Redirecting Services - Cisco 10000 Series Configuration Manual

Chapter 5 Dynamic Service Policy Modifications

Redirecting Services

To execute Layer 4 redirect actions, Cisco VSA 252 is used in CoA messages. VSA uses the following
syntax for parameterized Layer 4 (L4) redirect messages:
252 binary 0b suffix "l4redirect(parameter1=value,parameter2=value,...)"
Before using VSA 252, you must configure L4 redirection on the ISG. The ISG uses the policy-map
containing redirection as the template for parameterized L4 redirect actions. For example, the following
is an example of a policy configured on the ISG that contains L4 redirection:
policy-map type service l4redirect
5 class type traffic TC-l4redirect
redirect to ip 100.1.1.1 port 1000 duration 100 frequency 100
Redirect Example
The following example shows how to:
•
•
•
•
252 binary 0b suffix "l4redirect(14addr=10.1.1.1,l4port=5000,l4_dur=200,14_freq=200)"
For more information on the ISG service policy parameters for redirect actions, see
page
Parameterized QoS services echo in an ISG service accounting record and ISG services "echo" the
service name in a separate VSA 1 full string relayed as CoA or Access-Accept.
The format for a parameterized QoS service is:
VSA 251 "N<full string>"
1.
VSA252 0b q-p-out=IPOne1-isg-acct
(1)((c-d,voip)2(200000,9216,0,1,0,0)3(5)8(8)9(1));q-p-out=((c-d,voip-control)2(112000,9216
,0,1,0,0)
3(6)5(100)8(16));q-p-in=((c-d,voip)2(200000,9216,0,1,0,0)3(5));q-p-in=((c-d,voip-control)2
(112000,9216,0,1,0,0)3(6))
2.
VSA 251"Nq-p-out=IPOne1-isg-acct
(1)((c-d,voip)2(200000,9216,0,1,0,0)3(5)8(8)9(1));q-p-out=((c-d,voip-control)2(112000,9216
,0,1,0,0)
3(6)5(100)8(16));q-p-in=((c-d,voip)2(200000,9216,0,1,0,0)3(5));q-p-in=((c-d,voip-control)2
(112000,9216,0,1,0,0)3(6))"
3.
COA with:vsa cisco generic 251 binary 0b suffix
"l4redirect2(l4port=7777,l4addr=77.7.7.7,l4dur=2000,l4freq=30)"
4.
DT Request:ssg-service-info [251]
"Nl4redirect2(l4port=7777,l4addr=77.7.7.7,l4dur=2000,l4freq=30)"
OL-14660-03
Configure VSA 252 to redirect the service to IP address 10.1.1.1.
Establish the L4 port as port 5000.
Set the duration of the service to 200 seconds.
Set the time by which redirection should recur to 200 seconds.
5-7.
When a RADIUS server relays a CoA message, the following message appears:
Upon start of the ISG service, the ISG router echoes the following message:
The parameterized ISG service name is abbreviated to the shortest unique name and the ISG signals
it in a service accounting start/stop VSA 251 string as follows:
The VSA 251 string contains the exact parameterized ISG service names as shown:
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
Configuring Parameterized Services
Table 5-2 on
5-15