[c-nsp] ios vs ios-xe: interrface config rate-limit (Mike)
Daniel Söderström
soderstrom at hotmail.com
Fri Jul 10 03:00:27 EDT 2015
Hi,
Only used the configuration in the ASR 9K BNG, but the radius attributes
should be the same
Below are some examples used in the 9K
cisco-avpair +=
“ip:qos-policy-out=add-class(sub,(class-default),shape(106496))”,
cisco-avpair +=
“ip:qos-policy-out=add-class(sub,(class-default,voip),prilevel(1),police(136
00,9216,transmit,drop),queue-limit(8),set-cos(5))",
cisco-avpair +=
"ip:qos-policy-out=add-class(sub,(class-default,video),bw-pct(44),queuelimit
(16),set-cos(1))",
cisco-avpair +=
“ip:qos-policy-out=add-class(sub,(class-default,gaming),bw-pct(28),queuelimi
t(16),set-cos(1))”,
cisco-avpair +=
"ip:qos-policy-out=add-class(sub,(class-default,hd),bw-pct(28),queuelimit(32
),set-cos(0))"
Cisco published the document below which can be found if you're google
savvy.
https://supportforums.cisco.com/document/12516486/asr9k-bng-radius-and-coa-d
eployment-guide
Hope it helps
Regards
Daniel
-----Ursprungligt meddelande-----
Från: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] För
cisco-nsp-request at puck.nether.net
Skickat: den 10 juli 2015 02:33
Till: cisco-nsp at puck.nether.net
Ämne: cisco-nsp Digest, Vol 152, Issue 14
Send cisco-nsp mailing list submissions to
cisco-nsp at puck.nether.net
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/cisco-nsp
or, via email, send a message with subject or body 'help' to
cisco-nsp-request at puck.nether.net
You can reach the person managing the list at
cisco-nsp-owner at puck.nether.net
When replying, please edit your Subject line so it is more specific than
"Re: Contents of cisco-nsp digest..."
Today's Topics:
1. Network monitoring / NMS software (Scott Granados)
2. Re: Network monitoring / NMS software (Joe Pruett)
3. Re: Network monitoring / NMS software (chip)
4. Re: Network monitoring / NMS software (Vijay S)
5. Re: Network monitoring / NMS software (Azher Mughal)
6. Re: Network monitoring / NMS software (Laurens Vets)
7. ios vs ios-xe: interrface config rate-limit (Mike)
8. Re: ios vs ios-xe: interrface config rate-limit (Andrew Jones)
----------------------------------------------------------------------
Message: 1
Date: Thu, 9 Jul 2015 16:51:37 +0000
From: Scott Granados <scott at granados-llc.net>
To: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
Subject: [c-nsp] Network monitoring / NMS software
Message-ID: <C252F80F-2885-4DF0-8C2B-A89D8419310A at granados-llc.net>
Content-Type: text/plain; charset="utf-8"
I know this question comes up from time to time and I?ve myself asked it
before but it was a while ago and some recent googling seems to indicate the
landscape has changed a lot.
I?m looking for recommendations for monitoring software. Basic alerting,
SNMP polling, trap handling, reporting, auto discovery and the other general
features. Server monitoring would be a nice plus or at least a method of
adding on that functionality.
Open NMS is grabbing my interest so far but I?m wondering about commercial
packages and the advantages of having a vendor to call on especially
considering we?re a small startup operation so far. Wonder what people are
using, what open source or commercial platforms have you tried? The only
real requirement I have in terms of environment is that the platform runs
under Linux and not windows only. We?re a non windows shop so can?t and
won?t install a single instance of Windows server just to run monitoring.
Any pointers and advice folks have would be greatly appreciated. Also anyone
using open NMS specifically who has any real world experience and comments
would be appreciated but I?m interested in anything being used and your
opinions.
Thanks
Scott
------------------------------
Message: 2
Date: Thu, 9 Jul 2015 09:56:25 -0700
From: Joe Pruett <joey at spiretech.com>
To: Scott Granados <scott at granados-llc.net>,
"cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
Subject: Re: [c-nsp] Network monitoring / NMS software
Message-ID: <559EA7B9.40403 at spiretech.com>
Content-Type: text/plain; charset=utf-8
i just went through this, trying to see if i wanted to move away from zenoss
as the new zenoss 5 is a devops created nightmare. in the end i decided that
zenoss 4.2.5 is what still makes the most sense. i don't know if it will get
any more updates, but it does a decent job of all the things i want.
On 07/09/2015 09:51 AM, Scott Granados wrote:
> I know this question comes up from time to time and I?ve myself asked it
before but it was a while ago and some recent googling seems to indicate the
landscape has changed a lot.
>
> I?m looking for recommendations for monitoring software. Basic alerting,
SNMP polling, trap handling, reporting, auto discovery and the other general
features. Server monitoring would be a nice plus or at least a method of
adding on that functionality.
> Open NMS is grabbing my interest so far but I?m wondering about commercial
packages and the advantages of having a vendor to call on especially
considering we?re a small startup operation so far. Wonder what people are
using, what open source or commercial platforms have you tried? The only
real requirement I have in terms of environment is that the platform runs
under Linux and not windows only. We?re a non windows shop so can?t and
won?t install a single instance of Windows server just to run monitoring.
Any pointers and advice folks have would be greatly appreciated. Also anyone
using open NMS specifically who has any real world experience and comments
would be appreciated but I?m interested in anything being used and your
opinions.
>
> Thanks
> Scott
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
------------------------------
Message: 3
Date: Thu, 9 Jul 2015 12:59:58 -0400
From: chip <chip.gwyn at gmail.com>
To: Scott Granados <scott at granados-llc.net>
Cc: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
Subject: Re: [c-nsp] Network monitoring / NMS software
Message-ID:
<CABGzhdsFkAFjWACn+KP+iEBnGXnmSBcm03DiC_oKJoxt5QMQ7w at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
http://www.librenms.org/ is looking pretty good these days. Doesn't do
traps that I'm aware of though. It's pretty good for most networking gear.
On Thu, Jul 9, 2015 at 12:51 PM, Scott Granados <scott at granados-llc.net>
wrote:
> I know this question comes up from time to time and I?ve myself asked
> it before but it was a while ago and some recent googling seems to
> indicate the landscape has changed a lot.
>
> I?m looking for recommendations for monitoring software. Basic
> alerting, SNMP polling, trap handling, reporting, auto discovery and
> the other general features. Server monitoring would be a nice plus or
> at least a method of adding on that functionality.
> Open NMS is grabbing my interest so far but I?m wondering about
> commercial packages and the advantages of having a vendor to call on
> especially considering we?re a small startup operation so far. Wonder
> what people are using, what open source or commercial platforms have
> you tried? The only real requirement I have in terms of environment
> is that the platform runs under Linux and not windows only. We?re a
> non windows shop so can?t and won?t install a single instance of Windows
server just to run monitoring.
> Any pointers and advice folks have would be greatly appreciated. Also
> anyone using open NMS specifically who has any real world experience
> and comments would be appreciated but I?m interested in anything being
> used and your opinions.
>
> Thanks
> Scott
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
--
Just my $.02, your mileage may vary, batteries not included, etc....
------------------------------
Message: 4
Date: Thu, 9 Jul 2015 22:37:33 +0530
From: Vijay S <vijay.hcr at gmail.com>
To: chip <chip.gwyn at gmail.com>
Cc: cisco-nsp at puck.nether.net, Scott Granados <scott at granados-llc.net>
Subject: Re: [c-nsp] Network monitoring / NMS software
Message-ID:
<CAPTJ3-ffQZ4Pcaeg=U4TDw2wtMPaiueen8d=XDA_C3GwWA4EBw at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Looking pretty good in the demo. Must get hands on . Will surely update on
this.
Regards
Vijay A.
On Jul 9, 2015 10:30 PM, "chip" <chip.gwyn at gmail.com> wrote:
> http://www.librenms.org/ is looking pretty good these days. Doesn't do
> traps that I'm aware of though. It's pretty good for most networking
gear.
>
>
> On Thu, Jul 9, 2015 at 12:51 PM, Scott Granados <scott at granados-llc.net>
> wrote:
>
> > I know this question comes up from time to time and I?ve myself asked it
> > before but it was a while ago and some recent googling seems to indicate
> > the landscape has changed a lot.
> >
> > I?m looking for recommendations for monitoring software. Basic
alerting,
> > SNMP polling, trap handling, reporting, auto discovery and the other
> > general features. Server monitoring would be a nice plus or at least a
> > method of adding on that functionality.
> > Open NMS is grabbing my interest so far but I?m wondering about
> commercial
> > packages and the advantages of having a vendor to call on especially
> > considering we?re a small startup operation so far. Wonder what people
> are
> > using, what open source or commercial platforms have you tried? The
only
> > real requirement I have in terms of environment is that the platform
runs
> > under Linux and not windows only. We?re a non windows shop so can?t and
> > won?t install a single instance of Windows server just to run
monitoring.
> > Any pointers and advice folks have would be greatly appreciated. Also
> > anyone using open NMS specifically who has any real world experience and
> > comments would be appreciated but I?m interested in anything being used
> and
> > your opinions.
> >
> > Thanks
> > Scott
> >
> >
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>
>
> --
> Just my $.02, your mileage may vary, batteries not included, etc....
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
------------------------------
Message: 5
Date: Thu, 9 Jul 2015 10:17:54 -0700
From: Azher Mughal <azher at hep.caltech.edu>
To: Vijay S <vijay.hcr at gmail.com>, chip <chip.gwyn at gmail.com>
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Network monitoring / NMS software
Message-ID: <559EACC2.5060600 at hep.caltech.edu>
Content-Type: text/plain; charset=utf-8
Try the Ubuntu Image which is all pre-configured, saves lots of time. I
am using it under a CentOS KVM installation.
Once you are logged in then go to /opt/librenms and issue 'git pull' to
get the latest updates.
The only caveats you might come across is the size of disk space which
is 10GB at the moment, but of course this can be expanded later.
Cheers
-Azher
On 7/9/2015 10:07 AM, Vijay S wrote:
> Looking pretty good in the demo. Must get hands on . Will surely update on
> this.
>
> Regards
> Vijay A.
> On Jul 9, 2015 10:30 PM, "chip" <chip.gwyn at gmail.com> wrote:
>
>> http://www.librenms.org/ is looking pretty good these days. Doesn't do
>> traps that I'm aware of though. It's pretty good for most networking
gear.
>>
>>
>> On Thu, Jul 9, 2015 at 12:51 PM, Scott Granados <scott at granados-llc.net>
>> wrote:
>>
>>> I know this question comes up from time to time and I?ve myself asked it
>>> before but it was a while ago and some recent googling seems to indicate
>>> the landscape has changed a lot.
>>>
>>> I?m looking for recommendations for monitoring software. Basic
alerting,
>>> SNMP polling, trap handling, reporting, auto discovery and the other
>>> general features. Server monitoring would be a nice plus or at least a
>>> method of adding on that functionality.
>>> Open NMS is grabbing my interest so far but I?m wondering about
>> commercial
>>> packages and the advantages of having a vendor to call on especially
>>> considering we?re a small startup operation so far. Wonder what people
>> are
>>> using, what open source or commercial platforms have you tried? The
only
>>> real requirement I have in terms of environment is that the platform
runs
>>> under Linux and not windows only. We?re a non windows shop so can?t and
>>> won?t install a single instance of Windows server just to run
monitoring.
>>> Any pointers and advice folks have would be greatly appreciated. Also
>>> anyone using open NMS specifically who has any real world experience and
>>> comments would be appreciated but I?m interested in anything being used
>> and
>>> your opinions.
>>>
>>> Thanks
>>> Scott
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> cisco-nsp mailing list cisco-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>>
>>
>> --
>> Just my $.02, your mileage may vary, batteries not included, etc....
>> _______________________________________________
>> cisco-nsp mailing list cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
------------------------------
Message: 6
Date: Thu, 09 Jul 2015 12:29:32 -0700
From: Laurens Vets <laurens at daemon.be>
To: <cisco-nsp at puck.nether.net>
Subject: Re: [c-nsp] Network monitoring / NMS software
Message-ID: <2159781c831a31baa3f59b33536c9e93 at daemon.be>
Content-Type: text/plain; charset=UTF-8; format=flowed
Give Observium a try, http://www.observium.org/. It has always worked
fine for me. It doesn't do traps though.
Btw, LibreNMS is a fork of Observium.
On 2015-07-09 09:51, Scott Granados wrote:
> I know this question comes up from time to time and I?ve myself asked
> it before but it was a while ago and some recent googling seems to
> indicate the landscape has changed a lot.
>
> I?m looking for recommendations for monitoring software. Basic
> alerting, SNMP polling, trap handling, reporting, auto discovery and
> the other general features. Server monitoring would be a nice plus or
> at least a method of adding on that functionality.
