H3C S7500 Series User manual

Operation Manual – Traffic Accounting
H3C S7500 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Traffic Accounting Configuration..............................................................................1-1
1.1 Introduction to Traffic Accounting......................................................................................1-1
1.1.1 Related Concepts of Traffic Accounting..................................................................1-1
1.1.2 Implementation Process of Traffic Accounting........................................................ 1-2
1.2 Configuring Traffic Accounting...........................................................................................1-2
1.2.1 Prerequisites ...........................................................................................................1-2
1.2.2 Configuring Traffic Accounting................................................................................1-3
1.3 Displaying Traffic Accounting ............................................................................................1-4
1.4 Traffic Accounting Configuration Example ........................................................................ 1-4

Operation Manual – Traffic Accounting
H3C S7500 Series Ethernet Switches Chapter 1 Traffic Accounting Configuration
1-1
Chapter 1 Traffic Accounting Configuration
Note:
The traffic accounting card mentioned in this chapter refers to LS81VSNP line
processing unit (LPU).
When configuring traffic accounting, go to these sections for information you are
interested in:
zIntroduction to Traffic Accounting
zConfiguring Traffic Accounting
zDisplaying Traffic Accounting
zTraffic Accounting Configuration Example
1.1 Introduction to Traffic Accounting
Some accounting servers, such as CAMS, can perform time-based or traffic-based
accounting for successfully authenticated 802.1x users. Traffic accounting enables the
switch where users are authenticated to measure the traffic generated when the users
are online and send traffic measurement results to the accounting server to charge the
online users.
1.1.1 Related Concepts of Traffic Accounting
zTraffic group: a mechanism used to classify destination networks by accounting
attributes. The accounting attributes of a traffic group include whether to charge
and the charge rate.
zTraffic group accounting address: a network IP address configured for a traffic
group. You can configure some network addresses for a traffic group, and then
traffic generated for accessing these addresses will be measured.
zTraffic collection card: an interface card configured to perform traffic collection. A
traffic collection card sends all the traffic passing through it to the traffic accounting
card.
zTraffic accounting card: the card that performs traffic analysis, calculation and
statistics.
zTraffic collection: the process of sending the traffic passing through the traffic
collection card to the traffic accounting card.

Operation Manual – Traffic Accounting
H3C S7500 Series Ethernet Switches Chapter 1 Traffic Accounting Configuration
1-2
zTraffic accounting: the process in which the traffic accounting card analyzes and
calculates the traffic obtained from the traffic collection card. Traffic accounting is
performed on the basis of the users’ online IP addresses and the traffic groups to
which the accessed networks belong.
1.1.2 Implementation Process of Traffic Accounting
Figure 1-1 shows the implementation process of traffic accounting on the H3C S7500
Series Switches.
Figure 1-1 Implementation process of traffic accounting
The following section details the process of traffic accounting:
1) After a user passes the 802.1x authentication, the user logs in successfully.
2) The authenticator device obtains the online IP address of the user and starts to
measure the traffic of the user.
3) Traffic is generated while the user accesses networks.
4) The traffic collection card sends the user's online traffic to the traffic accounting
card.
5) The traffic accounting card performs traffic statistics based on traffic groups, and
generates traffic statistics, which reflect the accumulative traffic generated since
the user gets online.
6) The traffic accounting card periodically sends traffic statistics to the accounting
server.
7) When the user goes offline, the authenticator device sends the total traffic to the
accounting server.
8) The accounting process is over for this user.
1.2 Configuring Traffic Accounting
1.2.1 Prerequisites
zA service card that serves as the traffic accounting card is plugged into the switch.
z802.1x is enabled on the switch.
zA CAMS server is properly configured.

Operation Manual – Traffic Accounting
H3C S7500 Series Ethernet Switches Chapter 1 Traffic Accounting Configuration
1-3
Note:
This document describes the configuration of traffic accounting. The configuration of
802.1x and CAMS server is not covered here.
1.2.2 Configuring Traffic Accounting
The following table describes the configuration tasks for traffic accounting.
Table 1-1 Configure the traffic accounting function
To do... Use the command... Remarks
Enter system view system-view —
Configure the traffic
accounting slot
traffic-accounting
accounting-slot
slot-num
Required
zThe specified traffic
accounting slot must be the
slot where the traffic
accounting card resides.
zYou will enter traffic
accounting view directly after
the configuration succeeds.
zBy default, no traffic
accounting slot is specified.
Specify a traffic
collection card traffic-slot slot-num Required
Enable the traffic
accounting function accounting enable
Required
By default, this function is
disabled on the traffic accounting
card.
Table 1-2 Configure traffic group
Configuration Use the command... Remarks
Enter system view system-view —
Configure a traffic group traffic-accounting
traffic-group
group-name
Required
Enter traffic group view
automatically after
successful configuration.
Configure a network
address for the traffic
group
network ip-address
{mask | mask-len }
Required
Use this command in
traffic group view.

Operation Manual – Traffic Accounting
H3C S7500 Series Ethernet Switches Chapter 1 Traffic Accounting Configuration
1-4
Table 1-3 Configure a traffic group for a domain
Configuration Use the command... Remarks
Enter system view system-view —
Enter ISP domain view domain domain-name —
Set the accounting mode to
traffic accounting accounting-mode traffic Required
Configure the domain to
use a specified traffic group traffic-group group-name rate
idnum Required
Note:
zThe interface card that connects an external network (the Internet) should be
configured as a traffic collection card.
zCurrently, only single rate is supported, and multi-rate is not supported.
1.3 Displaying Traffic Accounting
After the above configuration, you can execute the display command in any view to
display the operation status of traffic accounting and verify your configuration.
Table 1-4 Display traffic accounting
To do... Use the command... Remarks
Display traffic group
information display traffic-accounting
traffic-group [group-name ]
Display traffic accounting
configuration display traffic-accounting
accounting-slot [ slot-num ]
Display traffic statistics of
one or all online users display traffic-accounting
statistics [ip-address ]
You can execute
the display
command in any
view.
1.4 Traffic Accounting Configuration Example
I. Network requirements
zA user running a 802.1x authentication client accesses the Internet through a
switch. The user can access external networks after passing the authentication.
The accounting mode is traffic accounting. When the user accesses the networks
11.127.1.0/24 and 12.127.1.0/24, the accounting server CAMS charges the user
for the user's online traffic. When the user accesses other network segments,
however, the user is not charged.

Operation Manual – Traffic Accounting
H3C S7500 Series Ethernet Switches Chapter 1 Traffic Accounting Configuration
1-5
II. Network diagram
Internet
g
User
CAMS
Switch
Figure 1-2 Network diagram for traffic accountin
III. Configuration procedure
# Configure a traffic accounting group named somegroup.
<H3C> system-view
[H3C] traffic-accounting traffic-group somegroup
# Configure the following two destination network IP addresses for the traffic
accounting group.
[H3C-traffic-group-somegroup] network 11.127.1.0 24
[H3C-traffic-group-somegroup] network 12.127.1.0 24
# Enter the user's domain view (suppose the user belongs to domain aaa), set the
accounting mode to traffic accounting and configure the domain to use the traffic group.
[H3C] domain aaa
[H3C-isp-aaa] accounting-mode traffic
[H3C-isp-aaa] traffic-group somegroup rate 1
# Configure a traffic accounting card, specify a traffic collection card, and enable the
traffic accounting function.
[H3C] traffic-accounting accounting-slot 2
[H3C-accounting-slot-2] traffic-slot 3
[H3C-accounting-slot-2] accounting enable