Cisco IOS XE Intelligent Services Configuration Manual page 62

Configuration Examples for ISG Control Policies
Control Policy for Layer 2 Access and Service Provisioning: Example
The following example shows how to configure a control policy that produces the following results:
•
•
•
username user1@example1.com password 0 lab
username user2@example2.com password 0 lab
username user3@example3.com password 0 lab
!
class-map type control match-all MY-FORWARDING-USERS
match unauthenticated-domain example1.com
!
class-map type control match-all MY-LOCAL-USERS
match unauthenticated-domain example2.com
!
policy-map type control MY-POLICY
class type control MY-FORWARDING-USERS event session-start
1 service local
!
class type control MY-LOCAL-USERS event session-start
1 service local
!
class type control always event session-start
2 service disconnect
!
!
policy-map type control ppp-users
class type control always event session-start
1 collect identifier unauthenticated-domain
2 service-policy type control MY-POLICY
!
Verifying a Control Policy: Examples
The following examples show sample output generated from the configuration in the
Layer 2 Access and Service Provisioning:
Router# show users
Line User Host(s) Idle Location
* 0 con 0 idle 00:00:00
Interface User Mode Idle Peer Address
Vi1.1 user1@xyz.com PPPoE - 10.1.126.14
Vi1.2 user2@abc.com PPPoE - 10.1.126.15
Router# show subscriber session
Current Subscriber Information: Total sessions 2
Uniq ID Interface State Service Identifier Up-time
2022 Vi1.1 authen Local Term user1@xyz.com 00:08:41
2023 Vi1.2 authen Local Term user2@abc.com 00:08:40
MCP_BBA_8#show subscriber session
MCP_BBA_8#show subscriber session uid 2022 detailed
16
VPDN forwarding is applied to anyone dialing in from "example1.com".
Access to locally terminated Layer 3 network resources is provided to anyone dialing in from
"example2.com".
Anyone else is barred.
Example:
Configuring ISG Control Policies
Control Policy for