rd.

<Sysname> system-view

[Sysname] service-policy sp1

[Sysname-service-policy-sp1] authentication-method radius-scheme rd1

Related commands

display service policy

car

Use car to set CAR parameters for the EDSG service.

Use undo car to restore the default.

Syntax

car { inbound | outbound } cir cir-value [ pir pir-value ] [ cbs cbs-value ] [ ebs ebs-value ]

undo car { inbound | outbound }

Default

No CAR parameters are set for the EDSG service.

Views

EDSG service policy view

Predefined user roles

network-admin

Parameters

inbound: Performs CAR for upstream EDSG traffic.

outbound: Performs CAR for downstream EDSG traffic.

cir cir-value: Specifies the CIR, in kbps. The value range for the cir-value argument is 300 to 10000000.

pir pir-value: Specifies the PIR, in kbps. The value range for the pir-value argument is 300 to 10000000. If you specify the PIR, make sure the PIR is equal to or higher than the CIR. If you do not specify the PIR, the value of PIR is the same as the value of the CIR.

cbs cbs-value: Specifies the CBS, in bytes. The value range for the cbs-value argument is 4096 to 187500000. If you do not specify the CBS, the CBS of the EDSG traffic is not restricted.

ebs ebs-value: Specifies the EBS, in bytes. The value range for the ebs-value argument is 0 to 256000000. If you do not specify the EBS, the EBS of the EDSG traffic is not restricted.

Usage guidelines

Use this command to limit the rate of the EDSG traffic.

Examples

# For upstream EDSG traffic, set the CIR to 100 kbps and the PIR to 500 kbps. For downstream EDSG traffic, set the CIR to 200 kbps and the PIR to 2000 kbps.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1] car inbound cir 100 pir 500

[Sysname-service-policy-sp1] car outbound cir 200 pir 2000

Related commands

display service policy

Use display service policy to display EDSG service policy configuration.

Syntax

display service policy [ policy-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

policy-name: Specifies an EDSG service policy by its name, a case-insensitive string of 1 to 31 characters. The EDSG service policy name cannot contain a left bracket ([), right bracket (]), or semicolon (;). If you do not specify an EDSG service policy, this command displays the configuration for all EDSG service policies.

Examples

# Display the configuration for EDSG service policy sp1.

<Sysname> display service policy sp1

Service policy: sp1

Service ID : 4

Authentication method : RADIUS=Rd1, None

Accounting method : RADIUS=Rd1, None

Traffic statistics : Separate

Inbound CAR : CIR=222 kbps, PIR=2222 kpbs, CBS=5678 bytes, EBS=5678 bytes

Outbound CAR : CIR=222 kbps, PIR=2222 kpbs

Dual-stack rate limit mode : Merge

# Display the configuration for all EDSG service policies.

<Sysname> display service policy

Total 2 service policies.

