Thanks Jeff.<br><br>However, the IOS that the 7206VXR current uses does not have the ISG feature set, is there any other possible ways to achieve the same result?<br><br>If not, I guess I will have to look for a new IOS that supports ISG...<br>
<br>Patrick<br><br><div class="gmail_quote">On Wed, Jan 7, 2009 at 5:36 PM, Jeff Hinds <span dir="ltr"><<a href="mailto:gripen49@gmail.com">gripen49@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<p style="font-family: arial,helvetica,sans-serif;"><font size="2"><span style="font-size: 10pt;">Hi Patrick</span></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><span style="font-size: 10pt;"><br>
</span></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><span style="font-size: 10pt;">There is one possible solution that will definitely work. If you use Cisco ISG features on the 7206VXR you can do per-service shaping on-the-fly without disconnecting the parent session. This is accomplished using RADIUS CoA commands. I have found that you need to unapply the original service and then apply a new service with the shaping attributes. Some basic starter examples below:</span></font></p>
<p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br><span style="font-size: 10pt;"></span></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><span style="font-size: 10pt;">(Normal service profile)</span></font></p>
<p style="font-family: arial,helvetica,sans-serif;"><font size="2">PPP_SERVICE Password == "servicecisco"<br> Auth-Type = PAP,<br> Cisco-Service-Info = "QU;1024000;D;1024000",<br> Cisco-AVPair += "ip:traffic-class=in access-group name ACL_UPSTREAM_PPP priority 30",<br>
Cisco-AVPair += "ip:traffic-class=out access-group name ACL_DOWNSTREAM_PPP priority 30",<br> Cisco-AVPair += "ip:traffic-class=in default drop",<br> Cisco-AVpair += "ip:traffic-class=out default drop",<br>
Acct-Interim-Interval=900,<br> Cisco-AVPair += "subscriber:accounting-list=PPP_ACCOUNTING_LIST"<br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br><span style="font-size: 10pt;"></span></font></p>
<p style="font-family: arial,helvetica,sans-serif;"><font size="2"><span style="font-size: 10pt;">(shaped service profile)</span></font></p><p style="font-family: arial,helvetica,sans-serif;">
<font size="2"><span style="font-size: 10pt;">PPP_SERVICE_SHAPED Password == "servicecisco"<br> Auth-Type = PAP,<br> Cisco-Service-Info = "QU;64000;D;64000",<br> Cisco-AVPair = "ip:traffic-class=in access-group name ACL_UPSTREAM_PPP priority 20",<br>
Cisco-AVPair += "ip:traffic-class=out access-group name ACL_DOWNSTREAM_PPP priority 20",<br> Cisco-AVPair += "ip:traffic-class=in default drop",<br> Cisco-AVpair += "ip:traffic-class=out default drop",<br>
Cisco-AVPair += "subscriber:accounting-list=PPP_ACCOUNTING_LIST"<br></span></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;">
<font size="2">Note that you can specify the accounting update interval on a per-service basis. <br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;">
<font size="2">I have tested the above and it works as expected on both the 7206 and 10008 platforms. This will do what you need. <br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br>
</font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">I use freeradius so my CoA command is structured as follows:</font></p><p style="font-family: arial,helvetica,sans-serif;">
<font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">(unapply PPP_SERVICE)</font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">echo "Cisco-Account-Info=S172.20.1.13,Cisco-Command-Code==0x0C5050505F53455256494345 " | /usr/bin/radclient <a href="http://192.168.1.1:1812" target="_blank">192.168.1.1:1812</a> coa isgradiussecret -x</font></p>
<p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">(apply PPP_SERVICE_SHAPED)</font></p>
<p style="font-family: arial,helvetica,sans-serif;"><font size="2">echo "Cisco-Account-Info=S172.20.1.13,Cisco-Command-Code==0x0B5050505F534552564943455F 53 48 41 50 45 44 " | /usr/bin/radclient <a href="http://192.168.1.1:1812" target="_blank">192.168.1.1:1812</a> coa isgradiussecret -x<br>
</font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">Where (for illustration only), 172.20.1.13 is the subscriber session identifier (Acct-Session-Id can also be used) amd 192.168.1.1 is the IP of the BBA router (provided it is configured to accept RADIUS CoA using "aaa server radius dynamic-author"). I have used this site in the past for converted service names in string format to Hex (for the CoA command): <a href="http://www.easycalculation.com/ascii-hex.php" target="_blank">http://www.easycalculation.com/ascii-hex.php</a><br>
</font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">Hope this helps.. <br></font></p>
<p style="font-family: arial,helvetica,sans-serif;"><font size="2"><br></font></p><p style="font-family: arial,helvetica,sans-serif;"><font size="2">Regards,</font></p><p>
<font size="2"><span style="font-family: arial,helvetica,sans-serif;">Jeff Hinds</span></font><br></p><p><span style="font-size: 10pt;"><br></span></p>
<p><span style="font-size: 10pt;"> </span></p>
<p><b><span style="font-size: 10pt;">From:</span></b><span style="font-size: 10pt;"> <a href="mailto:cisco-bba-bounces@puck.nether.net" target="_blank">cisco-bba-bounces@puck.nether.net</a>
[mailto:<a href="mailto:cisco-bba-bounces@puck.nether.net" target="_blank">cisco-bba-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Patrick Wu<br>
<b>Sent:</b> Wednesday, January 07, 2009 6:37 AM<br>
<b>To:</b> <a href="mailto:cisco-bba@puck.nether.net" target="_blank">cisco-bba@puck.nether.net</a><br>
<b>Subject:</b> [cisco-bba] PPPoE Mid-session Shaping/Policing</span></p><div><div></div><div class="Wj3C7c">
<p> </p>
<p>Hi Everyone,<br>
<br>
I have a L2TP/PPPoE setup in a 7206VXR and is working fine. What I now want to
do is to implement dynamic shaping/policing on the PPPoE services. ie, I would
like to shape/police a PPPoE service without disconnecting the session.<br>
<br>
I believe this can be implemented using RADIUS attributes? But not sure how it
is done exactly if it is possible at all. I'm already using RADIUS attributes
to shape/police PPPoE sessions when they login initially, I now need to change
the shaper/policer rate mid-session without disconnecting.<br>
<br>
Any one with any info or point me in the right direction would be appreciated.<br>
<br>
Thanks!<br>
<span style="color: rgb(136, 136, 136);"><br>
Patrick</span> </p>
</div></div><br>_______________________________________________<br>
cisco-bba mailing list<br>
<a href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-bba" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-bba</a><br></blockquote></div><br>