[c-nsp] Cisco 7301, Radius and AV-Pairs

[Mike Cooper]

Hi all,

I have a Cisco 7301 router (12.3(4r)T2) in use terminating ADSL sessions.

I'm attempting to use AV-Pairs to rate limit the virtual-access 
interfaces, however am running into an issue with the virtual-access 
interface dropping out on applying the rate limiting.

My configuration seems correct as the AVpair is being received and 
processed.

This functionality was previously working on a 7206vxr.

The database field size storing the AVpair is somewhat short, so am 
using the bare minimum of characters to complete the command (this could 
be changed to facilitate typing the full command, but not sure it'd 
change things):
lcp:interface-config=rat out 256000 48000 96000 con tra exc dro

Any suggestions gratefully received:

Nov  5 12:56:38 wn-cisco-r5 5760382: Nov  5 12:56:38: RADIUS:  
authenticator 6B BA C7 93 9B F5 C8 90 - DB FB 30 A0 65 A8 7C FE
Nov  5 12:56:38 wn-cisco-r5 5760383: Nov  5 12:56:38: RADIUS:  
Framed-Protocol     [7]   6   PPP                       [1]
Nov  5 12:56:38 wn-cisco-r5 5760384: Nov  5 12:56:38: RADIUS:  
User-Name           [1]   31  "testuser at cyberjet.actrix.co.nz"
Nov  5 12:56:38 wn-cisco-r5 5760385: Nov  5 12:56:38: RADIUS:  
User-Password       [2]   18  *
Nov  5 12:56:38 wn-cisco-r5 5760386: Nov  5 12:56:38: RADIUS:  
NAS-Port-Type       [61]  6   Virtual                   [5]
Nov  5 12:56:38 wn-cisco-r5 5760387: Nov  5 12:56:38: RADIUS:  
NAS-Port            [5]   6
Nov  5 12:56:38 wn-cisco-r5 5760388: 1953
Nov  5 12:56:38 wn-cisco-r5 5760389: Nov  5 12:56:38: RADIUS:  
Calling-Station-Id  [31]  8   "atm 11"
Nov  5 12:56:38 wn-cisco-r5 5760390: Nov  5 12:56:38: RADIUS:  
Called-Station-Id   [30]  41  "0.5800673:58.673#184590850##speed:UBR#/"
Nov  5 12:56:38 wn-cisco-r5 5760391: Nov  5 12:56:38: RADIUS:  
Service-Type        [6]   6   Framed                    [2]
Nov  5 12:56:38 wn-cisco-r5 5760392: Nov  5 12:56:38: RADIUS:  
NAS-IP-Address      [4]   6   202.49.152.166
Nov  5 12:56:38 wn-cisco-r5 5760393: Nov  5 12:56:38: RADIUS: Received 
from id 1645/219 203.96.16.102:1645, Access-Accept, len 103
Nov  5 12:56:38 wn-cisco-r5 5760394: Nov  5 12:56:38: RADIUS:  
authenticator 90 2B E9 B1 44 57 1E 26 - F0 99 27 78 53 9A 89 97
Nov  5 12:56:38 wn-cisco-r5 5760395: Nov  5 12:56:38: RADIUS:  
Framed-IP-Address   [8]   6   202.154.158.4
Nov  5 12:56:38 wn-cisco-r5 5760396: Nov  5 12:56:38: RADIUS:  Vendor, 
Cisco       [26]  71
Nov  5 12:56:38 wn-cisco-r5 5760397: Nov  5 12:56:38: RADIUS:   Cisco 
AVpair       [1]   65  "lcp:interface-config=rat out 256000 48000 96000 con
tra exc dro"
Nov  5 12:56:38 wn-cisco-r5 5760398: Nov  5 12:56:38: RADIUS:  
Acct-Interim-Interva[85]  6   300
Nov  5 12:56:38 wn-cisco-r5 5760399: Nov  5 12:56:38: RADIUS(004F2BAE): 
Received from id 1645/219
Nov  5 12:56:38 wn-cisco-r5 5760400: Nov  5 12:56:38: ppp1953 PPP/AAA: 
Check Attr: addr
Nov  5 12:56:38 wn-cisco-r5 5760401: Nov  5 12:56:38: ppp1953 PPP/AAA: 
Check Attr: interface-config: Peruser I/F
Nov  5 12:56:38 wn-cisco-r5 5760402: Nov  5 12:56:38: ppp1953 PPP/AAA: 
Check Attr: acct-interval
Nov  5 12:56:38 wn-cisco-r5 5760403: Nov  5 12:56:38: 
AAA/BIND(004F2BAE): Bind i/f Virtual-Access1677
Nov  5 12:56:38 wn-cisco-r5 5760404: Nov  5 12:56:38: %LINK-3-UPDOWN: 
Interface Virtual-Access1677, changed state to up
Nov  5 12:56:38 wn-cisco-r5 5760405: Nov  5 12:56:38: Vi1677 
AAA/AUTHOR/LCP: Process Author
Nov  5 12:56:38 wn-cisco-r5 5760406: Nov  5 12:56:38: Vi1677 
AAA/AUTHOR/LCP: Process Attr: interface-config
Nov  5 12:56:38 wn-cisco-r5 5760407: Nov  5 12:56:38: AAA/AUTHOR: 
Processing PerUser AV interface-config
Nov  5 12:56:38 wn-cisco-r5 5760408: Nov  5 12:56:38: Vi1677 
AAA/AUTHOR/LCP: Process Attr: interface-config
Nov  5 12:56:38 wn-cisco-r5 5760409: Nov  5 12:56:38: Vi1677 
AAA/AUTHOR/LCP: Process Attr: acct-interval
Nov  5 12:56:38 wn-cisco-r5 5760410: Nov  5 12:56:38: Vi1677 
AAA/AUTHOR/LCP: IF_config:
Nov  5 12:56:38 wn-cisco-r5 5760411: rat out 256000 48000 96000 con tra 
exc dro
Nov  5 12:56:38 wn-cisco-r5 5760412:
Nov  5 12:56:39 wn-cisco-r5 5760413: Nov  5 12:56:38: %LINK-3-UPDOWN: 
Interface Virtual-Access1677, changed state to down



--
Mike Cooper
Systems Engineer