Service policy: sp1

Service ID : 4

Authentication method : RADIUS=Rd1, None

Accounting method : RADIUS=Rd1, None

Traffic statistics : Separate

Inbound CAR : CIR=222 kbps, PIR=2222 kpbs, CBS=5678 bytes, EBS=5678 bytes

Outbound CAR : CIR=222 kbps, PIR=2222 kpbs

Dual-stack rate limit mode : Separate

Service rate-limit mode : Separate

Service policy: test

Service ID : 4

Authentication method : None

Accounting method : RADIUS=Rd2, None

Traffic statistics : Separate

Inbound CAR : CIR=100 kbps, PIR=640000 kpbs

Outbound CAR : CIR=5000 kbps, PIR=640000 kpbs

Dual-stack rate limit mode : Merge

Service rate-limit mode : Merge

Table 2 Command output

Field	Description
Total xx service policies	Total number of EDSG service policies.
Service ID	ID of the EDSG service policy.
Authentication method	Authentication methods for the EDSG service policy.
Accounting method	Accounting methods for the EDSG service policy.
Traffic statistics	Traffic statistics mode for the EDSG service: · Merge—The EDSG service traffic of a user is included in the overall traffic of the user. · Separate—The EDSG service traffic of a user is excluded from the overall traffic of the user.
Inbound CAR	CAR parameters for incoming traffic of the EDSG service: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. · EBS—Excess burst size, in bytes.
Outbound CAR	CAR parameters for outgoing traffic of the EDSG service: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. · EBS—Excess burst size, in bytes.
Dual-stack rate limit mode	Rate limit mode for IPv4 and IPv6 EDSG traffic: · Merge—Collectively limits the rate of IPv4 and IPv6 EDSG traffic. · Separate—Separately limits the rates of IPv4 and IPv6 EDSG traffic.
Service rate-limit mode	Rate limit mode for EDSG services: · Merge—In-band mode. In this mode, the device limits the overall rates of both EDSG traffic and non-EDSG traffic for a user within the available basic bandwidth of the user. The bandwidth for the EDSG traffic is preferentially guaranteed. · Separate—Out-band mode. In this mode, the device limits the rate of EDSG traffic within an independent bandwidth. The bandwidth for the non-EDSG traffic is not affected.

rate-limit dual-stack separate

Use rate-limit dual-stack separate to enable separate mode to separately limit the rates of IPv4 and IPv6 EDSG traffic.

Use undo rate-limit dual-stack separate to disable separate mode for collectively limiting the rate of IPv4 and IPv6 EDSG traffic.

Syntax

rate-limit dual-stack separate

undo rate-limit dual-stack separate

Default

Separate rate limit mode is disabled for IPv4 and IPv6 EDSG traffic. The device collectively limits the rate of IPv4 and IPv6 EDSG traffic.

Views

EDSG service policy view

Predefined user roles

network-admin

Usage guidelines

This feature takes effect only when the rate limit mode for EDSG services is set to in-band. To set the rate limit mode for EDSG services to in-band, use the service rate-limit mode merge command in ISP domain view or EDSG service policy view.

Examples

# In EDSG service policy sp1, enable separate mode to separately limit the rates of IPv4 and IPv6 EDSG traffic.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1] rate-limit dual-stack separate

Related commands

display service policy

service rate-limit mode (EDSG service policy view)

service rate-limit mode (ISP domain view)

service rate-limit mode (EDSG service policy view)

Use service rate-limit mode to set the rate limit mode for EDSG services.

Use undo service rate-limit mode to restore the default.

Syntax

service rate-limit mode { merge | separate }

undo service rate-limit mode

Default

The rate limit mode used in ISP domain view applies.

Views

EDSG service policy view

Predefined user roles

network-admin

Parameters

merge: Specifies the in-band mode. In this mode, the device limits the overall rates of both EDSG traffic and non-EDSG traffic for a user within the available basic bandwidth of the user. The bandwidth for the EDSG traffic is preferentially guaranteed.

separate: Specifies the out-band mode. In this mode, the device limits the rate of EDSG traffic within an independent bandwidth. The bandwidth for the non-EDSG traffic is not affected.

Usage guidelines

Assume that the available basic bandwidth for a user is 20 Mb and the available bandwidth for EDSG traffic of the user is 12 Mb.

· In in-band mode, the EDSG bandwidth is excluded from the basic bandwidth. The actual bandwidth for the user is 32 Mb, in which 12 Mb is exclusively used for EDSG services.

· In out-band mode, the EDSG bandwidth is included in the basic bandwidth. The actual bandwidth for the user is 20 Mb, in which 12 Mb is exclusively used for EDSG services, and the remaining 8 Mb is used for non-EDSG services.

The rate limit mode set in EDSG service policy view takes precedence over the rate limit mode set in ISP domain view.

Examples

# In EDSG service policy sp1, set the rate limit mode for EDSG services to out-band mode.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1] service rate-limit mode separate

Related commands

display service policy

service rate-limit mode (ISP domain view)

service policy

Use service policy to create an EDSG service policy and enter its view, or enter the view of an existing EDSG service policy.

