ASR9000 BNG PPPoE Setup: Redirecting to a HTTP after failed Authentication

[dfranjoso]

Hello Guys,

On a PPPoE setup, and in a authentication-failure event (after a access-reject from Radius) can i still assign a IP address and redirect the subscriber to a Web server?

I only see examples for IP subscribers, so i am lost here. Can someone tell me if this is possible?

Thanks!

David           

[dfranjoso]

My idea (only on paper for now) is to apply a dynamic-template similar to the one applied on session-start and  session-activate, use the regular ip address pool but include an ACL limiting access to the Web Server. Then in the same dynamic-template apply a PBR policy-map redirecting to the web server.

Will this work?

[xthuijs]

hi david, my recommendation is to make a particular dynamic template and define a specific (non routable) pool and assign it to the template

on auth failure activate that template for address assignment and apply the http-r

or you can use your global pool also, so that if they pay their bill you can remove http-r and have them running happily.

xander