ZXR102900ESeriesCongurationGuide
Ipsourceguardisconfiguredonthefollowingport(s):
49
4.27VBASConguration
VBASOverview
VBASisnotphysicalequipmentbutaprotocolstandard,whichisdevelopedby
GuangdongInstituteofChinaTelecom.VBASistosolvetheproblemofwide-band
useridentier.WhenBASgetsuseridentierbyinquiringcorrespondingrelationship
betweenMACofusersdialingtotheswitchandport,thensendsusername,password
andidentierinformationtoRADIUS,itcanjudgethepositionoftheuser.
Layer2communicationmodeisimplementedbetweenBASandswitches,thatis,
informationqueryandresponsedatapacketsofVBASareencapsulatedintoEthernet
dataframesoflayer-2directly,anduseprotocolnumber0x8200toidentify.
Caution!
OnlytrustportscanreceiveVBASpacketsandVBASresponsepacketsonlycanbesent
fromtrustports.
PortconnectingtousernetworkiscalledcascadeportandportconnectingtoBASserver
iscalledtrustport.TypicalnetworkofVBASisshowninFigure4-30.
Figure4-30VBASTypicalNetwork
ConguringVBAS
TheVBAScongurationincludesthefollowingcommands:
4-90
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential