Using The Cisco-Avpair="Lcp:interface-Config" Radius Attribute; Scaling L2Tp Tunnel Configurations; Cisco-Avpair="Lcp:interface-Config" - Cisco ASR1002 - ASR 1002 Router Software Configuration Manual

Broadband Scalability and Performance
For IP sessions, the keepalives are not enabled by default. Enabling keepalives for IP sessions provides
Note
the same capability as PPP keepalives except that ICMP or ARP is used to test the presence of
subscribers. For more information about Using ARP for Keepalive Messages and Using ICMP for
Keepalive Messages, see the feature documentation at:
http://www.cisco.com/en/US/docs/ios-xml/ios/isg/configuration/xe-3s/Configuring_ISG_Policies_for_
Session_Maintenance.html
Scaling the L2TP Tunnel Configurations
To prevent head-of-the-line blocking of the IP input process and save system resources, configure the
vpdn ip udp ignore checksum command:
Router(config)# vpdn ip udp ignore checksum
When you configure this command, the router directly queues the L2TP Hello packets and Hello
acknowledgements to the L2TP control process. We recommend that you configure this command in all
the scaled LAC and LNS L2TP tunnel configurations.
If you do not configure the vpdn ip udp ignore checksum command, the L2TP software sends the
packets to UDP to validate the checksum. When too many packets are queued to the IP input process,
the router starts Selective Packet Discard (SPD) mechanism that causes IP packets to be dropped.
Head-of-the-line blocking of the IP input process might occur in other nonL2TP configurations. A flush
Note
occurring on an input interface indicates that the SPD mechanism is discarding packets.

Using the cisco-avpair="lcp:interface-config" RADIUS Attribute

When you use the lcp:interface-config RADIUS attribute to reconfigure the virtual access subscriber
interface, scaling decreases on the Cisco ASR 1000 Series Router for the following reasons:
•
•
Before configuring the virtual access subscriber interface using the lcp:interface-config command,
configure the aaa policy interface-config allow-subinterface command.
If the subinterface is not configured, the following error message is displayed when creating a session
with one of the RADIUS attributes:
*Mar 13 22:04:03.358: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full
Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and
RADIUS features support Virtual-Access sub-interfaces. swidb= 0x7FA35A42F218, ifnum= 30
The lcp:interface-config command syntax includes an IOS interface configuration command. This
command is any valid IOS command that can be applied to an interface. When the
lcp:interface-config attribute is downloaded from the RADIUS server to the Cisco ASR 1000
Series Router, the command parser is activated to configure the interface according to AV-pair,
determining if the option is valid and then applying the configuration to the virtual access interface
(VAI).
The lcp:interface-config command degrades the call rate.
Cisco ASR 1000 Series Aggregation Services Routers Software Configuration Guide
Using the cisco-avpair="lcp:interface-config" RADIUS Attribute
7