Showing results for 
Search instead for 
Did you mean: 

service policy aaa attribute to vpdn sessions on LNS router

hi all

im trying to send radius attribute to vi access host on users of LNS router .

i finally succeded in sending it to (vi access x interface )  and it is ok ===> i mean that the command "service-policy output xxx" is seen under virtual-access xx interface .

but ...............................

i cant use traffic shape nor bandwith command inside this policmap !!!!

if inlcuded the shape or bandwidtht commands , the users that gave him the attribute  cant be authenticated from radius and fail  !!!!

it give me error 651 in ppp session .

i mean that i only can use "police  cir "by policy map so that user success !!!

if i use bandwisht ot shape command , the user cant access and be authenticated !!!

the question is why ??

does pppoe adsl users cant be shaped by policy map ???

is it issue in ios ??

here is my router & ios

Drvirus#sh version

Cisco IOS Software, 7200 Software (C7200P-ADVENTERPRISEK9-M), Version 12.4(24)T7, RELEASE SOFTWARE (fc2)

Technical Support:

Copyright (c) 1986-2012 by Cisco Systems, Inc.

Compiled Tue 28-Feb-12 12:53 by prod_rel_team

ROM: System Bootstrap, Version 12.4(12.2r)T, RELEASE SOFTWARE (fc1)

Bras1 uptime is 4 days, 3 hours, 40 minutes

System returned to ROM by reload at 05:43:50 GMT+3 Fri Jul 11 2003

System image file is "disk2:c7200p-adventerprisek9-mz.124-24.T7.bin"

Last reload reason: Reload Command

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to

Cisco 7206VXR (NPE-G2) processor (revision A) with 917504K/65536K bytes of memory.

Processor board ID 36858624

MPC7448 CPU at 1666Mhz, Implementation 0, Rev 2.2

6 slot VXR midplane, Version 2.11

Last reset from power-on

PCI bus mb1 (Slots 1, 3 and 5) has a capacity of 600 bandwidth points.

Current configuration on bus mb1 has a total of 0 bandwidth points.

This configuration is within the PCI bus capacity and is supported.

PCI bus mb2 (Slots 2, 4 and 6) has a capacity of 600 bandwidth points.

Current configuration on bus mb2 has a total of 0 bandwidth points.

This configuration is within the PCI bus capacity and is supported.

Please refer to the following document "Cisco 7200 Series Port Adaptor

Hardware Configuration Guidelines" on <>

for c7200 bandwidth points oversubscription and usage guidelines.

1 FastEthernet interface

3 Gigabit Ethernet interfaces

2045K bytes of NVRAM.

250880K bytes of ATA PCMCIA card at slot 2 (Sector size 512 bytes).

65536K bytes of Flash internal SIMM (Sector size 512K).

Configuration register is 0x2102


hi all ,

im really exhausted about this issue

i googled alot , i have been googling about 1 week with no benefit !!!!!

i changed ios many times but no luck !!!!

i followed the navigatro tool of cisco , it say that cisco 7200 npeg2 dont support the feaute called

QoS: Per-Session Shaping and Queuing

i followed here

they say it supported for ios that supported with 7200

i found an old discsuuion on internet for guys about cisco 7200 for shap

i dont know

not sure

does cisco 7200 support shaping and bw gurantee for vpdn session on LNS router ?????????

i need an expert for that

plz help




I use cisco 7206vxr with PPPoVPDN and i send rate-limit attributs to traffic shapping for each vi access with no problem.

i use 15.1M4 IOS

you can use cisco_av pair attributs to accomplish this and sending the rate-limit to each vi access.

Hope that can help you



hi ,

thanks alot for reply ,

but .............

wt do u mean with rate-limit with shape ??

rate limit is considerrd as police

but shape is another issue , it is better than police becuase it buffer when there is congestion .

for me  ,  rate-limit is fine without ptoblems , but

the problem  is when we apply shaping on the vi acccess interface

the vi cant get the command policy map !!!



You don't need to applicy any policy-map

you just send the rate-limit attribut to the interface via cisco av pairs. this will make limits for your users based on their speeds category

i don't where is your problem ?


Could you provide me how much PPPoVPDN users in one LNS you have?

Because i have this thread hope you help me too

I have a high CPU Interrupt rate problem.

Let us help both.



hi ,

you are missunderstanding me

polic not equal to shape

i wish u  google and find  the difference between them



Listen, whatever what i understood, i think finally you need to limit download and upload for your PPPoVPDN customers? is this right ? then you can use what i mention above.

Tell me if am i right !!



ohhhhh noooo ,

u still wrong !

uplad is not an issue to be enahced , the download bw is always congestion , so our work is  only for download



OK, you need to limit ur users for their download speed, or download types ?

i think you need to make some qos for your users to make some pirorities to their traffic like voice,rtp, http ... etc ?

Content for Community-Ad