[cisco-bba] Problem traffic shaping individual PPPoE sessions on a Cisco 2621 XM running c2600-telco-mz.123-7.T3.bin

Whittle, Michael michael.whittle at thus.net
Fri Aug 13 04:04:22 EDT 2004


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Excellent, thanks.

I think that's just about the only thing we haven't tried at this
stage.

I have tried using RADIUS to apply a service policy when the user
logs on but maybe using traffic-shape will work.

I'll give it a go.

Cheers,
Mike

- -----Original Message-----
From: Gordon Smith [mailto:gsmith at wxc.co.nz] 
Sent: 13 August 2004 00:14
To: Whittle, Michael; Dennis Peng
Cc: cisco-bba at puck.nether.net
Subject: RE: [cisco-bba] Problem traffic shaping individual PPPoE
sessionson a Cisco 2621 XM running c2600-telco-mz.123-7.T3.bin


We managed to get rate-shaping working using RADIUS....
We're terminating PPPoE on a 7301. We solved this by having the
radius server pass back rate-limit attributes in the reply. Applying
templates won't work. I spent quite a bit of time getting this right 
:-)

e.g. Cisco-AVpair = "lcp:interface-config=traffic-shape rate 200000"

If you look back through the threads on this list, you'll see a
previous thread on PPPoE Several people here were instrumental in
getting this working


Cheers,
Gordon



> -----Original Message-----
> From: cisco-bba-bounces at puck.nether.net 
> [mailto:cisco-bba-bounces at puck.nether.net]On Behalf Of Whittle, 
> Michael
> Sent: Tuesday, 10 August 2004 4:21 a.m.
> To: 'Dennis Peng'
> Cc: 'cisco-bba at puck.nether.net'
> Subject: RE: [cisco-bba] Problem traffic shaping individual PPPoE 
> sessionson a Cisco 2621 XM running c2600-telco-mz.123-7.T3.bin
> 
> 
> Hi Denis,
> 
> Okay so we've established that traffic shaping on the LAC
> isn't going to
> work. We've tried using CBWFQ, traffic-shape and RADIUS in 
> the hope that
> maybe one of them will work but we've had no joy. They don't seem
> to recognise the separate sessions on the LAC.
> 
> We configured the exact same service policies on the LNS and
> we've got it
> working outbound but not inbound. I know FastEthernet and Ethernet
> interfaces have a similar problem but then it gives you a 
> warning or doesn't
> let you configure it at all. In this case it's allowing the 
> configuration
> but it's just not working? Any ideas?
> 
> Cheers,
> Mike
> 
> -----Original Message-----
> From: Whittle, Michael [mailto:michael.whittle at thus.net]
> Sent: 06 August 2004 16:20
> To: 'Dennis Peng'
> Cc: 'cisco-bba at puck.nether.net'
> Subject: RE: [cisco-bba] Problem traffic shaping individual 
> PPPoE sessions
> on a Cisco 2621 XM running c2600-telco-mz.123-7.T3.bin
> 
> 
> Hi Dennis,
> 
> Thanks for the info. We are hoping to keep the control of the
> traffic  shaping on the LAC so hopefully we can find a work around
> for this.  
> 
> Cheers,
> Mike
> 
> -----Original Message-----
> From: Dennis Peng [mailto:dpeng at cisco.com]
> Sent: 06 August 2004 15:53
> To: Whittle, Michael
> Cc: 'cisco-bba at puck.nether.net'
> Subject: Re: [cisco-bba] Problem traffic shaping individual 
> PPPoE sessions
> on a Cisco 2621 XM running c2600-telco-mz.123-7.T3.bin
> 
> 
> I don't think you can shape on the vtemplate when you are the
> LAC. If this
> were the LNS, that would work. If you are doing PPPoEoA, you 
> can shape at
> the VC level.
> 
> Dennis
> 
> Whittle, Michael [michael.whittle at thus.net] wrote:
> > 
> > We have configured a Cisco 2621XM as a LAC in which we are
> terminating
> > various PPPoE connections. At the moment the solution is
> working but
> > the bandwidth that each PPPoE session uses is a bit of a
> free for all.
> > We would like to limit each PPPoE session to not exceed
> 512k. I have
> > found some good documentation on the Cisco site which says
> that this
> > can be done using both , 'service policies' or
> 'traffic-shape rate' on
> > the Virtual-Template interface. The router accepts the
> configuration
> > without a problem but for some reason when we check the
> throughput it
> > exceeds 512k.
> > 
> > The documentation on the web site bases it's examples on a
> Cisco 10000
> > platform but I don't think that would make a difference in
> this case
> > because all the commands we need are supported on the Cisco
> > 2621XM. The IOS we are running is, 'c2600-telco-mz.123-7.T3.bin'
> > which I'm  wondering if it may be the problem here. The router we
> > are 
> using also
> > supports Virtual-Template subinterfaces but for some reason
> if I apply
> > the traffic shaping commands to the Virtual-Template I
> should see the
> > commands displayed when I use the following command and I don't:
> > 
> > interface Virtual-Template1
> >  description PPPoE Session
> >  mtu 1492
> >  bandwidth 512
> >  ip unnumbered Loopback0
> >  no peer default ip address
> >  no keepalive
> >  traffic-shape rate 512000 8000 8000 1000
> > !
> > 
> > CPR00227-test#test virtual-template 1 subinterface Subinterfaces
> > may  be created using Virtual-Template1 CPR00227-test#
> > 
> > The example above should limit each PPPoE session to 512k but it 
> > doesn't seem to work. I have also tried the configuration
> below and it
> > also isn't
> > working:
> > 
> > policy-map PPPoE-SESSION-TRAFFIC
> >  class class-default
> >   police cir 512000 bc 96000 be 192000
> >     conform-action transmit
> >     exceed-action drop
> >     violate-action drop
> > !
> > 
> > interface Virtual-Template1
> >  description PPPoE Session
> >  mtu 1492
> >  bandwidth 512
> >  ip unnumbered Loopback0
> >  service-policy input PPPoE-SESSION-TRAFFIC
> >  service-policy output PPPoE-SESSION-TRAFFIC
> >  no peer default ip address
> >  no keepalive
> > !
> > 
> > CPR00227-test#show policy-map interface Virtual-Template1 
> > Virtual-Template1
> > 
> >   Service-policy input: PPPoE-SESSION-TRAFFIC
> > 
> >     Service policy content is displayed for cloned interfaces
> > only  such as vaccess and sessions
> > 
> >   Service-policy output: PPPoE-SESSION-TRAFFIC
> > 
> >     Service policy content is displayed for cloned interfaces
> > only  such as vaccess and sessions CPR00227-test#
> > 
> > Any idea what the problem could be?
> > 
> > Regards,
> > Mike
> 
> > _______________________________________________
> > cisco-bba mailing list
> > cisco-bba at puck.nether.net 
> > https://puck.nether.net/mailman/listinfo/cisco-bba
> _______________________________________________
> cisco-bba mailing list
> cisco-bba at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba
> _______________________________________________
> cisco-bba mailing list
> cisco-bba at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba
> 

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0
Comment: http://www.thus.co.uk/pgpinfo for more information

iQA/AwUBQRx2Cg/QItQ3gFkHEQIiigCgvPa0AbnPZ7y8ywmkB2b0O6SZS08AoIrV
Tktk5m1/A9wXTE4JwF61/m2c
=Xldz
-----END PGP SIGNATURE-----


More information about the cisco-bba mailing list