<div dir="ltr">Gerald,<br><br>If I am not wrong, the issue is the "percent" value you are using... percent has to be applied in your case with a parent shaper, which would define the 100% pipe...<br>Change the percent to an absolute value, and it should work just fine.<br>
<br>Arie<br><br><div class="gmail_quote">On Wed, Feb 16, 2011 at 8:49 PM, Gerald Krause <span dir="ltr"><<a href="mailto:gk@ax.tc">gk@ax.tc</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Sorry for dig out this old thread but I'am in the process to test some<br>
QoS features on our LNS and stumbled upon this post :-).<br>
<br>
My question - what IOS version support such QoS policies to be applied<br>
to individual users/sessions from RADIUS on a NPE-G2 LNS and what is the<br>
difference between this 2 features:<br>
<br>
1) "QoS: Per-Session Shaping and Queuing on LNS "<br>
Cisco FN: supported in 12.2SB but not in 12.2SRE<br>
<br>
2) "Per-User QoS via AAA Policy Name"<br>
Cisco FN: supported in 12.2SB and 12.2SRE<br>
<br>
We have just moved from 12.2SB to 12.2SRE on our NPE-G2 LNS for some<br>
reasons and it seems that this version does not support that kind of<br>
configuration. I've tried some simple configurations like the originator<br>
of this thread has done and I see that config and the RADIUS attr's will<br>
be 'accepted' from the LNS but the policy configured in the user profile<br>
will be not 'applied' to the Virtual-Interface of the session/user:<br>
<br>
<br>
------8<-------<br>
<br>
LNS Config<br>
==========<br>
!<br>
policy-map STCR-ADSL-3M<br>
class class-default<br>
police rate percent 10<br>
!<br>
<br>
RADIUS Config<br>
=============<br>
xxx-gktest2 Password:="testtest"<br>
Framed-Route="1.2.3.4",<br>
Cisco-AVPair+="lcp:interface-config=service-policy output STCR-ADSL-3M"<br>
<br>
<br>
DEBUG<br>
=====<br>
<br>
LNS Debug Log:<br>
1375621: Feb 16 18:26:08.041: RADIUS: 1812, Access-Accept, len 106<br>
1375623: Feb 16 18:26:08.041: RADIUS: Vendor, Cisco [26] 63<br>
1375624: Feb 16 18:26:08.041: RADIUS: Cisco AVpair [1] 57<br>
"lcp:interface-config=service-policy output STCR-ADSL-3M"<br>
1375625: Feb 16 18:26:08.041: RADIUS: Framed-IP-Address [8] 6<br>
1.2.3.4<br>
...<br>
1375675: Feb 16 18:26:08.045: SSS PM [uid:85][184D0B28]: RULE: VRF<br>
Parsing routine:<br>
1375676: interface-config "service-policy output STCR-ADSL-3M"<br>
1375677: addr 1.2.3.4<br>
1375679: Feb 16 18:26:08.045: SSS PM: Multihop disabled<br>
1375680: Feb 16 18:26:08.045: SSS AAA AUTHOR [uid:85]: SIP PPP[13C0894]<br>
parsed as Success<br>
...<br>
1375715: Feb 16 18:26:08.053: AAA/BIND(0000691E): Bind i/f Virtual-Access46<br>
1375774: Feb 16 18:26:08.261: Vi46 IPCP: State is Open<br>
1375775: Feb 16 18:26:08.261: AAA/AUTHOR: Processing PerUser AV route<br>
1375776: Feb 16 18:26:08.261: Vi46 Added to neighbor route AVL tree:<br>
topoid 0, address 1.2.3.4<br>
1375777: Feb 16 18:26:08.261: Vi46 IPCP: Install route to 1.2.3.4<br>
<br>
<br>
LNS#sh policy-map<br>
<br>
Policy Map STCR-ADSL-3M<br>
Class class-default<br>
police rate percent 10<br>
<div class="im"> conform-action transmit<br>
exceed-action drop<br>
<br>
</div>LNS#show subscriber sess | inc test<br>
85 Vi46 authen Local Term xxx-gktest 00:48:44<br>
LNS#show policy-map session uid 85<br>
LNS#<br>
<br>
LNS#sh user wi | inc test<br>
Vi46 xxx-gktest2<br>
LNS#sh run int virtual-access 46<br>
!<br>
interface Virtual-Access46<br>
ip mtu 1452<br>
ip verify unicast reverse-path<br>
ip tcp adjust-mss 1412<br>
no logging event link-status<br>
no snmp trap link-status<br>
end<br>
LNS#show policy-map interface virtual-access 46<br>
LNS#<br>
<br>
------8<-------<br>
<br>
<br>
--<br>
Gerald<br>
<br>
Am 07.09.2009 08:41, schrieb Andy Saykao:<br>
<div><div></div><div class="h5">> Hi All,<br>
><br>
> Is it better to shape or police DSL subscribers that have exceeded their<br>
> quota or does it not matter which method you choose? We are currently<br>
> using CoA with policing but I've been asked to investigate whether we<br>
> should look at shaping instead of policing. My testing reveals that<br>
> policing is more bursty as seen below.<br>
><br>
> *** Example with Policing ***<br>
><br>
> policy-map POLICE-TEST<br>
> class class-default<br>
> police 48000 9000 18000 conform-action transmit exceed-action<br>
> drop violate-action drop<br>
><br>
> Using: cisco-avpair = "ip:sub-qos-policy-out=POLICE-TEST"<br>
><br>
> Download speeds fluctuate between 5.2 - 7.6KB/sec. More bursty.<br>
><br>
> *** Example with Shaping ***<br>
><br>
> policy-map SHAPE-TEST<br>
> class class-default<br>
> shape average 48000<br>
> Using: cisco-avpair = "ip:sub-qos-policy-out=SHAPE-TEST"<br>
><br>
> Download speeds remain at constant 5.6KB/sec. Very little bursting.<br>
><br>
> Any pro's and con's to either method???<br>
><br>
> Thanks.<br>
><br>
> Andy<br>
><br>
> This email and any files transmitted with it are confidential and<br>
> intended solely for the use of the individual or entity to whom they are<br>
> addressed. Please notify the sender immediately by email if you have<br>
> received this email by mistake and delete this email from your system.<br>
> Please note that any views or opinions presented in this email are<br>
> solely those of the author and do not necessarily represent those of the<br>
> organisation. Finally, the recipient should check this email and any<br>
> attachments for the presence of viruses. The organisation accepts no<br>
> liability for any damage caused by any virus transmitted by this email.<br>
><br>
><br>
><br>
</div></div>> _______________________________________________<br>
> cisco-bba mailing list<br>
<div class="im">> <a href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</a><br>
</div><div class="im">> <a href="https://puck.nether.net/mailman/listinfo/cisco-bba" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-bba</a><br>
<br>
_______________________________________________<br>
</div>cisco-bba mailing list<br>
<div class="im"><a href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</a><br>
</div><div><div></div><div class="h5"><a href="https://puck.nether.net/mailman/listinfo/cisco-bba" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-bba</a><br>
</div></div></blockquote></div><br></div>