H3C S7500 Series Operating instructions

Operation Manual – Traffic Accounting

H3C S7500 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 Traffic Accounting Configuration..............................................................................1-1

1.1 Introduction to Traffic Accounting......................................................................................1-1

1.1.1 Related Concepts of Traffic Accounting..................................................................1-1

1.1.2 Implementation Process of Traffic Accounting........................................................ 1-2

1.2 Configuring Traffic Accounting...........................................................................................1-2

1.2.1 Prerequisites ...........................................................................................................1-2

1.2.2 Configuring Traffic Accounting................................................................................1-3

1.3 Displaying Traffic Accounting ............................................................................................1-4

1.4 Traffic Accounting Configuration Example ........................................................................ 1-4

Operation Manual – Traffic Accounting

H3C S7500 Series Ethernet Switches Chapter 1

Traffic Accounting Configuration

1-1

Chapter 1 Traffic Accounting Configuration

 Note:

The traffic accounting card mentioned in this chapter refers to LS81VSNP line

processing unit (LPU).

When configuring traffic accounting, go to these sections for information you are

interested in:

z Introduction to Traffic Accounting

z Configuring Traffic Accounting

z Displaying Traffic Accounting

z Traffic Accounting Configuration Example

1.1 Introduction to Traffic Accounting

Some accounting servers, such as CAMS, can perform time-based or traffic-based

accounting for successfully authenticated 802.1x users. Traffic accounting enables the

switch where users are authenticated to measure the traffic generated when the users

are online and send traffic measurement results to the accounting server to charge the

online users.

1.1.1 Related Concepts of Traffic Accounting

z Traffic group: a mechanism used to classify destination networks by accounting

attributes. The accounting attributes of a traffic group include whether to charge

and the charge rate.

z Traffic group accounting address: a network IP address configured for a traffic

group. You can configure some network addresses for a traffic group, and then

traffic generated for accessing these addresses will be measured.

z Traffic collection card: an interface card configured to perform traffic collection. A

traffic collection card sends all the traffic passing through it to the traffic accounting

card.

z Traffic accounting card: the card that performs traffic analysis, calculation and

statistics.

z Traffic collection: the process of sending the traffic passing through the traffic

collection card to the traffic accounting card.

Operation Manual – Traffic Accounting

H3C S7500 Series Ethernet Switches Chapter 1

Traffic Accounting Configuration

1-2

z Traffic accounting: the process in which the traffic accounting card analyzes and

calculates the traffic obtained from the traffic collection card. Traffic accounting is

performed on the basis of the users’ online IP addresses and the traffic groups to

which the accessed networks belong.

1.1.2 Implementation Process of Traffic Accounting

Figure 1-1 shows the implementation process of traffic accounting on the H3C S7500

Series Switches.

Figure 1-1 Implementation process of traffic accounting

The following section details the process of traffic accounting:

1) After a user passes the 802.1x authentication, the user logs in successfully.

2) The authenticator device obtains the online IP address of the user and starts to

measure the traffic of the user.

3) Traffic is generated while the user accesses networks.

4) The traffic collection card sends the user's online traffic to the traffic accounting

card.

5) The traffic accounting card performs traffic statistics based on traffic groups, and

generates traffic statistics, which reflect the accumulative traffic generated since

the user gets online.

6) The traffic accounting card periodically sends traffic statistics to the accounting

server.

7) When the user goes offline, the authenticator device sends the total traffic to the

accounting server.

8) The accounting process is over for this user.

1.2 Configuring Traffic Accounting

1.2.1 Prerequisites

z A service card that serves as the traffic accounting card is plugged into the switch.

z 802.1x is enabled on the switch.

z A CAMS server is properly configured.

Operation Manual – Traffic Accounting

H3C S7500 Series Ethernet Switches Chapter 1

Traffic Accounting Configuration

1-3

 Note:

This document describes the configuration of traffic accounting. The configuration of

802.1x and CAMS server is not covered here.