> Open NMS is grabbing my interest so far but I?m wondering about
> commercial packages and the advantages of having a vendor to call on
> especially considering we?re a small startup operation so far. Wonder
> what people are using, what open source or commercial platforms have
> you tried? The only real requirement I have in terms of environment
> is that the platform runs under Linux and not windows only. We?re a
> non windows shop so can?t and won?t install a single instance of
> Windows server just to run monitoring. Any pointers and advice folks
> have would be greatly appreciated. Also anyone using open NMS
> specifically who has any real world experience and comments would be
> appreciated but I?m interested in anything being used and your
> opinions.
>
> Thanks
> Scott
------------------------------
Message: 7
Date: Thu, 09 Jul 2015 17:21:14 -0700
From: Mike <mike-cisconsplist at tiedyenetworks.com>
To: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
Subject: [c-nsp] ios vs ios-xe: interrface config rate-limit
Message-ID: <559F0FFA.6010807 at tiedyenetworks.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Hi,
I have an ASR1000 running IOS-XE 3.10.5S configured to terminate
PPPoE sessions. It is going to be the upgrade/replacement for a 7201
running 12.2(33)-SRE7.
I have discovered that there doesn't seem to be feature pairity
between these which prevents some of my account profiles from working
properly. Chief among these is that I have rate limiting in my
subscriber radius profiles and it looks like this:
Cisco-AVPair += lcp:interface-config=rate-limit input 1000000 18750
37500 conform-action transmit exceed-action drop
Cisco-AVPair += lcp:interface-config=rate-limit output 6000000 1125000
2250000 conform-action transmit exceed-action drop
This establishes a 6mbps download and 1mbps upload speed for that
particular user profile, and works like a charm on the 7201. But when I
try to establish a PPPoE session on the ASR, under debug, I see that
'rate-limit' is being rejected by the cisco parser and the session
doesn't come up because of the errors. So apparently 'rate-limit' isn't
a command I can apply to interfaces under IOS-XE.
So, question - How do I establish rate limits for PPPoE users
under IOS-XE? I haven't seen a good explanation of how it's supposed to
work. The cisco documentation talks around the general issue but doesn't
actually present a working example and I'm lost.
Help!
Mike-
------------------------------
Message: 8
Date: Fri, 10 Jul 2015 10:32:28 +1000
From: Andrew Jones <aj at jonesy.com.au>
To: <cisco-nsp at puck.nether.net>
Subject: Re: [c-nsp] ios vs ios-xe: interrface config rate-limit
Message-ID: <2635f7c7784aff90bd5d7c3908725624 at jonesy.com.au>
Content-Type: text/plain; charset=UTF-8; format=flowed
Hi Mike,
You can apply a policy map (which contains a shaper or rate-limiter) in
each direction:
Cisco-AVPair += ip:sub-qos-policy-in=10Mbps-rate-limit
Cisco-AVPair += ip:sub-qos-policy-out=10Mbps-rate-limit
policy-map 10Mbps-rate-limit
class class-default
police 10240000 1920000 3840000 conform-action transmit
exceed-action drop
Hope that's useful,
Andrew
On 10.07.2015 10:21, Mike wrote:
> Hi,
>
> I have an ASR1000 running IOS-XE 3.10.5S configured to terminate
> PPPoE sessions. It is going to be the upgrade/replacement for a 7201
> running 12.2(33)-SRE7.
>
> I have discovered that there doesn't seem to be feature pairity
> between these which prevents some of my account profiles from working
> properly. Chief among these is that I have rate limiting in my
> subscriber radius profiles and it looks like this:
>
>
> Cisco-AVPair += lcp:interface-config=rate-limit input 1000000 18750
> 37500 conform-action transmit exceed-action drop
> Cisco-AVPair += lcp:interface-config=rate-limit output 6000000
> 1125000 2250000 conform-action transmit exceed-action drop
>
> This establishes a 6mbps download and 1mbps upload speed for that
> particular user profile, and works like a charm on the 7201. But when
> I try to establish a PPPoE session on the ASR, under debug, I see
> that
> 'rate-limit' is being rejected by the cisco parser and the session
> doesn't come up because of the errors. So apparently 'rate-limit'
> isn't a command I can apply to interfaces under IOS-XE.
>
> So, question - How do I establish rate limits for PPPoE users
> under IOS-XE? I haven't seen a good explanation of how it's supposed
> to work. The cisco documentation talks around the general issue but
> doesn't actually present a working example and I'm lost.
>
> Help!
>
> Mike-
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
------------------------------
Subject: Digest Footer
_______________________________________________
cisco-nsp mailing list
cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
------------------------------
End of cisco-nsp Digest, Vol 152, Issue 14
******************************************
More information about the cisco-nsp
mailing list