Got it
Huawei Enterprise Support Community
Community Forums Routing & Switching
AR6280 Huawei Radius Attr...

AR6280 Huawei Radius Attributes | Framed-Route

Created: Mar 1, 2021 06:58:54Latest reply: Mar 23, 2021 09:19:55 726 21 0 0 0
  Rewarded HiCoins： 0 (problem resolved)
View the author 1#

What are the radius attributes value on huawei for adding ip routes, qos policies and vrf like in cisco we used "Cisco-AVPair == ip:route=1.1.1.1/32 10.10.10.11". Appreciate your support in this matter. Thank you.

Like (0) Dislike (0) Favorite(0) Share Report
Previous: Rate of packets to cpu exceeded the CPCAR limit on the MPU
Next: Simulate S6730-H Switch on ENSP
Featured Answers

Recommended answer

(0) (0)
chenhui
Admin Created Mar 3, 2021 07:17:21

Hi hashaam,
From the documentation, the Framed-Route only appears in the Access-Accept packet.

Framed-Route


View more
  • x
  • convention：

hashaam
hashaam Created Mar 3, 2021 07:43:39 (0) (0)
Dear in cisco we have Cisco-AVPair attribute to configure routes. Does Huawei any attribute to configure route.

Example:
Cisco-AVPair == ip:route=80.95.215.136 255.255.255.248 x.x.x.x tag 111
Framed-IP-Address == x.x.x.x  
chenhui
chenhui Reply hashaam  Created Mar 3, 2021 09:31:43 (0) (0)
As far as I know, it's supported to do that, but I'm not sure if Framed-Route only accepted in the Access-Accept packet.
Please be patient, we'll test that and feedback to you ASAP.  
hashaam
hashaam Reply chenhui  Created Mar 7, 2021 05:48:04 (0) (0)
Dear any update.  
chenhui
chenhui Reply hashaam  Created Mar 7, 2021 06:36:13 (0) (0)
Is it possible sent the Framed-Route attribute through the authentication packets?  
hashaam
hashaam Reply chenhui  Created Mar 9, 2021 10:44:18 (0) (0)
From our radius it is going through authentication packets.  
chenhui
chenhui Reply hashaam  Created Mar 10, 2021 09:05:24 (0) (0)
So, the Framed-Route is sent out from the RADIUS server correctly, but doesn't affect the terminal?  
hashaam
hashaam Reply chenhui  Created Mar 10, 2021 09:28:56 (0) (0)
Exactly.. we tried the same attribute in cisco and it worked perfectly.  
View more replies
All Answers
(0) (0)
2#
DDSN
DDSN Admin Created Mar 1, 2021 07:00:20

Hi hashaam,
Please wait patiently. Our engineers are looking for answers to your questions.
View more
  • x
  • convention：

hashaam
hashaam Created Mar 1, 2021 11:50:19 (0) (0)
Dear any update  
(0) (0)
3#
DDSN
DDSN Admin Created Mar 1, 2021 11:57:25

Hi hashaam,
After consulting experts, it is confirmed that the AR6280 does not support adding IP addresses and VRFs through RADIUS attributes. The attribute name of the QoS policy to be added is HW-Qos-Data.

1

You can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100087043&id=EN-US_CONCEPT_0176366146&lang=en

I hope it helps!

View more
  • x
  • convention：

hashaam
hashaam Created Mar 1, 2021 12:04:38 (0) (0)
Dear Framed-IP-Address command is working. We are facing issue with Framed-Route command. Appreciate if you can check and update. TIA  
DDSN
DDSN Reply hashaam  Created Mar 1, 2021 12:25:41 (0) (0)
What's your problem?  
hashaam
hashaam Reply DDSN  Created Mar 1, 2021 13:30:48 (0) (0)
Dear when we use the Framed-Route == 1.1.1.1/32 10.10.10.11 command. We cannot see the routes even the user is connected. We need to know the huawei radius attribute for adding ip route.

