Добрый деь всем.
Задача: ограничить скорость на интерфейсе Virtual-Access, создавамом при
PPPoE. Атрибут CAR хочется выдавать AAA-сервером (в данном случае
Radius).
создаем профиль в Radius:
pppoe Auth-Type := Local, User-Password == "xxx"
Cisco-AVPair = "lcp:interface-config=rate-limit output 512000 7500 7500
conform-action continue exceed-action drop",
Service-Type = Framed,
Framed-Protocol = PPP,
Framed-IP-Address = x.x.x.x,
Framed-IP-Netmask = 255.255.255.255
Пробовал так же с:
Cisco-AVPair = "lcp:interface-config=traffic-shape rate 128000"
Настройки след:
radius-server host 195.69.200.2 auth-port 1812 acct-port 1813 key 7 xxx
aaa authentication ppp PPPoE-auth group radius
aaa authorization network PPPoE-authorize group radius
vpdn enable
!
vpdn-group PPPoE-group
accept-dialin
protocol pppoe
virtual-template 1
interface Virtual-Template1
ip unnumbered Loopback0
ppp authentication pap PPPoE-auth
ppp authorization PPPoE-authorize
В результате имеем:
...
Nov 7 10:28:04: RADIUS: Received from id 207 x.x.x.x:1812, Access-Accept, len 150
Nov 7 10:28:04: Attribute 26 106 0000000901646C63
Nov 7 10:28:04: Attribute 6 6 00000002
Nov 7 10:28:04: Attribute 7 6 00000001
Nov 7 10:28:04: Attribute 8 6 C345CBFB
Nov 7 10:28:04: Attribute 9 6 FFFFFFFF
Nov 7 10:28:04: RADIUS: saved authorization data for user 822CBEF8 at 82288520
Nov 7 10:28:04: AAA/AUTHEN (4090519264): status = PASS
Nov 7 10:28:04: Vi1 AAA/AUTHOR/LCP (1343259652): found list "PPPoE-authorize"
Nov 7 10:28:04: RADIUS: cisco AVPair "lcp:interface-config=rate-limit output 512000 7500 7500 conform-action continue exceed-action drop"
Nov 7 10:28:04: Vi1 AAA/AUTHOR/FSM (1460471449): found list "PPPoE-authorize"
Nov 7 10:28:04: RADIUS: cisco AVPair "lcp:interface-config=rate-limit output 512000 7500 7500 conform-action continue exceed-action drop" not applied for ip
Nov 7 10:28:04: RADIUS: Authorize IP address x.x.x.x
===
Вопрос сводится к одному. почему not applied for ip ?
Хотелось бы услышать мнения гуру в этом вопросе.
Да, чуть не забыл.
IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(17a), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2003 by cisco Systems, Inc
Спасибо.
--
WBR, Vitaliy Karlov [KV1670-RIPE]
Lugansk Telephone Company, (+380 642) 590-598
===================================================================
uanog mailing list.
To Unsubscribe: send mail to majordomo(a)uanog.kiev.ua
with "unsubscribe uanog" in the body of the message
