Feature History For Per Session Service Policy Using Radius; Restrictions And Limitations For Per Session Service Policy Using Radius - Cisco 10000 Series Configuration Manual

Subscriber-Based IP Quality of Service
The RADIUS server authenticates a user before the server downloads the VSA that is in the user profile.
Note
The RADIUS server does not communicate changes to the Cisco 10000 series router until user
authentication occurs.
The configuration of per session service policy involves the following:
1.
2.
3.
4.

Feature History for Per Session Service Policy Using RADIUS

Cisco IOS Release
Release 12.2(15)BX
Release 12.2(28)SB

Restrictions and Limitations for per Session Service Policy Using RADIUS

•
•
•
Cisco 10000 Series Router Quality of Service Configuration Guide
18-6
Configure traffic classes and the classification policy.
Configure the classification policy to define how the Cisco 10000 series router differentiates packets
from each other. Create a class map on the Cisco 10000 series router (see the
Limiting" section on page
selected criteria.
Associate class characteristics with each class of traffic.
After you define the classification policy, define the class characteristics to be applied to packets
belonging to a particular class. Create a policy map on the Cisco 10000 series router in which you
associate class characteristics with each class of traffic (see the
on page 18-3).
Download the name of the service policy from the RADIUS server.
You can use a VSA to make the configuration scalable. The service to which the user belongs (the
policy map name) resides on the RADIUS server. The Cisco 10000 series router downloads the
name of the policy map from the RADIUS server using the VSA in the user profile. The
Cisco-Policy-Up VSA 37 is used for upstream traffic coming from a subscriber and the
Cisco-Policy-Down VSA 38 is used for downstream traffic going toward a subscriber. The
PPP/VPDN client processes these VSA attributes.
Attach policies to the interface.
Description
The per session service policy using RADIUS feature was
introduced on the PRE2.
This feature was integrated in Cisco IOS
Release 12.2(28)SB for the PRE2.
The Cisco 10000 series router routes IP packets for PPPoA, PPPoE, and RBE sessions. Apply input
rate limiting to the packets coming from the client device to the Cisco 10000 series router. Apply
output rate limiting to the packets going to the client device from the Cisco 10000 series router.
You can also apply IP QoS to the PPP tunneled sessions at the L2TP network server (LNS). Apply
input rate limiting to the packets coming out of the L2TP tunnel and output rate limiting to the
packets going into the tunnel.
For PPPoA, PPPoE, PPP in L2TP, and RBE sessions, the Cisco 10000 series router supports the
following QoS features when no atm pxf queuing is enabled or the virtual circuit (VC) is a UBR
VC:
Rate limiting on each session in the input, output, or both input and output directions
–
18-3) using the match command to match and classify packets based on
Chapter 18 Regulating and Shaping Subscriber Traffic
"Per Session Rate
"Per Session Rate Limiting" section
Required PRE
PRE2
PRE2
OL-7433-09