cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1496
Views
0
Helpful
1
Replies

ISG with DHCP Option 82 sessions

ssurdock
Level 1
Level 1

Greetings, I'm looking to roll out a GPON deployment using the ISG as our BRAS with DHCP-based sessions but we are experience some problems with session restart.  Were using an external DHCP server and RADIUS.  Sessions come up fine the first time, but if there is an existing session and the CPE node is rebooted the session get's "stuck". To clear the session we turn off the CPE device, clear the state in the GPON shelf and wait for more than 5 minutes.  Doing some debug shows the SG-DPM process thinking there is an existing DHCP lease that seems to clear out after five minutes of "silence".  I'd like to get this five minutes down to something in the less than 60 seconds range.  Anybody know of any knobs to tweak this?

Dec  2 12:49:19.642 EST: SG-DPM: getting the context for mac_address = 0024.c823.7322
Dec  2 12:49:19.642 EST: SG-DPM: input override for mac_address = 0024.c823.7322
Dec  2 12:49:19.642 EST: SG-DPM: null input interface from dhcp,returning access interface GigabitEthernet0/3.300
Dec  2 12:49:19.642 EST: SG-DPM: DHCP Offer notification from client, mac_address = 0024.c823.7322
Dec  2 12:49:19.642 EST: SG-DPM: getting the context for mac_address = 0024.c823.7322
Dec  2 12:49:19.642 EST: SG-DPM: Aborting update. IP address: 10.2.2.162 hasn't changed

Running 12.2 (31) SB19 with the following code snippet:

aaa authorization subscriber-service USER_LOGON group radius


policy-map type control USER
class type control always event session-start
  20 authorize aaa list USER_LOGON password blablabla identifier circuit-id
  30 service disconnect
!


interface GigabitEthernet0/3.300
encapsulation dot1Q 300
ip dhcp relay information trusted
ip address 10.1.1.1 255.255.255.224
ip helper-address 10.10.10.10
no cdp enable
service-policy type control USER
ip subscriber l2-connected
  initiator dhcp

1 Reply 1

Shelley Bhalla
Level 3
Level 3

Try...

If the session is still un an unauthenticated state setting the unauthe timer will help:

class type control always event session-start
  25 set-timer IP_UNAUTH_TIMER 6

But if the session is authenticated then it is suggested to set a idle timeout value like this:

policy-map type service IDLE_TIME_SERVICE
class type traffic IDLE_TIME
  timeout idle 600

class type control always event session-start
24 service-policy type service name IDLE_TIME_SERVICE

Shelley.