Hi Alex, I am using 1k for ipoe. as http redirect is not supported in the session start, i have to do it on the service level when quota is zero. http redirect is for information purposes in order to inform the subscriber that the billing is zero and etc. I have 3 scenarios to implement 1) session starts but quota is 0 - how to redirect   2) bras receive quota 0 for a online user - how to redirect 3) bras receives quota >0 for an online user - how to disconnect from portal and activate normal service for the 1st scenario I am trying to do SERVICE_L4R: Cisco-Service-Info += "SERVICE_L4R" Cisco-AVpair += "traffic-class=input access-group 198" Cisco-AVpair += "traffic-class=output access-group 198" Cisco-AVpair += "ip:l4redirect=redirect to group REDIRECT_NOPAY" Cisco-AVPair += "ip:traffic-class=out default drop" Cisco-AVPair += "ip:traffic-class=in default drop" -======= policy-map type control ISG-CUSTOMERS-POLICY class type control ISG-IP-UNAUTH event timed-policy-expiry 1 service disconnect ! class type control always event session-start 10 authorize aaa list ISG-AUTH-1 identifier circuit-id 20 set-timer UNAUTH-TIMER 5 ! class type control always event session-restart 10 authorize aaa list ISG-AUTH-1 identifier circuit-id 20 set-timer UNAUTH-TIMER 5 ! class type control always event quota-depleted 1 set-param drop-traffic FALSE ! class type control always event credit-exhausted 1 service-policy type service name SERVICE_L4R ! class type control always event service-start 10 service-policy type service identifier service-name ! class type control always event service-stop 1 service-policy type service unapply identifier service-name ! But I do not know what kind of message I have to send from radius in order bras apply it . Or I am not doing correct ? Regards Tural ... View more

Hi Alex, This helped me a lot, thank you so much. Now I am trying to understand redirect on the service level. how QV0 message is sent from radius ? is it coa or what ?  Regards Tural ... View more

Hi Alex, Thank you so much for quick reply I am trying to apply this config. is it correct ? Cisco-AVPair += "subscriber:accounting-list=ISG-AUTH-1"                 Cisco-AVpair += "traffic-class=input access-group 108"                Cisco-AVpair += "traffic-class=output access-group 108"                Cisco-AVpair += "traffic-class=input access-group 109"                Cisco-AVpair += "traffic-class=output access-group 109"                 Cisco-AVPair += "ip:traffic-class=out default drop"                 Cisco-AVPair += "ip:traffic-class=in default drop"                 Cisco-AVPair += "ip:sub-qos-policy-in= IPOE-QOS "                 Cisco-AVPair += "ip:sub-qos-policy-in= IPOE-QOS "     Internet traffic excluding mediaserver   access-list 109 deny ip 10.1.2.0 0.0.0.255 any access-list 109 deny ip any 10.1.2.0 0.0.0.255   access-list 108 permit ip any any   mediaserver traffic   access-list 109 permit ip 10.1.2.0 0.0.0.255 any access-list 109 permit ip any 10.1.2.0 0.0.0.255   access-list 108 deny ip any any     class-map match-all DATA  match access-group 108 class-map match-all IPTV  match access-group 109   policy-map IPOE-QOS  class DATA   police rate 2048000    conform-action transmit    exceed-action drop  class IPTV   police rate 5000000    conform-action transmit    exceed-action drop ... View more

Hi Alex, Do you mean COA or HQoS ? Can I apply hqos with data and iptv classes in it to the ipoe user upon session start ? Will it work ? Regards Tural ... View more

Hi Alex , I have Cisco ASR 1002 Router with 15.3 version on it. I am trying to make sure that my IPTV will not suffer when my IPoE subscriber uses internet. Both IPTV and IPOE are in the same VLAN using same session So How can I apply polising for my IPTV ?  IPTV uses Mediaservers to download the content. best regards Tural ... View more

Hi Alex, Is it available before XE3.5 release? if not I will try service level option Thank you in advance! Tural ... View more

