Cisco 10000 Series Configuration Manual page 108

Configuration Examples of RADIUS-Based Shaping and Policing
permit ip any 192.168.6.0 0.0.0.255
permit ip any 192.168.5.7 0.0.0.64
The following Cisco VSA is configured in a user profile on RADIUS. This VSA changes the policing
rate of the Premium class in the Child policy. The Child policy is applied to the class-default class of the
Parent policy.
RADIUS Configuration
radius subscriber 6
framed protocol ppp
service framed
vsa cisco generic 1 string "qos-policy-out=add-class(sub,(class-default, Premium),
police(200000))"
The ISG receives the following RADIUS Access-Accept message. Notice that the above Cisco VSA
configured in the user's profile is present in the Access-Accept message.
RADIUS Access-Accept Message
1d21h: RADIUS: Received from id 1645/3 192.168.1.6:1812, Access-Accept, len 100
1d21h: RADIUS: authenticator 4A 2C F7 05 4B 88 38 64 - DE 60 69 5A 4B EE 43 E1
1d21h: RADIUS: Framed-Protocol [7] 6 PPP [1]
1d21h: RADIUS: Service-Type [6] 6 Framed [2]
1d21h: RADIUS: Vendor, Cisco [26] 68
1d21h: RADIUS: Cisco AVpair [1] 62 "qos-policy-out=add-class(sub,(class-default, Premium),
police(200000))"
1d21h: RADIUS(0000000D): Received from id 1645/3
1d21h: SSS PM [uid:4][65ADE2E8]: SERVICE: Adding Service attachment to event
1d21h: RADIUS/ENCODE(0000000D):Orig. component type = PPoE
1d21h: RADIUS(0000000D): Config NAS IP: 0.0.0.0
1d21h: RADIUS(0000000D): sending
The ISG copies the service policy that is currently applied to the session and creates a transient policy
named New_Parent to which it makes the appropriate changes. Based on the Cisco VSA included in the
Access-Accept message, the ISG adds the policing rate to the Premium traffic class. The Premium class
is configured in the transient New_Child policy, which is applied to the New_Parent class-default class.
ISG Transient Policy
policy-map New_Child
class Premium
!
policy-map New_Parent
class class-default
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
6-18
police 200000
shape average 5000
shape average 10000
service-policy New_Child
Chapter 6
[New cloned child policy]
[New policing rate]
[New cloned parent policy]
[New cloned child policy attached to the new
cloned parent policy]
RADIUS-Based Shaping and Policing
OL-14660-03