Applying A Single Acl To Multiple Subscribers - Cisco ASR 5000 Series Administration Manual
Staros release 21.4
Hide thumbs
Also See for ASR 5000 Series:
- Product overview (992 pages) ,
- Installation manual (317 pages) ,
- Administration manual (234 pages)
Table of Contents
Advertisement
Applying a Single ACL to Multiple Subscribers
context_name is the name of the context containing the service with the default subscriber to which the ACL(s) was/were
applied.
The output of this command displays the configuration of the entire context. Examine the output for the commands
pertaining to interface configuration. The commands display the ACL(s) applied using this procedure.
configure
context_name
context
ip access-list
deny host
deny ip any host
exit
ip access-group
interface
ip address
exit
subscriber default
exit
subscriber name
ip access-group
ip access-group
exit
pdsn-service
default subscriber
Applying a Single ACL to Multiple Subscribers
As mentioned in the previous section, IP ACLs are applied to subscribers via attributes in their profile. The
subscriber profile could be configured locally on the system or remotely on a RADIUS server.
The system provides for the configuration of subscriber functions that serve as default values when specific
attributes are not contained in the individual subscriber's profile. The following table describes these functions.
Table 38: Functions Used to Provide "Default" Subscriber Attributes
Function
Subscriber named default
default subscriber
ASR 5500 System Administration Guide, StarOS Release 21.4
262
acl_name
ip_address
ip_address
access_group_name
interface
ip_address/mask
subscriber_name
access_group_name
access_group_name
service_name
subscriber_name
end
in
out
Description
Within each context, the system creates a subscriber called default. The
profile for the subscriber named default provides a configuration template
of attribute values for subscribers authenticated in that context.
Any subscriber attributes that are not included in a RADIUS-based
subscriber profile is configured according to the values for those attributes
as defined for the subscriber named default.
NOTE: The profile for the subscriber named default is not used to provide
missing information for subscribers configured locally.
This command allows multiple services to draw "default" subscriber
information from multiple profiles.
Access Control Lists
Advertisement
Table of Contents
Troubleshooting
