Access Control List And Access Control List-Based Forwarding - Cisco ASR 9000 Series Configuration Manual

Configuring Subscriber Features
Subscriber features that are configured on BNG enable service providers to deploy certain specific
functionalities like restricting the use of certain network resources, allowing Law Enforcement Agencies
(LEAs) to conduct electronic surveillance, providing multicast services to the subscriber, and so on. The
subscriber features covered in this chapter are:
•
•
•
•
•
•
•
•

Access Control List and Access Control List-based Forwarding

An Access Control List (ACL) is used to define access rights for a subscriber. It is also used for filtering
content, blocking access to various network resources, and so on.
Certain service providers need to route certain traffic be routed through specific paths, instead of using the
path computed by routing protocols. For example, a service provider may require that voice traffic traverse
through certain expensive routes, but data traffic to use the regular routing path. This is achieved by specifying
the next-hop address in the ACL configuration, which is then used for forwarding packet towards its destination.
This feature of using ACL for packet forwarding is called ACL-based Forwarding (ABF).
The ACL is defined through CLI or XML; however, it can be applied to a subscriber session either through
a dynamic-template, or through VSAs from RADIUS. Deploying ABF (using ACL) involves these stages:
• Defining an ACL, see
• Applying the ACL to an access-interface, see
OL-26148-02
Access Control List and Access Control List-based Forwarding, page 129
Support for Lawful Intercept, page 132
Subscriber Session on Ambiguous VLANs , page 138
uRPF, page 140
Multicast Services, page 141
DAPS Support, page 153
HTTP Redirect Using PBR, page 154
Additional References, page 167
Configuring Access-Control Lists, on page
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
6
C H A P T E R
130.
Activating ACL, on page 131.
4.2.x
129