Step Description Command Keys
6 Set the password for authentication on
remote DAS server.
esr(config-das-server)# key ascii-
text
{<TEXT>|encrypted <ENCRYPTED-
TEXT> }
<TEXT> – string of [8..16] ASCII
characters; <ENCRYPTED-
TEXT> – encrypted password,
[8..16] bytes size, set by the
string of [16..32] characters.
7 Create AAA DAS profile. esr(config)# aaa das-profile
<NAME>
<NAME> – DAS profile name,
set by the string of up to 31
characters.
8 Specify DAS server in DAs profile. esr(config-aaa-das-profile)# das-
server <NAME>
<NAME> – DAS server name,
set by the string of up to 31
characters.
9 Configure BRAS. esr(config)# subscriber-control
[ vrf <VRF> ]
<VRF> – VRF instance name,
set by the string of up to 31
characters, within which the
user control will operate.
10 Select the profile of dynamic
authorization servers to which CoS
queries from PCRF will be sent.
esr(config-subscriber-control)#
aaa das-profile <NAME>
<NAME> – DAS profile name,
set by the string of up to 31
characters.
11 Select RADIUS server profile to obtain
the user service parameters.
esr(config-subscriber-control)#
aaa services-radius-profile
<NAME>
<NAME> – RADIUS server
profile name, set by the string
of up to 31 characters.
12 Select RADIUS server profile to obtain
the user session parameters.
esr(config-subscriber-control)#
aaa sessions-radius-profile
<NAME>
<NAME> – RADIUS server
profile name, set by the string
of up to 31 characters.
13 Set router IP address that will be used
as source IP address in transmitted
RADIUS packets.
esr(config-subscriber-control)#
nas-ip-address <ADDR>
<ADDR> – source IP address,
defined as AAA.BBB.CCC.DDD
where each part takes values of
[0..255];
14 Enable session authentication by MAC
address (optionally).
esr(config-subscriber-control)#
session mac-authentication
15 Organize transparent filter-based
transmission of administrative traffic
(DHCP, DNS and etc.).
esr(config-subscriber-control)#
bypass-traffic-a с l <NAME>
<NAME> – name of the ACL
being bound, set by the string
of up to 31 characters.
16 Switch to the default service
configuration mode.
esr(config-subscriber-control)#
default-service