Table of Contents
Advertisement
Limiting Active Subscribers
You can limit the number of active subscribers on a port or virtual router.
aaa subscriber limit per-port
aaa subscriber limit per-vr
The range in seconds for a session timeout is a minimum of 1 minute
(60 seconds) through a maximum of 366 days (31622400 seconds).
These values can also be set by RADIUS, where the range is not enforceable.
PPP and L2TP will round the timeout values from RADIUS as follows:
If the session timeout is less than the minimum (60 seconds), that value is
used.
If the idle timeout is less than the minimum (300 seconds), it is rounded up
to the minimum.
If either timeout is greater than the maximum, it is rounded down to the
maximum.
All other timeouts are rounded to the nearest minute.
For a session timeout, the router interprets the default value (indicated by 0) to
mean that the PPP or L2TP user session should be forced to the maximum session
timeout, 366 days. This means that the duration of a PPP or an L2TP user session
cannot exceed 366 days; once the maximum session timeout is reached, the
router terminates the user session.
Example 1 Sets the idle timeout to 1200 seconds, and enables the router to
monitor only ingress traffic for this idle timeout period to determine whether to
disconnect the inactive PPP session.
host1(config)#aaa timeout idle 1200
host1(config)#aaa timeout idle ingress-only
Example 2 Sets the session timeout to 3600 seconds.
host1(config)#aaa timeout session 3600
Use the no version to restore the idle or session timeout to its default
value, 0 seconds, and to disable ingress-only traffic monitoring for the idle timeout
if it is configured.
See aaa timeout
Use to limit the number of active subscribers permitted on a port.
Example
host1(config)#aaa subscriber limit per-port 2/0 20
Use the no version to return to the default value, 0 (zero).
See aaa subscriber limit per-port
Chapter 1: Configuring Remote Access
Limiting Active Subscribers
89
Advertisement
Table of Contents
Troubleshooting
