Configuration Example For Per User Multiservice Rate Limiting; Configuration Example For Per Session Service Policy Using Radius - Cisco 10000 Series Configuration Manual

Chapter 18 Regulating and Shaping Subscriber Traffic

Configuration Example for Per User Multiservice Rate Limiting

Example 18-2
map2). Each class map includes a match statement in which the previously configured ACL is used to
classify the traffic through the interface. The map1 class classifies traffic based on the parameters
defined in ACL 130 and the map2 class classifies traffic based on ACL 120.
In the policy map mypolicy, the policing statement defined for each class acts on all traffic that
corresponds to the class. Packets with the destination address 172.16.1.1 are policed at a rate of 8000 bps
and packets with the destination address 172.16.1.2 are policed at a rate of 120,000 bps.
The service policy is applied to the virtual template interface named Virtual-Template 2. Input traffic on
all virtual access interfaces (VAIs) cloned from this virtual template interface is policed.
Example 18-2 Configuring Per User Multiservice Rate Limiting Configuration Example
Router(config)# access-list 120 permit ip any host 172.16.1.1
Router(config)# access-list 130 permit ip any host 172.16.1.2
Router(config)# class-map map1
Router(config-cmap)# match access-group 130
Router(config-cmap)# exit
Router(config)# class-map map2
Router(config-cmap)# match access-group 120
Router(config-cmap)# exit
Router(config)# policy-map mypolicy
Router(config-pmap)# class map1
Router(config-pmap)# priority
Router(config-pmap-c)# police 120000 16000 32000 conform-action transmit exceed-action
drop
Router(config-pmap-c)# exit
Router(config-pmap)# class map2
Router(config-pmap-c)# police 8000 16000 32000 conform-action transmit exceed-action drop
Router(config-pmap-c)# exit
Router(config-pmap)# exit
Router(config)# interface Virtual-Template 2
Router(config-if)# service-policy input mypolicy
Router(config-if)# ip unnumbered ethernet 0
Router(config-if)# no peer default ip address
Router(config-if)# ppp authentication chap

Configuration Example for Per Session Service Policy Using RADIUS

To configure per session service policy, perform the following configuration tasks:
•
•
•
OL-7433-09
creates two access control lists (ACL 120 and ACL 130) and two class maps (map1 and
Configure the RADIUS server on the Cisco 10000 series router as described in the "Configuring
RADIUS" chapter in the Cisco IOS Security Configuration Guide, Release 12.2.
Create the class map and policy map as described in the
section on page 18-9.
Apply the service policy to the RADIUS AAA user profile.
"Configuring per Session Rate Limiting"
Cisco 10000 Series Router Quality of Service Configuration Guide
Subscriber-Based IP Quality of Service
18-13