Setting The Policing Rate Using An Access-Accept - Cisco 10000 Series Configuration Manual

Chapter 6 RADIUS-Based Shaping and Policing
RADIUS CoA Message
1d21h: RADIUS: COA received from id 0 192.168.1.6:1700, CoA Request, len 106
1d21h: COA: 192.168.1.6 request queued
1d21h: RADIUS: authenticator FF A2 6B 63 06 F0 E6 A3 - 0D 04 6C DC 01 0A BE F1
1d21h: RADIUS: Vendor, Cisco [26] 18
1d21h: RADIUS: ssg-account-info [250] 12 "S192.168.1.2"
1d21h: RADIUS: Vendor, Cisco [26] 68
1d21h: RADIUS: Cisco AVpair [1] 62 "qos-policy-out=add-class(sub,(class-default),
shape(120000))"
1d21h: ++++++ CoA Attribute List ++++++
1d21h: 63C829B0 0 00000009 ssg-account-info(427) 10 S192.168.1.2
1d21h: 63C82A18 0 00000009 qos-policy-out(378) 45 add-class(sub,(class-default),
shape(120000))
1d21h:
ISG#
1d21h: RADIUS(00000000): sending
1d21h: RADIUS(00000000): Send CoA Ack Response to 192.168.1.6:1700 id 0, len 65
1d21h: RADIUS: authenticator 62 B4 B0 1A 90 10 01 01 - F6 C8 CD 17 79 15 C7 A7
1d21h: RADIUS: Vendor, Cisco [26] 18
1d21h: RADIUS: ssg-account-info [250] 12 "S192.168.1.2"
1d21h: RADIUS: Vendor, Cisco [26] 27
1d21h: RADIUS: ssg-account-info [250] 21 "$IVirtual-Access2.2"
The ISG copies the service policy named Parent currently applied to the session and creates a transient
copy named New_Parent to which it makes the appropriate changes. Based on the Cisco VSA included
in the CoA message, the ISG changes the shaping rate of the parent class-default class to 120,000 bps.
However, the shaping rate displayed in the transient New_Parent policy is the old rate of 10,000, as seen
in the following example. The child policy remains unchanged
ISG Transient Policy
policy-map Child
policy-map New_Parent

Setting the Policing Rate Using an Access-Accept

This configuration example uses a RADIUS Access-Accept message to change the policing rate of a
traffic class at the child level of a hierarchical policy.
ISG Original Policy
class-map match-any Premium
!
policy-map Child
!
policy-map Parent
!
ip access-list extended Premium_Dest
OL-14660-03
class Premium
shape average 5000
class class-default
shape average 10000
service-policy Child
match access-group name Premium_Dest
class Premium
shape average 5000
class class-default
shape average 10000
service-policy Child
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
Configuration Examples of RADIUS-Based Shaping and Policing
[New cloned parent policy]
6-17