Cisco Cisco ASR 5500 Administrator's Guide
AAA Interface Configuration
Configuring Diameter AAA Functionality ▀
Cisco ASR 5x00 AAA Interface Administration and Reference ▄
29
To configure Diameter Authentication Failure Handling at the context level use the following configuration:
configure
context <context_name>
diameter authentication failure-handling { authorization-request | eap-
request | eap-termination-request } { request-timeout action { continue | retry-
and-terminate | terminate } | result-code <result_code> { [ to <result_code> ]
action { continue | retry-and-terminate | terminate } } }
request | eap-termination-request } { request-timeout action { continue | retry-
and-terminate | terminate } | result-code <result_code> { [ to <result_code> ]
action { continue | retry-and-terminate | terminate } } }
end
Notes:
<context_name>
must be the name of the system source context designated for subscriber configuration.
Configuring at AAA Group Level
This section describes how to configure error handling for EAP requests / EAP termination requests at the AAA group
level. Specific actions (continue, retry-and-terminate, or terminate) can be associated with each possible result-code.
Ranges of result codes can be defined with the same action, or actions can be specific on a per-result code basis.
level. Specific actions (continue, retry-and-terminate, or terminate) can be associated with each possible result-code.
Ranges of result codes can be defined with the same action, or actions can be specific on a per-result code basis.
To configure Diameter Authentication Failure Handling at the AAA group level use the following configuration
example:
example:
configure
context <context_name>
aaa group <group_name>
diameter authentication failure-handling { authorization-request | eap-
request | eap-termination-request } { request-timeout action { continue | retry-
and-terminate | terminate } | result-code <result_code> { [ to <result_code> ]
action { continue | retry-and-terminate | terminate } } }
request | eap-termination-request } { request-timeout action { continue | retry-
and-terminate | terminate } | result-code <result_code> { [ to <result_code> ]
action { continue | retry-and-terminate | terminate } } }
end
Notes:
<context_name>
must be the name of the system source context designated for subscriber configuration.
<group_name>
must be the name of the AAA group designated for AAA functionality within the specific
context.
Configuring Diameter Failure Handling Template
This section describes how to configure Diameter Failure Handling Template at the global level.
The failure handling template defines the action to be taken when the Diameter application encounters a failure for
example, a result-code failure, tx-expiry or response-timeout. The template can be used by any Diameter application that
needs failure handling behavior.
example, a result-code failure, tx-expiry or response-timeout. The template can be used by any Diameter application that
needs failure handling behavior.
To configure Diameter Failure Handling at the global level use the following configuration: