Cisco Cisco IOS Software Release 12.4(2)T
AAA Per VC QoS Policy Support
Information About AAA Per VC QoS Policy Support
3
Cisco IOS Release 12.2(4)T
Figure 1
RADIUS Push
These abilities provide a high degree of flexibility, smaller configuration files, and more efficient use of
queueing resources. And perhaps more importantly, RADIUS push and pull eliminates the need to
statically configure a policy map on every VC or VLAN.
queueing resources. And perhaps more importantly, RADIUS push and pull eliminates the need to
statically configure a policy map on every VC or VLAN.
This feature is implemented by Cisco AV pairs that identify QoS policies configured on the router from
a RADIUS server by defining service policy output and service policy input. The AV pairs place the
appropriate policy map, which is identified by name, directly on the interface. The interface can be either
an ATM VC or Ethernet VLAN.
a RADIUS server by defining service policy output and service policy input. The AV pairs place the
appropriate policy map, which is identified by name, directly on the interface. The interface can be either
an ATM VC or Ethernet VLAN.
After the initial subscriber authentication, authorization, and accounting (AAA) process, RADIUS
returns the appropriate AV name for the policy maps to be applied at the VC and virtual-access interface
level. The QoS policy maps define the subscriber user experience for broadband service and can be
leveraged to deliver higher value services such as VoIP and video.
returns the appropriate AV name for the policy maps to be applied at the VC and virtual-access interface
level. The QoS policy maps define the subscriber user experience for broadband service and can be
leveraged to deliver higher value services such as VoIP and video.
Interface Policy Map AAA Attributes
Two new generic Cisco RADIUS VSA attributes are introduced by the AAA Per VC QoS Policy Support
feature, as follows:
feature, as follows:
cisco-avpair = “atm:vc-qos-policy-in=in-policy-name”
cisco-avpair = “atm:vc-qos-policy-out=out-policy-name”
Use these attributes in the RADIUS server profile to define service policy output and service policy
input. The AV pairs place the appropriate policy map, which is identified by name, directly on the
interface. The interface can be either an ATM VC or Ethernet VLAN.
input. The AV pairs place the appropriate policy map, which is identified by name, directly on the
interface. The interface can be either an ATM VC or Ethernet VLAN.
The AAA Per VC QoS Policy Support feature also replaces the following generic Cisco RADIUS
vendor-specific attribute (VSA) attributes:
vendor-specific attribute (VSA) attributes:
cisco-avpair = “ip:sub-policy-In=in-policy-name”
cisco-avpair = “ip:sub-policy-Out=out-policy-name”
with the following new attributes:
cisco-avpair = "ip:sub-qos-policy-in=in-policy-name”
cisco-avpair = "ip:sub-qos-policy-out=out-policy-name”
The replaced attributes will be supported for several more software releases, but profiles should be
updated with the new attributes as soon as it is feasible to do so.
updated with the new attributes as soon as it is feasible to do so.
Remember the following guidelines as you configure these attributes:
•
A policy map pulled or pushed from the RADIUS server has a higher precedence than a policy map
configured under a permanent virtual circuit (PVC).
configured under a permanent virtual circuit (PVC).
•
The Cisco IOS show policy-map interface EXEC command will display the policy map pushed or
pulled from the RADIUS server. This policy map is actually used by the driver, even though the
policy map was configured using the service-policy command under PVC configuration mode.
pulled from the RADIUS server. This policy map is actually used by the driver, even though the
policy map was configured using the service-policy command under PVC configuration mode.
Policy server
CoA
RADIUS Push
PPPoA session
Broadband
access server
(BRAS)
Routing gateway
135505