Setting The Policing Rate Using A Coa Message - Cisco 10000 Series Configuration Manual

Chapter 6 RADIUS-Based Shaping and Policing

Setting the Policing Rate Using a CoA Message

This configuration example uses a RADIUS CoA message to change the policing rate of a service and
is based on the following ISG configuration:
ISG Original Policy
policy-map Child
!
policy-map Parent
The following Cisco VSA is configured in a user's profile on RADIUS. This VSA modifies the Premium
class of the Child policy, which is applied to the class-default class of the Parent policy.
RADIUS Configuration
radius subscriber 1048
The ISG receives the following RADIUS CoA message. Notice that the above Cisco VSA configured in
the user profile is present in the CoA message.
RADIUS CoA Message
1d21h: RADIUS: COA received from id 0 192.168.1.6:1700, CoA Request, len 106
1d21h: COA: 192.168.1.6 request queued
1d21h: RADIUS: authenticator FF A2 6B 63 06 F0 E6 A3 - 0D 04 6C DC 01 0A BE F1
1d21h: RADIUS: Vendor, Cisco [26] 18
1d21h: RADIUS: ssg-account-info [250] 12 "S192.168.1.10"
1d21h: RADIUS: Vendor, Cisco [26] 68
1d21h: RADIUS: Cisco AVpair [1] 62 "qos-policy-out=add-class(sub,(class-default, Premium),
police(200000))"
1d21h: ++++++ CoA Attribute List ++++++
1d21h: 63C829B0 0 00000009 ssg-account-info(427) 10 S192.168.1.10
1d21h: 63C82A18 0 00000009 qos-policy-out(378) 45 add-class(sub,(class-default, Premium),
police(200000))
1d21h:
ISG#
1d21h: RADIUS(00000000): sending
1d21h: RADIUS(00000000): Send CoA Ack Response to 192.168.1.6:1700 id 0, len 65
1d21h: RADIUS: authenticator 62 B4 B0 1A 90 10 01 01 - F6 C8 CD 17 79 15 C7 A7
1d21h: RADIUS: Vendor, Cisco [26] 18
1d21h: RADIUS: ssg-account-info [250] 12 "S192.168.1.10"
1d21h: RADIUS: Vendor, Cisco [26] 27
1d21h: RADIUS: ssg-account-info [250] 21 "$IVirtual-Access2.2"
OL-14660-03
class Premium
police 12000
class class-default
shape average 10000
service-policy Child
vsa cisco 250 S192.168.1.10
vsa cisco generic 1 string "qos-policy-out=add-class(sub,(class-default, Premium),
police(200000))"
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
Configuration Examples of RADIUS-Based Shaping and Policing
6-19