Redirecting Unauthorized Subscriber Traffic: Example - Cisco 10000 Series Configuration Manual

Configuration Examples for ISG Layer 4 Redirect
class type control always event session-start
1 service-policy type service BLIND-RDT
!
class type control always event account-logon
1 authenticate aaa list AUTH-LIST
2 service-policy type service unapply BLIND-RDT
policy-map type service BLIND-RDT
class type traffic CLASS-ALL
redirect to group PORTAL
!
redirect server-group PORTAL
server ip 10.2.36.253 port 80

Redirecting Unauthorized Subscriber Traffic: Example

The following example shows the configuration of redirection for unauthorized subscribers. If the
subscriber is not logged onto the service called svc, traffic that matches svc is redirected to the server
group PORTAL. After the subscriber logs in to the service, the traffic is no longer redirected. When the
subscriber logs out of the service, redirection is applied again.
service-policy type control THE_RULE
!
class-map type traffic match-any CLASS-ALL
!
class-map type traffic match-any CLASS-100_110
match access-group input 100
match access-group output 110
!
policy-map type service blind-rdt
class type traffic CLASS-ALL
redirect to group PORTAL
!
policy-map type service svc-rdt
class type traffic CLASS-ALL
redirect to group PORTAL
!
policy-map type service svc
class type traffic CLASS-100_110
class type traffic default in-out
drop
!
policy-map type control THE_RULE
class type control alwyas event account-logon
1 authenticate
2 service-policy type service name svc-rdt
class type control cond-svc-logon event service-start
1 service-policy type service unapply name svc-rdt
2 service-policy type service identifier service-name
class type control cond-svc-logon event service-stop
1 service-policy type service unapply name svc
2 service-policy type service name svc-rdt
!
class-map type control match-all cond-svc-logon
match identifier service-name svc
!
redirect server-group PORTAL
server ip 10.2.36.253 port 80
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
4-10
Chapter 4 Redirecting Subscriber Traffic Using Intelligent Service Gateway Layer 4 Redirect
OL-14660-03