[c-nsp] Cisco 7301, Radius and AV-Pairs

[Oliver Boehmer (oboehmer)]

Mike,

can you show your complete vtemplate config? What happens if you apply
"service-policy output policy-256" "manually" to the vtemplate
interface, i.e. on the CLI? do you get any errors?
Can you do a session without this attribute and do a "show int
virtual-access <num> conf" to see what's applied on the interface?

	oli

Mike Cooper <> wrote on Tuesday, November 06, 2007 3:32 AM:

> Thanks Pshem, I tried your suggestion below regarding policy-maps, but
> with the same issue presenting... The virtual-access comes up, but as
> soon as it tries to apply the per-user directives the clone error
> occurs and the interface goes down.
> 
> To clarify my earlier post, am running IOS 12.3(20) on the 7301, Pshem
> had the service-policy directive working on 12.3(17) and (18).
> 
> Some interface-config directives seem to work (traffic-shape does, but
> doesn't provide a consistent reliable speed), while others don't (such
> as rate-limit and service-policy) - yet they do work on a 7206 VXR
> (albeit running 12.4(3) )
> 
> Will throw this back out to the list to see if there's any more
> suggestions out there.
> 
> Cheers
> 
> --Mike
> 
>  6 09:33:59: VT[Vi1294]:Reuse interface, recycle queue size 77
>  6 09:33:59: VT[Vi1294]:Cloning a recycled vaccess
>  6 09:33:59: VT[Vi1294]:Added new vtemplate cloneblk, now cloning from
> vtemplate
>  6 09:33:59: VT[Vi1294]:Clone Vaccess from Virtual-Template1 (40
>  bytes) 6 09:33:59: VT[Vi1294]:no ip redirects
>  6 09:33:59: VT[Vi1294]:no ip unreachables
>  6 09:33:59: VT[Vi1294]:end
>  6 09:33:59: VT[Vi1294]:ip unnumbered Loopback0
>  6 09:33:59: VT[Vi1294]:Applying config commands on process "VTEMPLATE
> Background Mgr" (175)
>  6 09:33:59: VT[Vi1294]:no ip redirects
>  6 09:33:59: VT[Vi1294]:no ip unreachables
>  6 09:33:59: VT[Vi1294]:end
>  6 09:33:59: VT[Vi1294]:MTUs ip 1500, sub 1500, max 1500, default 1500
>  6 09:33:59: VT[Vi1294]:Processing vaccess response, id 0x8E0108BC,
> result success (1)
>  6 09:33:59: %LINK-3-UPDOWN: Interface Virtual-Access1294, changed
> state to up
>  6 09:33:59: AAA/AUTHOR: Processing PerUser AV interface-config
>  6 09:33:59: VT:Sending vaccess request, id 0x6B000BF9
>  6 09:33:59: VT:Processing vaccess requests, 1 outstanding
>  6 09:33:59: VT[Vi1294]:Added new AAA cloneblk, now cloning from
> vtemplate/AAA
>  6 09:33:59: VT[Vi1294]:Clone Vaccess from AAA (38 bytes)
>  6 09:33:59: VT[Vi1294]:service-policy output policy-256
>  6 09:33:59: VT[Vi1294]:end
>  6 09:33:59: VT[Vi1294]:Applying config commands on process "VTEMPLATE
> Background Mgr" (175)
>  6 09:33:59: VT[Vi1294]:service-policy output policy-256
>  6 09:33:59: VT[Vi1294]:end
>  6 09:33:59: VT[Vi1294]:MTUs ip 1500, sub 1500, max 1500, default 1500
>  6 09:33:59: VT[Vi1294]:Processing vaccess response, id 0x6B000BF9,
> result clone error (4)
>  6 09:33:59: VT[Vi1294]:Processing request to free vaccess
>  6 09:33:59: VT[Vi1294]:Waiting for the free request to finish
>  6 09:33:59: VT[Vi1294]:Vaccess free request complete, reference id
>  151 6 09:33:59: %LINK-3-UPDOWN: Interface Virtual-Access1294,
> changed state to down
> 
> 
> Pshem Kowalczyk wrote:
>> Hi,
>> 
>> We had similar issue with 7301. The way we got it sorted is by using
>> different AV-Pair: 
>> 
>> Cisco-AVPair = "lcp:interface-config=service-policy output
>> policy-256" 
>> 
>> and policy on the router:
>> 
>> policy-map policy-256
>>  description Default shaping policy
>>   class class-default
>>    police 256000 48000 96000 conform-action transmit  exceed-action
>> drop  violate-action drop 
>> 
>> We used to have a lot of 7301 terminating UBS from TCNZ, if you need
>> any more help - contact me please off the list.
>> 
>> kind regards
>> Pshem
>> 
>> On 05/11/2007, Mike Cooper <m.cooper at actrix.co.nz> wrote:
>> 
>>> Hi all,
>>> 
>>> I have a Cisco 7301 router (12.3(4r)T2) in use terminating ADSL
>>> sessions. 
>>> 
>>> I'm attempting to use AV-Pairs to rate limit the virtual-access
>>> interfaces, however am running into an issue with the virtual-access
>>> interface dropping out on applying the rate limiting.
>>> 
>>> My configuration seems correct as the AVpair is being received and
>>> processed. 
>>> 
>>> This functionality was previously working on a 7206vxr.
>>> 
>>> The database field size storing the AVpair is somewhat short, so am
>>> using the bare minimum of characters to complete the command (this
>>> could be changed to facilitate typing the full command, but not
>>> sure it'd change things): lcp:interface-config=rat out 256000 48000
>>> 96000 con tra exc dro 
>>> 
>>> Any suggestions gratefully received:
>>> 
>>> --
>>> Mike Cooper
>>> Systems Engineer
>>> 
>>> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/