[c-nsp] Cisco 7301, Radius and AV-Pairs

[Mike Cooper]

Thanks Pshem, I tried your suggestion below regarding policy-maps, but 
with the same issue presenting... The virtual-access comes up, but as 
soon as it tries to apply the per-user directives the clone error occurs 
and the interface goes down.

To clarify my earlier post, am running IOS 12.3(20) on the 7301, Pshem 
had the service-policy directive working on 12.3(17) and (18).

Some interface-config directives seem to work (traffic-shape does, but 
doesn't provide a consistent reliable speed), while others don't (such 
as rate-limit and service-policy) - yet they do work on a 7206 VXR 
(albeit running 12.4(3) )

Will throw this back out to the list to see if there's any more 
suggestions out there.

Cheers

--Mike

 6 09:33:59: VT[Vi1294]:Reuse interface, recycle queue size 77
 6 09:33:59: VT[Vi1294]:Cloning a recycled vaccess
 6 09:33:59: VT[Vi1294]:Added new vtemplate cloneblk, now cloning from 
vtemplate
 6 09:33:59: VT[Vi1294]:Clone Vaccess from Virtual-Template1 (40 bytes)
 6 09:33:59: VT[Vi1294]:no ip redirects
 6 09:33:59: VT[Vi1294]:no ip unreachables
 6 09:33:59: VT[Vi1294]:end
 6 09:33:59: VT[Vi1294]:ip unnumbered Loopback0
 6 09:33:59: VT[Vi1294]:Applying config commands on process "VTEMPLATE 
Background Mgr" (175)
 6 09:33:59: VT[Vi1294]:no ip redirects
 6 09:33:59: VT[Vi1294]:no ip unreachables
 6 09:33:59: VT[Vi1294]:end
 6 09:33:59: VT[Vi1294]:MTUs ip 1500, sub 1500, max 1500, default 1500
 6 09:33:59: VT[Vi1294]:Processing vaccess response, id 0x8E0108BC, 
result success (1)
 6 09:33:59: %LINK-3-UPDOWN: Interface Virtual-Access1294, changed state 
to up
 6 09:33:59: AAA/AUTHOR: Processing PerUser AV interface-config
 6 09:33:59: VT:Sending vaccess request, id 0x6B000BF9
 6 09:33:59: VT:Processing vaccess requests, 1 outstanding
 6 09:33:59: VT[Vi1294]:Added new AAA cloneblk, now cloning from 
vtemplate/AAA
 6 09:33:59: VT[Vi1294]:Clone Vaccess from AAA (38 bytes)
 6 09:33:59: VT[Vi1294]:service-policy output policy-256
 6 09:33:59: VT[Vi1294]:end
 6 09:33:59: VT[Vi1294]:Applying config commands on process "VTEMPLATE 
Background Mgr" (175)
 6 09:33:59: VT[Vi1294]:service-policy output policy-256
 6 09:33:59: VT[Vi1294]:end
 6 09:33:59: VT[Vi1294]:MTUs ip 1500, sub 1500, max 1500, default 1500
 6 09:33:59: VT[Vi1294]:Processing vaccess response, id 0x6B000BF9, 
result clone error (4)
 6 09:33:59: VT[Vi1294]:Processing request to free vaccess
 6 09:33:59: VT[Vi1294]:Waiting for the free request to finish
 6 09:33:59: VT[Vi1294]:Vaccess free request complete, reference id 151
 6 09:33:59: %LINK-3-UPDOWN: Interface Virtual-Access1294, changed state 
to down


Pshem Kowalczyk wrote:
> Hi,
>
> We had similar issue with 7301. The way we got it sorted is by using
> different AV-Pair:
>
> Cisco-AVPair = "lcp:interface-config=service-policy output policy-256"
>
> and policy on the router:
>
> policy-map policy-256
>  description Default shaping policy
>   class class-default
>    police 256000 48000 96000 conform-action transmit  exceed-action
> drop  violate-action drop
>
> We used to have a lot of 7301 terminating UBS from TCNZ, if you need
> any more help - contact me please off the list.
>
> kind regards
> Pshem
>
> On 05/11/2007, Mike Cooper <m.cooper at actrix.co.nz> wrote:
>   
>> Hi all,
>>
>> I have a Cisco 7301 router (12.3(4r)T2) in use terminating ADSL sessions.
>>
>> I'm attempting to use AV-Pairs to rate limit the virtual-access
>> interfaces, however am running into an issue with the virtual-access
>> interface dropping out on applying the rate limiting.
>>
>> My configuration seems correct as the AVpair is being received and
>> processed.
>>
>> This functionality was previously working on a 7206vxr.
>>
>> The database field size storing the AVpair is somewhat short, so am
>> using the bare minimum of characters to complete the command (this could
>> be changed to facilitate typing the full command, but not sure it'd
>> change things):
>> lcp:interface-config=rat out 256000 48000 96000 con tra exc dro
>>
>> Any suggestions gratefully received:
>>
>> --
>> Mike Cooper
>> Systems Engineer
>>
>>