1.2.2 Configuring Traffic Accounting

The following table describes the configuration tasks for traffic accounting.

Table 1-1 Configure the traffic accounting function

To do... Use the command... Remarks

Enter system view

system-view

—

Configure the traffic

accounting slot

traffic-accounting

accounting-slot

slot-num

Required

z The specified traffic

accounting slot must be the

slot where the traffic

accounting card resides.

z You will enter traffic

accounting view directly after

the configuration succeeds.

z By default, no traffic

accounting slot is specified.

Specify a traffic

collection card

traffic-slot slot-num

Required

Enable the traffic

accounting function

accounting enable

Required

By default, this function is

disabled on the traffic accounting

card.

Table 1-2 Configure traffic group

Configuration Use the command... Remarks

Enter system view

system-view

—

Configure a traffic group

traffic-accounting

traffic-group

group-name

Required

Enter traffic group view

automatically after

successful configuration.

Configure a network

address for the traffic

group

network ip-address

{ mask | mask-len }

Required

Use this command in

traffic group view.

Operation Manual – Traffic Accounting

H3C S7500 Series Ethernet Switches Chapter 1

Traffic Accounting Configuration

1-4

Table 1-3 Configure a traffic group for a domain

Configuration Use the command... Remarks

Enter system view

system-view

—

Enter ISP domain view domain domain-name —

Set the accounting mode to

traffic accounting

accounting-mode traffic

Required

Configure the domain to

use a specified traffic group

traffic-group group-name rate

idnum

Required

 Note:

z The interface card that connects an external network (the Internet) should be

configured as a traffic collection card.

z Currently, only single rate is supported, and multi-rate is not supported.

1.3 Displaying Traffic Accounting

After the above configuration, you can execute the display command in any view to

display the operation status of traffic accounting and verify your configuration.

Table 1-4 Display traffic accounting

To do... Use the command... Remarks

Display traffic group

information

display traffic-accounting

traffic-group [ group-name ]

Display traffic accounting

configuration

display traffic-accounting

accounting-slot [ slot-num ]

Display traffic statistics of

one or all online users

display traffic-accounting

statistics [ ip-address ]

You can execute

the display

command in any

view.

1.4 Traffic Accounting Configuration Example

I. Network requirements

z A user running a 802.1x authentication client accesses the Internet through a

switch. The user can access external networks after passing the authentication.

The accounting mode is traffic accounting. When the user accesses the networks

11.127.1.0/24 and 12.127.1.0/24, the accounting server CAMS charges the user

for the user's online traffic. When the user accesses other network segments,

however, the user is not charged.

Operation Manual – Traffic Accounting

H3C S7500 Series Ethernet Switches Chapter 1

Traffic Accounting Configuration

1-5

II. Network diagram

Internet

User

CAMS

Switch

Figure 1-2 Network diagram for traffic accountin

III. Configuration procedure

# Configure a traffic accounting group named somegroup.

<H3C> system-view

[H3C] traffic-accounting traffic-group somegroup

# Configure the following two destination network IP addresses for the traffic

accounting group.

[H3C-traffic-group-somegroup] network 11.127.1.0 24

[H3C-traffic-group-somegroup] network 12.127.1.0 24

# Enter the user's domain view (suppose the user belongs to domain aaa), set the

accounting mode to traffic accounting and configure the domain to use the traffic group.

[H3C] domain aaa

[H3C-isp-aaa] accounting-mode traffic

[H3C-isp-aaa] traffic-group somegroup rate 1

# Configure a traffic accounting card, specify a traffic collection card, and enable the

traffic accounting function.

[H3C] traffic-accounting accounting-slot 2

[H3C-accounting-slot-2] traffic-slot 3

[H3C-accounting-slot-2] accounting enable

H3C S7500 Series Operating instructions

Related papers

Other documents