RADIUS-Based Policing
Verifying RADIUS-Based Policing
14
1d21h: 63C82A18 0 00000009 qos-policy-out(378) 45 add-class(sub,(class-default, Premium),
police(200000))
1d21h:
ISG#
1d21h: RADIUS(00000000): sending
1d21h: RADIUS(00000000): Send CoA Ack Response to 192.168.1.6:1700 id 0, len 65
1d21h: RADIUS: authenticator 62 B4 B0 1A 90 10 01 01 - F6 C8 CD 17 79 15 C7 A7
1d21h: RADIUS: Vendor, Cisco [26] 18
1d21h: RADIUS: ssg-account-info [250] 12 "S192.168.1.10"
1d21h: RADIUS: Vendor, Cisco [26] 27
1d21h: RADIUS: ssg-account-info [250] 21 "$IVirtual-Access2.2"
ISG Transient Policy
The ISG copies the service policy named Parent currently applied to the session and creates a transient
copy named New_Parent to which it makes the appropriate changes. Based on the Cisco VSA included
in the Access-Accept message, the ISG changes the policing rate of the Premium traffic class from 5000
bps to 200,000 bps. The Premium class is configured in the New_Child policy, which is applied to the
New_Parent class-default class.
policy-map New_Child [New cloned child policy]
class Premium
police 200000 [New policing rate]
!
policy-map New_Parent [New cloned parent policy]
class class-default
shape average 10000
service-policy New_Child [New cloned child policy attached to the new
cloned parent policy]
Verifying RADIUS-Based Policing
To verify the configuration of RADIUS-based policing on the ISG, use any of the following commands
in privileged EXEC mode.
Command Displays
Router# show policy-map interface
The configuration of all classes configured for all policy maps
attached to all interfaces. Also displays the serviced default policy
map.
Router# show policy-map interface interface
[input | output]
The configuration of all classes configured for all inbound or
outbound policy maps attached to the specified interface.
interface is the name of the interface or subinterface.
input indicates to display the statistics for the attached inbound
policy.
output indicates to display the statistics for the attached outbound
policy. If you do not specify input or output, the router shows
information about all classes that are configured for all inbound
and outbound policies attached to the interface you specify.
To Next Page
Loading...
Need help?
General