Use undo service policy to delete an EDSG service policy.

Syntax

service policy policy-name

undo service policy policy-name

Default

No EDSG service policies exist.

Views

System view

Predefined user roles

network-admin

Parameters

policy-name: Specifies the name of an EDSG service policy, a case-insensitive string of 1 to 31 characters. The EDSG service policy name cannot contain a left bracket ([), right bracket (]), or semicolon (;).

Examples

# Create an EDSG service policy named sp1 and enter its view.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1]

Related commands

display service policy

service-id

Use service-id to set the ID for an EDSG service policy.

Use undo service-id to restore the default.

Syntax

service-id number

undo service-id

Default

No ID is set for an EDSG service policy.

Views

EDSG service policy view

Predefined user roles

network-admin

Parameters

number: Specifies the ID of the EDSG service policy, in the range of 1 to 8.

Usage guidelines

An EDSG service ID uniquely identifies an EDSG service.

You can set only one ID for an EDSG service policy. You can set the same ID for different EDSG service policies.

If the RADIUS server assigns multiple EDSG service policies that have different IDs, all the assigned EDSG service policies take effect. If the RADIUS server assigns multiple EDSG service policies that have the same ID, only the EDSG service policy that successfully triggers EDSG authentication takes effect. For all EDSG service policies assigned to a user to take effect, make sure the EDSG server assigns EDSG policies that have different IDs to the user.

Examples

# In EDSG service policy sp1, set the EDSG service ID to 3.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1] service-id 3

Related commands

display service policy

traffic statistics

Use traffic statistics to set the EDSG traffic statistics mode.

Use undo traffic statistics to restore the default.

Syntax

traffic statistics { merge | separate }

undo traffic statistics

Default

The separate mode is used for EDSG traffic statistics. The device excludes the amount of EDSG traffic from the overall traffic.

Views

EDSG service policy view

Predefined user roles

network-admin

Parameters

merge: Includes the amount of EDSG traffic into the overall traffic.

separate: Excludes the amount of EDSG traffic from the overall traffic.

Usage guidelines

The EDSG traffic statistics mode determines whether to include the EDSG traffic of a user into the overall traffic of the user or not.

The EDSG traffic statistics mode does not affect accounting for the EDSG service. An accounting packet for the EDSG traffic records the statistics only of the EDSG service traffic.

The EDSG rate limit mode does not affect the EDSG traffic statistics mode.

Examples

# In EDSG service policy sp1, set the EDSG traffic statistics mode to merge.

<Sysname> system-view

[Sysname] service policy sp1

[Sysname-service-policy-sp1] traffic statistics merge

Related commands

display service policy

Display commands for value-added-service user information

display value-added-service user

Use display value-added-service user to display statistics about value-added-service users.

Syntax

display value-added-service user [ edsg | ita | service | without-service ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

edsg: Specifies EDSG users (users that are assigned EDSG service policies).

ita: Specifies ITA users (users that are assigned ITA policies).

service: Specifies value-added-service users.

without-service: Specifies non-value-added-service users.

Usage guidelines

Value-added-service users refer to EDSG users and ITA users.

If you do not specify any parameters, this command displays statistics about all value-added-service users.

Examples

# Display statistics about all value-added-service users.

<Sysname> display value-added-service user

The used user IDs are:

0x37 0x38 0x39 0x40 0x81 0x82

0x83

Total users: 7

# Display statistics about ITA users.

<Sysname> display value-added-service user ita

The used user IDs with ITA are:

0x81 0x82 0x83

Total users: 3

# Display statistics about EDSG users.

<Sysname> display value-added-service user edsg

The used user IDs with EDSG are:

0x37 0x38 0x39 0x40

Total users: 4

# Display statistics about value-added-service users.

<Sysname> display value-added-service user service

The used user IDs with ITA are:

0x81 0x82 0x83

The used user IDs with EDSG are:

0x37 0x38 0x39 0x40

Total users: 7

# Display statistics about non-value-added-service users.

<Sysname> display value-added-service user without-service

The used user IDs without a service are:

0x89 0x90 0x91 0x92 0x93

Total users: 5

Table 3 Command output

Field	Description
The used user IDs are	List of IDs for value-added-service users.
The used user IDs with ITA are	List of IDs for ITA users.
The used user IDs with EDSG are	List of IDs for EDSG users .
The used user IDs without a service are	List of IDs for non-value-added-service users.
Total users	Total number of the displayed access users.

display value-added-service user { ip-address | ipv6-address }

Use display value-added-service user { ip-address | ipv6-address } to display information about a value-added-service user that uses a specific IP address.

Syntax

display value-added-service user { ip-address ipv4-address | ipv6-address ipv6-address } [ vpn-instance vpn-instance-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ip-address ipv4-address: Specifies a value-added-service user by its IPv4 address.

ipv6-address ipv6-address: Specifies a value-added-service user by its IPv6 address.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the user belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the user is on the public network, do not specify this option.

verbose: Displays detailed information about the user. If you do not specify this keyword, the command displays only brief information about the user.

Usage guidelines

Value-added-service users refer to EDSG users and ITA users.

Examples

# Display brief information about the value-added-service user at 1.1.1.1. (Applicable to ITA.)

<Sysname> display value-added-service user ip-address 1.1.1.1

Basic:

User ID : 0x1

User name : user1

Service type : ITA

ITA:

Accounting merge : Disabled

Traffic quota-out action : Online

Level-1 State : Online

# Display detailed information about the value-added-service user at 1.1.1.1. (Applicable to ITA.)

<Sysname> display value-added-service user ip-address 1.1.1.1 verbose

Basic:

User ID : 0x1

User name : user1

IP address : 1.1.1.1

IPv6 address : -

Service type : ITA

ITA:

Policy name : ita

Accounting merge : Disabled

Traffic quota-out action : Online

Level-1 State : Online(active)

Inbound CAR : CIR 1000kbps PIR 2000kbps

CBS -

Outbound CAR : CIR 1000kbps PIR 2000kbps

CBS -

Uplink packets/bytes : 4/392

Downlink packets/bytes : 4/392

IPv6 uplink packets/bytes : 0/0

IPv6 downlink packets/bytes : 0/0

Accounting start time : 2019-01-24 18:24:10

Online time (hh:mm:ss) : 0:00:12

Accounting state : Accounting

Session timeout : Unlimited

Time remained : Unlimited

Realtime accounting interval: 720 seconds

Traffic separate : Disabled

Traffic quota : Unlimited

Traffic remained : Unlimited

# Display brief information about the value-added-service user at 1.1.1.1. (Applicable to EDSG.)

<Sysname> display value-added-service user ip-address 1.1.1.1

Basic:

User ID : 0x2

User name : user1

Service type : EDSG

Service policy:

Service ID : 1

Policy name : sp1

Policy username : edsg

State : Online

Traffic statistics : Separate

Service rate-limit mode : Separate

Dual-stack rate limit mode : Merge

Traffic quota-out action : Online

# Display detailed information about the value-added-service user at 1.1.1.1. (Applicable to EDSG.)

<Sysname> display value-added-service user ip-address 1.1.1.1 verbose

Basic:

User ID : 0x1

User name : user1

IP address : 1.1.1.1

IPv6 address : -

Service type : EDSG

Service policy:

Service ID : 1

Policy name : sp1

Policy username : edsg

State : Online(active)

