<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="ProgId" content="Word.Document"><meta name="Generator" content="Microsoft Word 12"><meta name="Originator" content="Microsoft Word 12"><link rel="File-List" href="file:///E:%5CDOCUME%7E1%5CJEFFHI%7E1%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_filelist.xml"><link rel="themeData" href="file:///E:%5CDOCUME%7E1%5CJEFFHI%7E1%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_themedata.thmx"><link rel="colorSchemeMapping" href="file:///E:%5CDOCUME%7E1%5CJEFFHI%7E1%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_colorschememapping.xml"><style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:0;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:-1610611985 1107304683 0 0 159 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-1610611985 1073750139 0 0 159 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:1627400839 -2147483648 8 0 66047 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman","serif";
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;}
span.EmailStyle15
{mso-style-type:personal;
mso-style-noshow:yes;
mso-style-unhide:no;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:11.0pt;
font-family:"Arial","sans-serif";
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
color:windowtext;
text-underline:black;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><span style="font-size: 10pt;">Hi Patrick</span></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><span style="font-size: 10pt;"><br>
</span></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><span style="font-size: 10pt;">There is one possible solution that will definitely work. If you use Cisco ISG features on the 7206VXR you can do per-service shaping on-the-fly without disconnecting the parent session. This is accomplished using RADIUS CoA commands. I have found that you need to unapply the original service and then apply a new service with the shaping attributes. Some basic starter examples below:</span></font></p>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br><span style="font-size: 10pt;"></span></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><span style="font-size: 10pt;">(Normal service profile)</span></font></p>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">PPP_SERVICE Password == "servicecisco"<br> Auth-Type = PAP,<br> Cisco-Service-Info = "QU;1024000;D;1024000",<br> Cisco-AVPair += "ip:traffic-class=in access-group name ACL_UPSTREAM_PPP priority 30",<br>
Cisco-AVPair += "ip:traffic-class=out access-group name ACL_DOWNSTREAM_PPP priority 30",<br> Cisco-AVPair += "ip:traffic-class=in default drop",<br> Cisco-AVpair += "ip:traffic-class=out default drop",<br>
Acct-Interim-Interval=900,<br> Cisco-AVPair += "subscriber:accounting-list=PPP_ACCOUNTING_LIST"<br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br><span style="font-size: 10pt;"></span></font></p>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><span style="font-size: 10pt;">(shaped service profile)</span></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal">
<font size="2"><span style="font-size: 10pt;">PPP_SERVICE_SHAPED Password == "servicecisco"<br> Auth-Type = PAP,<br> Cisco-Service-Info = "QU;64000;D;64000",<br> Cisco-AVPair = "ip:traffic-class=in access-group name ACL_UPSTREAM_PPP priority 20",<br>
Cisco-AVPair += "ip:traffic-class=out access-group name ACL_DOWNSTREAM_PPP priority 20",<br> Cisco-AVPair += "ip:traffic-class=in default drop",<br> Cisco-AVpair += "ip:traffic-class=out default drop",<br>
Cisco-AVPair += "subscriber:accounting-list=PPP_ACCOUNTING_LIST"<br></span></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal">
<font size="2">Note that you can specify the accounting update interval on a per-service basis. <br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal">
<font size="2">I have tested the above and it works as expected on both the 7206 and 10008 platforms. This will do what you need. <br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br>
</font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">I use freeradius so my CoA command is structured as follows:</font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal">
<font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">(unapply PPP_SERVICE)</font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">echo "Cisco-Account-Info=S172.20.1.13,Cisco-Command-Code==0x0C5050505F53455256494345 " | /usr/bin/radclient <a href="http://192.168.1.1:1812">192.168.1.1:1812</a> coa isgradiussecret -x</font></p>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">(apply PPP_SERVICE_SHAPED)</font></p>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">echo "Cisco-Account-Info=S172.20.1.13,Cisco-Command-Code==0x0B5050505F534552564943455F 53 48 41 50 45 44 " | /usr/bin/radclient <a href="http://192.168.1.1:1812">192.168.1.1:1812</a> coa isgradiussecret -x<br>
</font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">Where (for illustration only), 172.20.1.13 is the subscriber session identifier (Acct-Session-Id can also be used) amd 192.168.1.1 is the IP of the BBA router (provided it is configured to accept RADIUS CoA using "aaa server radius dynamic-author"). I have used this site in the past for converted service names in string format to Hex (for the CoA command): <a href="http://www.easycalculation.com/ascii-hex.php">http://www.easycalculation.com/ascii-hex.php</a><br>
</font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">Hope this helps.. <br></font></p>
<p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;" class="MsoNormal"><font size="2">Regards,</font></p><p class="MsoNormal">
<font size="2"><span style="font-family: arial,helvetica,sans-serif;">Jeff Hinds</span></font><br></p><p class="MsoNormal"><span style="font-size: 10pt; font-family: "Arial","sans-serif";"><br></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family: "Arial","sans-serif";"> </span></p>
<p class="MsoNormal"><b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";"> <a href="mailto:cisco-bba-bounces@puck.nether.net">cisco-bba-bounces@puck.nether.net</a>
[mailto:<a href="mailto:cisco-bba-bounces@puck.nether.net">cisco-bba-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Patrick Wu<br>
<b>Sent:</b> Wednesday, January 07, 2009 6:37 AM<br>
<b>To:</b> <a href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</a><br>
<b>Subject:</b> [cisco-bba] PPPoE Mid-session Shaping/Policing</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Hi Everyone,<br>
<br>
I have a L2TP/PPPoE setup in a 7206VXR and is working fine. What I now want to
do is to implement dynamic shaping/policing on the PPPoE services. ie, I would
like to shape/police a PPPoE service without disconnecting the session.<br>
<br>
I believe this can be implemented using RADIUS attributes? But not sure how it
is done exactly if it is possible at all. I'm already using RADIUS attributes
to shape/police PPPoE sessions when they login initially, I now need to change
the shaper/policer rate mid-session without disconnecting.<br>
<br>
Any one with any info or point me in the right direction would be appreciated.<br>
<br>
Thanks!<br>
<span style="color: rgb(136, 136, 136);"><br>
Patrick</span> </p>