1 测试环境1.1 设备信息上海贝尔7750SR 6.1R6凌亚科技RADIUS Server V1.3 1.2 链路信息2 测试案例2.1 用户正常拨号测试步骤：1. 用户通过测试机器PPPOE拨号。
2．BAS向RADIUS Server发起认证请求，RADIUS Server响应认证请求报文。
3．BAS向用户授权，并向RADIUS Server 发起计费开始报文。
（1）Local-DCHP配置//配置router Interfacerouterinterface "dhcp"address 220.249.143.206/32loopbacklocal-dhcp-server "server-1"//配置dhcp 地址池routerdhcplocal-dhcp-server "server-1" createuse-gi-addresspool "pool-2" createoptionsdns-server 58.20.127.170exitsubnet 10.240.5.0/24 createaddress-range 10.240.5.10 10.240.5.100 exitexitno shutdownexitexitexit（2）Radius配置//配置router Interfaceinterface "to-radius"address 192.168.0.34/30port 1/2/2exit//配置认证模板subscriber-mgmtauthentication-policy "knock-door" createdescription "RADIUS policy"//配置radius server属性，IP及Keyradius-authentication-serversource-address 192.168.0.34server 1 address 172.16.1.2 secret "/ND.T9I/ID3lmtEMVxSCuE" hash2exitexitexit//配置PPPoE报文属性，报文公共及扩展属性user-name-format circuit-idaccept-authorization-changepppoe-access-method pap-chapinclude-radius-attributecircuit-idremote-idnas-port-idnas-identifierpppoe-service-namemac-addressexitexit报文属性可参考数据字典：//配置account server属性，IP及Keyradius-accounting-policy "GiveMeMoney"radius-accounting-serversource-address 192.168.0.34server 1 address 172.16.1.2 secret "/ND.T9I/ID3lmtEMVxSCuE" hash2exitexit//配置account server属性，报文公共及扩展属性radius-accounting-policy "GiveMeMoney" createupdate-interval 10include-radius-attributeframed-ip-addrframed-ip-netmasksubscriber-idcircuit-idremote-idnas-port-idnas-identifiersub-profilesla-profileexitsession-id-format numberuse-std-acct-attributes（3）Subscriber-mgmt用户模板配置//配置sub-profile模板，配合用户QoS属性下发sub-profile "ipd" createingress-scheduler-policy "upstream"exitegress-scheduler-policy "downstream"exitradius-accounting-policy "GiveMeMoney"sla-profile-mapuse-direct-map-as-defaultentry key "default" sla-profile "default"exitexit//配置sla-profile模板，配合sap Qos拥塞管理 sla-profile "ipd" createingressqos 10 multipoint-sharedexitexitegressqos 20exitexitexit//配置sub-ident-policy模板，配合用户QoS属性下发sub-ident-policy "sub_ident_all" createsub-profile-mapuse-direct-map-as-defaultexitsla-profile-mapuse-direct-map-as-defaultexitexit（4）QoS模板配置//sub-profile/sla-profile模板，关联的qos模板qos//配置QoS下行预留带宽scheduler-policy "downstream" create tier 1scheduler "downstream" create rate 100000 cir 100000exitexitexit//配置QoS上行预留带宽scheduler-policy "upstream" createtier 1scheduler "upstream" createrate 512 cir 512exitexitexit//配置ingress Qos策略sap-ingress 10 createqueue 1 createparent "upstream"rate 500 cir 500exitqueue 11 multipoint createrate 10 cir 10exitexit//配置egress Qos策略sap-egress 20 createqueue 1 createparent "downstream"exitexitexit（5）PPPoE模板配置//配置IES接口及IPies 100 customer 100 createsubscriber-interface "test" createdescription "Routed CO"address 10.240.5.1/24//配置group-interface接口group-interface "pppoe-radius" create arp-populate//指定本地DHCP及下发属性dhcpserver 220.249.143.206trustedlease-populate 32767gi-address 10.240.5.1client-applications dhcp pppoeno shutdownexit//指定关联的认证属性authentication-policy "knock-door"//用户下线检测host-connectivity-verify interval 1 action remove//PPPoE client接口配置：VLAN 100 sap 1/1/8:100 createsub-sla-mgmt//关联subscriber-mgt属性 def-sub-id string "test"def-sub-profile "ipd"def-sla-profile "ipd"sub-ident-policy"sub_ident_all"multi-sub-sap 200no shutdownexitexit//配置pppoe属性pppoesession-limit 32767sap-session-limit 32500no shutdownexitexit2.2 用户正常断线测试步骤：用户通过PPPoE拨号连接成功后，正常断开拨号连接，BAS向RADIUS发起计费结束报文，RADIUS计费并生成上网记录。
（1）配置Debug//配置debug 观察认证及计费消息show debugdebugserviceid 100pppoepacketmode dropped-onlydetail-level mediumdiscoverypppdhcp-clientexitexitexitexitradius detailexit2.3 用户异常断线流程测试步骤：1. 用户通过测试机器登录后等待10秒后直接断开网线。
2．BAS向RADIUS Server发起计费结束报文。
3．RADIUS Server计费并生成上网记录。
（1）配置pppoe-policy//配置pppoe-policy，设置检测时长pppoe-policy "test" createkeepalive 10 hold-up-multiplier 3exit//在pppoe属性中应用pppoepppoe-policy "test"（2）配置后，异常掉线用户在20内可重新拨号上网。
2.4 会话超时断线流程测试步骤：1. 用户通过测试机器PPPOE拨号成功。
2．180秒后BAS迫使用户下线，并向RADIUS Server发送计费结束报文，RADIUS Server计费并生成上网记录。
（1）由Radius下发属性控制。
radius下发session timeout 属性2.5 计费开始、结束流程测试步骤：1. BAS关闭或手工发起Accounting-Off报文,RADIUS Server收到计费结束报文，下线所有在线用户，并生成上网记录。