Hello Alex, Great doc. thank you very much. Is it possible to apply redirect through COA to online session on ASR 1002 routers ? Here is the debug logs from "debug subscriber feature name l4redirect" ov 7 10:53:41.809: L4 Redirect: Parsing L4R VSA: "redirect to group REDIRECT_NOPAY" Nov 7 10:53:41.809: L4 Redirect: Creating L4R feature info from AAA attributes Nov 7 10:53:41.809: L4 Redirect: Created L4R Feature info Nov 7 10:53:41.809: L4 Redirect: Created L4R rule info Nov 7 10:53:41.810: L4 Redirect: Apply inbound direction from Per-user configuration Nov 7 10:53:41.810: L4 Redirect: ERROR: L4R installation at session level not supported on this platform Nov 7 10:53:41.810: L4 Redirect: Remove inbound direction from Per-user configuration Nov 7 10:53:41.810: L4 Redirect: L4R not installed in inbound direction Nov 7 10:53:41.810: L4 Redirect: Deleting L4R feature info Nov 7 10:53:41.810: L4 Redirect: Deleted L4R rule info Nov 7 10:53:41.811: L4 Redirect: Deleted L4R Feature info Nov 7 10:53:41.850: L4 Redirect: Parsing L4R VSA: "redirect to group REDIRECT_NOPAY" Nov 7 10:53:41.850: L4 Redirect: Creating L4R feature info from AAA attributes Nov 7 10:53:41.850: L4 Redirect: Created L4R Feature info Nov 7 10:53:41.850: L4 Redirect: Created L4R rule info Nov 7 10:53:41.851: L4 Redirect: Apply inbound direction from Per-user configuration Nov 7 10:53:41.851: L4 Redirect: ERROR: L4R installation at session level not supported on this platform Nov 7 10:53:41.851: L4 Redirect: Remove inbound direction from Per-user configuration What could be issue ? Tural ... View more

Hi Xander, One more question,please how to verify BFD dampening is running?  In my case "show bfd session dampening" command output does not display all the interfaces for which bfd dampening is configured.only Bundle interface is displaying. But in the logs I see dampening logs for those interfaces. ... View more

Ops, Really ? ... View more

Thank you very much Xander, great explanation. ... View more

Hi Xander, Thank you very much for detailed information. Will it affect to bfd session torn down if I disable dampening ? ... View more

Hello Aleksandar, We are using XR 5.3.3 and not configured BFD dampening,but we still receiving dampening logs ?  Isn't  BFD dampening enabled by default ? LC/0/5/CPU0:Jun 8 05:03:58.022 : bfd_agent[125]: %L2-BFD-6-ADJACENCY_DELETE : Adjacency to neighbor x.x.x.x on interface GigabitEthernet0/5/0/3.89 was deleted LC/0/5/CPU0:Jun 8 05:03:58.022 : bfd_agent[125]: %L2-BFD-6-ADJACENCY_DELETE : Adjacency to neighbor y.y.y.y on interface GigabitEthernet0/5/0/3.88 was deleted LC/0/5/CPU0:Jun 8 05:03:58.058 : bfd_agent[125]: %L2-BFD-6-SESSION_REMOVED : BFD session to neighbor x.x.x.x on interface GigabitEthernet0/5/0/3.89 has been removed LC/0/5/CPU0:Jun 8 05:03:58.077 : bfd_agent[125]: %L2-BFD-6-SESSION_STATE_DOWN : BFD session to neighbor y.y.y.y on interface GigabitEthernet0/5/0/3.88 has gone down. Reason: Control timer expired LC/0/5/CPU0:Jun 8 05:04:32.566 : bfd_agent[125]: %L2-BFD-6-SESSION_DAMPENING_ON : Session to neighbor y.y.y.y on interface GigabitEthernet0/5/0/3.88 entered Dampened state (initial: 2000 ms,secondary: 5000 ms,maximum: 120000 ms). LC/0/5/CPU0:Jun 8 05:04:32.569 : bfd_agent[125]: %L2-BFD-6-SESSION_DAMPENING_ON : Session to neighbor x.x.x.x on interface GigabitEthernet0/5/0/3.89 entered Dampened state (initial: 2000 ms,secondary: 5000 ms,maximum: 120000 ms). LC/0/5/CPU0:Jun 8 05:04:34.525 : bfd_agent[125]: %L2-BFD-6-SESSION_DAMPENING_OFF : Session to neighbor y.y.y.y on interface GigabitEthernet0/5/0/3.88 moved out of Dampened state. ... View more

Thank you very much Xander! Tural ... View more

Hello Xander, Thank you for the great info. Does nV Cluster and SyncE license activation requires reboot the chassis ? Best Regards Tural Lachinov ... View more

... ... View more