RADIUS-Based Policing
Configuration Examples for RADIUS-Based Policing
12
Setting the Policing Rate Using an Access-Accept Message: Examples
The examples in this section illustrate how to set the policing rate of a traffic class using an access-accept
message.
ISG Original Policy
This configuration example uses a RADIUS Access-Accept message to change the policing rate of a
traffic class at the child level of a hierarchical policy.
class-map match-any Premium
match access-group name Premium_Dest
!
policy-map Child
class Premium
shape average 5000
!
policy-map Parent
class class-default
shape average 10000
service-policy Child
!
ip access-list extended Premium_Dest
permit ip any 192.168.6.0 0.0.0.255
permit ip any 192.168.5.7 0.0.0.64
RADIUS Configuration
The following Cisco VSA is configured in a user profile on RADIUS. This VSA changes the policing
rate of the Premium class in the Child policy. The Child policy is applied to the class-default class of the
Parent policy.
radius subscriber 6
framed protocol ppp
service framed
vsa cisco generic 1 string "qos-policy-out=add-class(sub,(class-default, Premium),
police(200000))"
RADIUS Access-Accept Message
The ISG receives the following RADIUS Access-Accept message. Notice that the above Cisco VSA
configured in the user’s profile is present in the Access-Accept message.
1d21h: RADIUS: Received from id 1645/3 192.168.1.6:1812, Access-Accept, len 100
1d21h: RADIUS: authenticator 4A 2C F7 05 4B 88 38 64 - DE 60 69 5A 4B EE 43 E1
1d21h: RADIUS: Framed-Protocol [7] 6 PPP [1]
1d21h: RADIUS: Service-Type [6] 6 Framed [2]
1d21h: RADIUS: Vendor, Cisco [26] 68
1d21h: RADIUS: Cisco AVpair [1] 62 "qos-policy-out=add-class(sub,(class-default, Premium),
police(200000))"
1d21h: RADIUS(0000000D): Received from id 1645/3
1d21h: SSS PM [uid:4][65ADE2E8]: SERVICE: Adding Service attachment to event
1d21h: RADIUS/ENCODE(0000000D):Orig. component type = PPoE
1d21h: RADIUS(0000000D): Config NAS IP: 0.0.0.0
1d21h: RADIUS(0000000D): sending
To Next Page
Loading...
Need help?
General