cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
510
Views
0
Helpful
3
Replies

Policy-map merge rule on A9k BNG

petr_petrov
Level 1
Level 1

Hello.

According to official guide 

http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-3/bng/configuration/guide/b-bng-cg53xasr9k/b-bng-cg53xasr9k_chapter_0110.html#task_4450BCD6473F40AE9BFFF1EF41D1E28C

we can merge services(+ service accounting) and set priorities for them:

dynamic-template type service default-service
service-policy input default-policy-in merge 100
service-policy output default-policy-out merge 100
accounting aaa list AAA_ACC type service periodic-interval 2

!
dynamic-template type service voip-service
service-policy input voip-policy-in merge 20
service-policy output voip-policy-out merge 30
accounting aaa list AAA_ACC type service periodic-interval 2
!
dynamic-template type service vod-service
service-policy input vod-policy-in merge 30
service-policy output vod-policy-out merge 50
accounting aaa list AAA_ACC type service periodic-interval 2
!
dynamic-template type service turbo-button-service
service-policy input turbo-button-policy-in merge 10
service-policy output turbo-button-policy-out merge 40
accounting aaa list AAA_ACC type service periodic-interval

This means that we have to describe and store every "dynamic-template type service" locally on BNG.

Is it possible  to keep merging  of services and at the same time to have all service profiles defined in radius server? May be the order in which the policies/services are merged can be determined by the order in which services  downloaded from RADIUS?

Thanks

1 Accepted Solution

Accepted Solutions

Petr,

We do not support downloading of "accounting merge service" definition from RADIUS. Services has to be defined locally on the box for Service accounting.

We support downloading of service from RADIUS for **non accounting** services.

Thanks,

Thulasi

View solution in original post

3 Replies 3

xthuijs
Cisco Employee
Cisco Employee

Hi Petr,

services can be downloaded (cached) from radius, but the merging I am not sure about.

I have requested our BNG test team to come in and help answer this for us.

you should see a response in the next day or some.

However as a (personal) recommendation; back in IOS/ISG we could download services from radius also, these services when not locally defined, were retrieving their definitions from radius and cached on the bng. If there was an update to the radius-server's definition of the service, the service had to be cleared from teh BNG and re-cached on the next utilization. Still all users active leveraging that service continued to use the old definition. This causes a lot of troubleshooting hazzard and difficulties, who is now using actually what and still some manual operation necessary to recache the new service pull from radius.

So while this is a centralizing convenience functionality, it is hard(er) for operational staff to identify what is going on. Having the service locally configured is maybe a bit more orchestration for the service roll out, but possibly easier to manage from a verification standpoint.

So my recommendation would be to have service updates rolled-out as a configuration change to all bng's as opposed to updating the radius profile for that service.

cheers

xander

Petr,

We do not support downloading of "accounting merge service" definition from RADIUS. Services has to be defined locally on the box for Service accounting.

We support downloading of service from RADIUS for **non accounting** services.

Thanks,

Thulasi

Xander, Thulasirajan

Thank you for quick reply!

Case closed.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: