01-13-2015 06:16 AM
Hi,
I want to disconnect IPoE session from Radius via COA, but still un successfull,
Is there anybody can help me ?
Config:
policy-map type control subscriber BNG-PM
event session-start match-first
class type control subscriber IPoE_CGN do-until-failure
10 activate dynamic-template IPoE-TPL
20 authorize aaa list default format USERNAME-FORMAT password cisco
30 activate dynamic-template IP_QOS_TPL2
40 activate dynamic-template POLICY-10
50 activate dynamic-template POLICY-20
!
!
event authorization-failure match-first
class type control subscriber IPoE_CGN do-until-failure
10 activate dynamic-template IPSUB_UNAUTH_TEMPLATE
20 set-timer AUTH_TMR_CM 3
!
!
event timer-expiry match-first
class type control subscriber AUTH_TMR_CM do-until-failure
10 disconnect
=========================================
interface Bundle-Ether1.515
ipv4 point-to-point
ipv4 unnumbered Loopback100
arp learning disable
service-policy type control subscriber BNG-PM
ipsubscriber ipv4 l2-connected
initiator dhcp
!
encapsulation ambiguous dot1q 515 second-dot1q 2000-2050
===================================================
Radius COA Command:
echo "cisco-avpair='subscriber:command=account-logoff',acct-session-id=${ID}" | radclient -x ${NAS}:1700 coa ${Secret}
====================================================
Debug on the ASR 9k says:
Unable to get attributes from COA context
Please help:
Regards
Tural
04-08-2015 04:41 AM
while this config should catch the SSL based session I dont think it will work for the browser because the browser expects to see an encrypted session and we will not provide that because of the http redirect.
redirecting https links is difficult as it will always result in some security violation (since the requested cert never matches the one that comes out of the box's redirect page).
cheers
xander
04-08-2015 05:05 AM
Hi Alex,
Thank you for the response.
What would you suggest as a solution to https redirect.?
Kindly
Tural
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: