Applying A Single Acl To Multiple Subscribers - Cisco ASR 5500 Administration Manual

Applying a Single ACL to Multiple Subscribers

context_name is the name of the context containing the service with the default subscriber to which the ACL(s) was/were
applied.
The output of this command displays the configuration of the entire context. Examine the output for the commands
pertaining to interface configuration. The commands display the ACL(s) applied using this procedure.
configure
context_name
context
ip access-list
deny host
deny ip any host
exit
ip access-group
interface
ip address
exit
subscriber default
exit
subscriber name
ip access-group
ip access-group
exit
pdsn-service
default subscriber
Applying a Single ACL to Multiple Subscribers
As mentioned in the previous section, IP ACLs are applied to subscribers via attributes in their profile. The
subscriber profile could be configured locally on the system or remotely on a RADIUS server.
The system provides for the configuration of subscriber functions that serve as default values when specific
attributes are not contained in the individual subscriber's profile. The following table describes these functions.
Table 34: Functions Used to Provide "Default" Subscriber Attributes
Function
Subscriber named default
ASR 5500 System Administration Guide, StarOS Release 19
198
acl_name
ip_address
ip_address
access_group_name
interface
ip_address/mask
subscriber_name
access_group_name
access_group_name
service_name
subscriber_name
end
in
out
Description
Within each context, the system creates a subscriber called default. The
profile for the subscriber named default provides a configuration template
of attribute values for subscribers authenticated in that context.
Any subscriber attributes that are not included in a RADIUS-based
subscriber profile is configured according to the values for those attributes
as defined for the subscriber named default.
NOTE: The profile for the subscriber named default is not used to provide
missing information for subscribers configured locally.
Access Control Lists