Per-Session Shaping Using Radius - Cisco 10000 Series Configuration Manual

Chapter 6 RADIUS-Based Shaping and Policing
•
•
For example, the following VSA1 attribute removes the Bronze class and all associated QoS policy
actions from the nested child policy that is applied to the parent class-default class:
qos-policy-out=remove-class(sub,(class-default,Bronze))
When you remove a traffic class from a QoS policy, all of the attributes for the class are also removed.
To re-add the class with the same attributes, you must re-issue the add-class RADIUS attribute and
provide the required parameters and values.

Per-Session Shaping Using RADIUS

The use of per-session shaping using RADIUS allows the ISG to construct and apply a dynamic service
policy with a new shaping rate for default (class-default class) traffic at the parent level.
1.
2.
3.
4.
5.
The following sections provide additional information about per-session shaping using RADIUS:
•
•
•
•
•
OL-14660-03
target field—Indicates the QoS policy to be modified. Currently, the only valid value for this field
is sub, which indicates the active QoS policy attached to the subscriber session. The Access-Accept
or CoA message that includes this attribute must be targeting a subscriber session.
class-list field—A list of class names enclosed in parentheses that identifies the class or classes to
be removed. The class names you specify must be either user-configured class maps or the
system-generated class-default class. The order in which you specify the class names indicates the
hierarchical level of the class within the QoS policy.
The RADIUS server determines the new shaping rate based on vendor-specific attributes (VSAs)
configured in a subscriber user profile on RADIUS and on the ANCP-signaled rate received from
the DSLAM. RADIUS sends the new subscriber session rate to the ISG in an Access-Accept or CoA
message.
After receiving the Access-Accept or CoA message, the ISG copies the original policy-map applied
to the session and changes the shaping rate of the copied, transient policy as indicated by RADIUS.
The ISG does not change the shaping rate of the original policy. After changing the transient policy,
the ISG applies the transient policy to the subscriber session.
The subscriber session is established on a QinQ Ethernet VLAN subinterface. The shaper-rate on
the subinterface can be controlled through ANCP. When the session arrives, the ISG applies the
transient policy-map with the new rate to the session. If the session has a default QoS policy applied,
the RADIUS-signaled new rate is not applied to the rate specified in the default policy; it is applied
only to the transient policy.
ANCP information modifies the shaper value of the policy-map on the subinterface. The router then
sends the ANCP values and the value of the shaper on the subinterface to the RADIUS server.
RADIUS might send back the new VSA to add new classes to the default-policy on the session.
The ISG and RADIUS exchange only bandwidth-signaled rates. You must configure all other QoS
parameters directly on the ISG using the modular QoS CLI (MQC).
Prerequisites for Per-Session Shaping Using RADIUS, page 6-6
Prerequisites for Per-Session Shaping Using RADIUS, page 6-6
Restrictions for Per-Session Shaping Using RADIUS, page 6-6
Configuring Per-Session Shaping Using RADIUS, page 6-6
Configuration Example of Per-Session Shaping, page 6-9
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
Per-Session Shaping Using RADIUS
6-5