Hello all,
We need to remark all outbound traffic to upstream service provider with CoS 0 from BNG PPPoE interface especially control PPP packets e.g. LCP requests.
According to the documentation we don't need to worry about it but what we can do if we must?
Control Packet Handling
BNG provides priority treatment in handling PPP Link Control Protocol (LCP) packets. The control packets are handled in high priority without the need of user configuration, and these packets are not subjected to QoS policies that are applied on both ingress and egress of the interface. In the case of LAC upstream direction, if user wants a trusted COS value, then a PPP command is provided to impose the core-side header based on the set trusted-COS. Thus, this ensures the priority treatment of these control packets in the network.
PPP LCP packets:
My configuration:
interface GigabitEthernet0/0/0/1 description "SW06 Gig0/18" mtu 9208 transceiver permit pid all ! interface GigabitEthernet0/0/0/1.1 service-policy output EUBA-SVLAN-COS1 subscriber-parent service-policy type control subscriber PPPoE_policy1 pppoe enable bba-group PPPoE encapsulation ambiguous dot1q any second-dot1q any ! policy-map EUBA-SVLAN-COS1 class class-default set cos 0 set cos inner 0 shape average 900 mbps ! end-policy-map pppoe bba-group PPPoE mtu 2000 service selection disable sessions mac limit 5 sessions vlan limit 1000 sessions circuit-id limit 50 control-packets priority 0 policy-map type control subscriber PPPoE_policy1 event session-activate match-first class type control subscriber PTA_CLASS do-until-failure 10 authenticate aaa list default 20 activate dynamic-template TTP-2000-1 ! ! event session-start match-first class type control subscriber PTA_CLASS do-until-failure 1 activate dynamic-template PPP_TPL1 ! ! end-policy-map dynamic-template type ppp PPP_TPL1 ppp authentication pap chap type ppp TTP-2000-1 vrf Jail-999 accounting aaa list default type session periodic-interval 30 ipv4 verify unicast source reachable-via rx ipv4 unnumbered Loopback999 ipv6 nd other-config-flag ipv6 verify unicast source reachable-via rx ipv6 enable