Traffic statistics : Separate

Service rate-limit mode : Separate

Dual-stack rate limit mode : Merge

Traffic quota-out action : Online

Inbound CAR : CIR 1000kbps PIR 2000kbps

CBS -

Outbound CAR : CIR 1000kbps PIR 2000kbps

CBS -

Uplink packets/bytes : 4/392

Downlink packets/bytes : 4/392

IPv6 uplink packets/bytes : 0/0

IPv6 downlink packets/bytes : 0/0

Accounting start time : 2019-01-24 18:24:10

Online time (hh:mm:ss) : 0:00:12

Accounting state : Accounting

Session timeout : Unlimited

Time remained : Unlimited

Realtime accounting interval : 720 seconds

Traffic quota : Unlimited

Traffic remained : Unlimited

Table 4 Command output

Field	Description
Basic	Basic information of the value-added-service user.
IP address	IPv4 address of the value-added-service user. If the user does not have an IPv4 address, this field displays a hyphen (-).
IPv6 address	IPv6 address of the value-added-service user. If the user does not have an IPv6 address, this field displays a hyphen (-).
Service type	Type of the value-added service for the user. · ITA. · EDSG.
ITA	ITA service information.
Policy name	Name of the value-added-service policy.
Accounting merge	Status of the ITA accounting merge feature: · Enabled—The accounting merge feature is enabled. The device merges the ITA traffic of all accounting rates in the ITA policy, and applies the lowest rate to the merged traffic. · Disabled—The accounting merge feature is disabled. The device sends separate traffic statistics for each accounting rate to the server.
Traffic quota-out action	Access control for users that have used up their value-added-service data quotas: · Online—Users can access the authorized IP subnets after their data quotas are used up. · Offline—Users cannot access the authorized IP subnets after their data quotas are used up. · Redirect—The Web visit requests of users are redirected after their data quotas are used up.
Level-n	ITA traffic accounting level, in the range of 1 to 8.
State	State of the value-added-service user: · Init—The user is being initialized. · Auth—The user is being authenticated. · StartAccounting—Accounting is starting for the user. · Online—The user is online. · GoingOffline—The user is going offline. · StopAccounting—Accounting is being stopped for the user. · Offline—The user has gone offline. This field also displays the activity state of the user in brackets. Available options: · active—The user is active. · inactive—The user is inactive.
Offline reason	Reason that the value-added-service user went offline: · Authentication failed. · Accounting failed. · Accounting update failed. · Failed to send accounting packets. · Traffic quota exhausted. · Session timed out. · Cut by the AAA server. · Logged out by the RADIUS proxy. This field is displayed only if the user has gone offline.
Inbound CAR	CAR parameters for incoming traffic: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. If a CAR parameter is not assigned to the user, the corresponding field displays a hyphen (-).
Outbound CAR	CAR parameters for outgoing traffic: · CIR—Committed information rate, in kbps. · PIR—Peak information rate, in kbps. · CBS—Committed burst size, in bytes. If a CAR parameter is not assigned to the user, the corresponding field displays a hyphen (-).
Uplink packets/bytes	If IPv4 traffic and IPv6 traffic are counted collectively, this field displays the total number of IPv4 and IPv6 uplink value-added-service packets and bytes. If IPv4 traffic and IPv6 traffic are counted separately, this field displays the total number of IPv4 uplink packets and bytes.
Downlink packets/bytes	If IPv4 traffic and IPv6 traffic are counted collectively, this field displays the total number of IPv4 and IPv6 downlink value-added-service packets and bytes. If IPv4 traffic and IPv6 traffic are counted separately, this field displays the total number of IPv4 downlink packets and bytes.
IPv6 uplink packets/bytes	Total number of IPv6 uplink value-added-service packets and bytes.
IPv6 downlink packets/bytes	Total number of IPv6 downlink value-added-service packets and bytes.
Accounting start time	Time when the device started accounting for the user. This field displays a hyphen (-) if accounting for the user has not started.
Online time (hh:mm:ss)	User online duration.
Accounting state	Accounting state of the user: · Accounting—Accounting is being performed for the user. · Stop—Accounting is stopped for the user.
Session timeout	Maximum session timeout time assigned to the user, in seconds. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quotas. · The user is not assigned a session timeout time.
Time remained	The remaining session timeout time of the user, in seconds. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quotas. · The user is not assigned a session timeout time.
Realtime accounting interval	Real-time accounting interval, in seconds. If no real-time accounting interval is assigned, this field displays a hyphen (-).
Traffic separate	Whether the amount of ITA traffic is excluded from the overall traffic statistics sent to the accounting server: · Enabled—The amount of specific-level ITA traffic is excluded from the overall traffic statistics. · Disabled—ITA traffic is included in the overall traffic statistics.
Traffic quota	Traffic quota, in bytes. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quota. · The quota of the user is not limited.
Traffic remained	The remaining data of the user, in bytes. This field displays Unlimited in the following situations: · The device allows the user to stay online after it uses up its traffic quota. · The quota of the user is not limited.
Service policy	EDSG service policy information.
Service ID	EDSG service ID.
Policy username	Username assigned by EDSG.
Traffic statistics	Traffic statistics mode for the EDSG service: · Merge—The EDSG service traffic of a user is included in the overall traffic of the user. · Separate—The EDSG service traffic of a user is excluded from the overall traffic of the user.
Service rate-limit mode	Rate limit mode for EDSG services: · Merge—In-band mode. In this mode, the device limits the overall rates of both EDSG traffic and non-EDSG traffic for a user within the available basic bandwidth of the user. The bandwidth for the EDSG traffic is preferentially guaranteed. · Separate—Out-band mode. In this mode, the device limits the rate of EDSG traffic within an independent bandwidth. The bandwidth for the non-EDSG traffic is not affected.
Dual-stack rate limit mode	Rate limit mode for IPv4 and IPv6 EDSG traffic: · Merge—Collectively limits the rate of IPv4 and IPv6 EDSG traffic. · Separate—Separately limits the rates of IPv4 and IPv6 EDSG traffic.

