Setting Up Radius For Per Session Queuing And Shaping - Cisco 10000 Series Configuration Manual

Shaping PPPoE Over VLAN Sessions Using RADIUS
Configuration Example for Configuring a Per Session Queuing and Shaping Policy on the Router
Example 17-22
PPPoE over VLAN sessions using RADIUS. The example creates two traffic classes: Voice and Video.
The router classifies traffic that matches IP precedence 5 as Voice traffic and traffic that matches IP
precedence 3 as Video traffic. The Child policy map gives priority to Voice traffic and polices traffic at
2400 kbps. The Video class is allocated 80 percent of the remaining bandwidth and has ATM overhead
accounting enabled. The Child policy is applied to the class-default class of the Parent policy map, which
receives 20 percent of the remaining bandwidth and shapes traffic to 10000 bps, and enables ATM
overhead accounting.
Example 17-22 Configuring a Per Session Queuing and Shaping Policy on the Router
Router(config)# class-map Voice
Router(config-cmap)# match ip precedence 5
Router(config-cmap)# class-map Video
Router(config-cmap)# match ip precedence 3
!
Router(config)# policy-map Child
Router(config-pmap)# class Voice
Router(config-pmap-c)# priority
Router(config-pmap-c)# police 2400 9216 0 conform-action transmit exceed-action drop
violate-action drop
Router(config-pmap-c)# class video
Router(config-pmap-c)# bandwidth remaining percent 80 account aal5 snap-dot1q-rbe
Router(config-pmap-c)# exit
Router(config-pmap)# exit
Router(config)# policy-map Parent
Router(config-pmap)# class class-default
Router(config-pmap-c)# shape 10000 account dot1q snap-dot1q-rbe
Router(config-pmap-c)# service-policy Child

Setting Up RADIUS for Per Session Queuing and Shaping

The router allows you to apply QoS policy maps using RADIUS. The actual configuration of the policy
map occurs on the router using the modular QoS CLI (MQC). The router can apply the QoS policy to
sessions using attributes defined in one of the following RADIUS profiles:
•
•
The following AV-pairs define the QoS policy to be applied dynamically to the session:
"ip:sub-qos-policy-in=<name of the QoS policy in ingress direction>"
"ip:sub-qos-policy-out=<name of egress policy>"
After receiving a service-logon request from the policy server, RADIUS sends a change of authorization
(CoA) request to the router to activate the service for the subscriber, who is already logged in. If the
authorization succeeds, the router downloads the name of the policy map from RADIUS using the above
attribute and applies the QoS policy to the session.
Cisco 10000 Series Router Quality of Service Configuration Guide
17-40
shows how to configure a per session queuing and shaping policy on the router for
User Profile—The user profile on the RADIUS server contains an entry that identifies the policy
map name applicable to the user. The policy map name is the service that RADIUS downloads to
the router after a session is authorized.
Service Profile—The service profile on the RADIUS server specifies a session identifier and an
attribute-value (AV) pair. The session identifier might be, for example, the IP address of the session.
The AV-pair defines the service (policy map name) to which the user belongs.
Chapter 17 Configuring Dynamic Subscriber Services
OL-7433-09