Re: service policy aaa attribute to vpdn sessions on LNS router

Dr.X · ‎01-18-2014

hi all

im trying to send radius attribute to vi access host on users of LNS router .

i finally succeded in sending it to (vi access x interface ) and it is ok ===> i mean that the command "service-policy output xxx" is seen under virtual-access xx interface .

but ...............................

i cant use traffic shape nor bandwith command inside this policmap !!!!

if inlcuded the shape or bandwidtht commands , the users that gave him the attribute cant be authenticated from radius and fail !!!!

it give me error 651 in ppp session .

i mean that i only can use "police cir "by policy map so that user success !!!

if i use bandwisht ot shape command , the user cant access and be authenticated !!!

the question is why ??

does pppoe adsl users cant be shaped by policy map ???

is it issue in ios ??

here is my router & ios

Drvirus#sh version

Cisco IOS Software, 7200 Software (C7200P-ADVENTERPRISEK9-M), Version 12.4(24)T7, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Compiled Tue 28-Feb-12 12:53 by prod_rel_team

ROM: System Bootstrap, Version 12.4(12.2r)T, RELEASE SOFTWARE (fc1)

Bras1 uptime is 4 days, 3 hours, 40 minutes

System returned to ROM by reload at 05:43:50 GMT+3 Fri Jul 11 2003

System image file is "disk2:c7200p-adventerprisek9-mz.124-24.T7.bin"

Last reload reason: Reload Command

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 7206VXR (NPE-G2) processor (revision A) with 917504K/65536K bytes of memory.

Processor board ID 36858624

MPC7448 CPU at 1666Mhz, Implementation 0, Rev 2.2

6 slot VXR midplane, Version 2.11

Last reset from power-on

PCI bus mb1 (Slots 1, 3 and 5) has a capacity of 600 bandwidth points.

Current configuration on bus mb1 has a total of 0 bandwidth points.

This configuration is within the PCI bus capacity and is supported.

PCI bus mb2 (Slots 2, 4 and 6) has a capacity of 600 bandwidth points.

Current configuration on bus mb2 has a total of 0 bandwidth points.

This configuration is within the PCI bus capacity and is supported.

Please refer to the following document "Cisco 7200 Series Port Adaptor

Hardware Configuration Guidelines" on Cisco.com <http://www.cisco.com>

for c7200 bandwidth points oversubscription and usage guidelines.

1 FastEthernet interface

3 Gigabit Ethernet interfaces

2045K bytes of NVRAM.

250880K bytes of ATA PCMCIA card at slot 2 (Sector size 512 bytes).

65536K bytes of Flash internal SIMM (Sector size 512K).

Configuration register is 0x2102

Dr.X · ‎01-22-2014

hi all ,

im really exhausted about this issue

i googled alot , i have been googling about 1 week with no benefit !!!!!

i changed ios many times but no luck !!!!

i followed the navigatro tool of cisco , it say that cisco 7200 npeg2 dont support the feaute called

QoS: Per-Session Shaping and Queuing

i followed here

http://www.cisco.com/en/US/docs/ios/12_2sb/feature/guide/sbsbpssq.html

they say it supported for ios that supported with 7200

i found an old discsuuion on internet for guys about cisco 7200 for shap

i dont know

not sure

does cisco 7200 support shaping and bw gurantee for vpdn session on LNS router ?????????

i need an expert for that

plz help

regards

Nidal Safadi · ‎01-22-2014

Hey

I use cisco 7206vxr with PPPoVPDN and i send rate-limit attributs to traffic shapping for each vi access with no problem.

i use 15.1M4 IOS

you can use cisco_av pair attributs to accomplish this and sending the rate-limit to each vi access.

Hope that can help you

regards

Dr.X · ‎01-22-2014

hi ,

thanks alot for reply ,

but .............

wt do u mean with rate-limit with shape ??

rate limit is considerrd as police

but shape is another issue , it is better than police becuase it buffer when there is congestion .

for me , rate-limit is fine without ptoblems , but

the problem is when we apply shaping on the vi acccess interface

the vi cant get the command policy map !!!

regards

Nidal Safadi · ‎01-22-2014

You don't need to applicy any policy-map

you just send the rate-limit attribut to the interface via cisco av pairs. this will make limits for your users based on their speeds category

i don't where is your problem ?

Nidal Safadi · ‎01-22-2014

Could you provide me how much PPPoVPDN users in one LNS you have?

Because i have this thread hope you help me too

https://supportforums.cisco.com/message/4144685#4144685

I have a high CPU Interrupt rate problem.

Let us help both.

!

Dr.X · ‎01-22-2014

hi ,

you are missunderstanding me

polic not equal to shape

i wish u google and find the difference between them

regards

Nidal Safadi · ‎01-22-2014

Listen, whatever what i understood, i think finally you need to limit download and upload for your PPPoVPDN customers? is this right ? then you can use what i mention above.

Tell me if am i right !!

regards

Dr.X · ‎01-22-2014

ohhhhh noooo ,

u still wrong !

uplad is not an issue to be enahced , the download bw is always congestion , so our work is only for download

regards

Nidal Safadi · ‎01-22-2014

OK, you need to limit ur users for their download speed, or download types ?

i think you need to make some qos for your users to make some pirorities to their traffic like voice,rtp, http ... etc ?