display value-added-service user user-id

Use display value-added-service user user-id to display information about a value-added-service user that uses a specific user ID.

Syntax

display value-added-service user user-id user-id [ edsg [ service-id service-id ] | ita-level level ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

user-id: Specifies the ID of the user in hexadecimal format. The value range is 1 to FFFF4240.

edsg: Specifies EDSG users.

service-id service-id: Specifies an EDSG service policy by its ID, in the range of 1 to 8. If you do not specify a service ID with the edsg keyword, this command displays information about all users that are assigned any EDSG service policies.

ita-level level: Specifies an ITA accounting level, in the range of 1 to 8.

Usage guidelines

Value-added-service users refer to access users that are assigned EDSG service policies or ITA policies.

If you do not specify any keyword, this command displays only brief information about the specified user.

Examples

# Display brief information about the user with ID 1.

<Sysname> display value-added-service user user-id 1

Basic:

User ID : 0x1

User name : user1

Service type : ITA

ITA:

Accounting merge : Disabled

Traffic quota-out action : Online

Level-1 State : Online

For more information about the field descriptions, see Table 4.

display value-added-service user username

Use display value-added-service user username to display information about a value-added-service user that uses a specific username.

Syntax

display value-added-service user username username [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

username: Specifies the username, a case-sensitive string of 1 to 253 characters.

verbose: Displays detailed information about the user. If you do not specify this keyword, the command displays brief information about the user.

Usage guidelines

Value-added-service users refer to access users that are assigned EDSG service policies or ITA policies.

Examples

# Display brief information about value-added-service user user1.

<Sysname> display value-added-service user username user1

Basic:

User ID : 0x1

User name : user1

Service type : ITA

ITA:

Accounting merge : Disabled

Traffic quota-out action : Online

Level-1 State : Online

For more information about the field descriptions, see Table 4.

17-BRAS Services Command Reference

Value-added services commands

ITA policy commands

user-group (ITA policy view)

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

Company Information

News & Events

Contact Us