Like in cisco we used the command Cisco-AVPair == ip:route=1.1.1.1 255.225.255.255 10.10.10.11, we can see the routes when user is connected. Kindly assist.  
(0) (0)
4#
DDSN
DDSN Admin Created Mar 2, 2021 09:51:10

Hi hashaam,
Please try to use the display radius-attribute command to display RADIUS attributes supported by the device.
In addition, how does a user access the network? PPPoE? IPOE? Or something?
What is the RADIUS server?
View more
  • x
  • convention：

hashaam
hashaam Created Mar 2, 2021 10:52:14 (0) (0)
Dear DDSN, I can see the attribute "Framed-Route" when use the display radius-attribute. User access the network through PPPoE. I have a billing portal, we configure the user in billing portal with Framed-IP-Address == X.X.X.X and Framed-Route == 1.1.1.1/32 X.X.X.X . In BRAS user is connected with the IP address but routes are not showing. We are using open source RADIUS server

Do I need to configure any attribute for routes in radius template.  
user_3915171
user_3915171 Created Mar 2, 2021 17:51:46 (0) (0)
 
(0) (0)
5#
chenhui
chenhui Admin Created Mar 3, 2021 07:17:21

Hi hashaam,
From the documentation, the Framed-Route only appears in the Access-Accept packet.

Framed-Route


View more
  • x
  • convention：

hashaam
hashaam Created Mar 3, 2021 07:43:39 (0) (0)
Dear in cisco we have Cisco-AVPair attribute to configure routes. Does Huawei any attribute to configure route.

Example:
Cisco-AVPair == ip:route=80.95.215.136 255.255.255.248 x.x.x.x tag 111
Framed-IP-Address == x.x.x.x  
chenhui
chenhui Reply hashaam  Created Mar 3, 2021 09:31:43 (0) (0)
As far as I know, it's supported to do that, but I'm not sure if Framed-Route only accepted in the Access-Accept packet.
Please be patient, we'll test that and feedback to you ASAP.  
hashaam
hashaam Reply chenhui  Created Mar 7, 2021 05:48:04 (0) (0)
Dear any update.  
chenhui
chenhui Reply hashaam  Created Mar 7, 2021 06:36:13 (0) (0)
Is it possible sent the Framed-Route attribute through the authentication packets?  
hashaam
hashaam Reply chenhui  Created Mar 9, 2021 10:44:18 (0) (0)
From our radius it is going through authentication packets.  
chenhui
chenhui Reply hashaam  Created Mar 10, 2021 09:05:24 (0) (0)
So, the Framed-Route is sent out from the RADIUS server correctly, but doesn't affect the terminal?  
hashaam
hashaam Reply chenhui  Created Mar 10, 2021 09:28:56 (0) (0)
Exactly.. we tried the same attribute in cisco and it worked perfectly.  
View more replies
(0) (0)
6#
chenhui
chenhui Admin Created Mar 11, 2021 01:17:44

Hi hashaam,
I got that.
Please help to confirm the information below, we'll try to rebuild the scenario in the lab.
1. Firmware version of your AR6280.
2. Is the Framed-Route value the same as the distributed gateway address?
3. What is the terminal type? A Windows PC?
4. Besides the Framed-IP-Address and Framed-Route, is there any other attribute distributed by the RADIUS server?
5. I draw a simple topology below, please help to rectify the impropers.

framed-route


View more
  • x
  • convention：

hashaam
hashaam Created Mar 11, 2021 11:40:35 (0) (0)
PFB
1. AR6280 version is V300R019C00SPC300
2. Can you please share what is meant by distributed gateway address?
3. Windows PC
4. Yes, other attributes are vrf, tag, qos policy. But none of these attributes are working in Huawei AR 6280 except Framed-IP-Address.
5. We are not trying to manipulate the routing info at the terminal, what we want to pass the routing information from the radius server to the BRAS routing table and then BRAS can reflect this information based on the specific clie 
(1) (0)
7#
hashaam
hashaam Created Mar 18, 2021 13:00:40

Any update..???
View more
  • x
  • convention：
(0) (0)
8#
chenhui
chenhui Admin Created Mar 23, 2021 09:19:55

Posted by hashaam at 2021-03-18 13:00 Any update..???
Hi,
Sorry for the late.
Unfortunately, we didn't find an available router by now. Can you please share us your partial configuration?
View more
  • x
  • convention：
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.