Per-Service Shaping and Policing Using RADIUS
Configuring Per-Service Shaping and Policing on the RADIUS Server
To use RADIUS to set the shaping and policing rate for a subscriber service, configure the following
Cisco VSAs in the service profile on RADIUS:
vsa cisco generic 1 string "qos-policy-out=add-class(sub,(class-list), shape(rate))"
vsa cisco generic 1 string "qos-policy-out=add-class(sub,(class-list), police(rate))"
When the ISG receives a RADIUS Access-Accept or change of authentication (CoA) message with these
VSAs included, the ISG copies the originally configured policy map that is active on the session and
changes the shaping or policing rate of the traffic class specified in the class-list field. The ISG makes
changes only to the transient policy and applies the transient policy to the subscriber service; no changes
are made to the original policy map.
Per-service shaping and policing do not apply to the parent class-default class.
Note
For more information, see the
Configuration Example of Per-Service Shaping
The following example configuration shows the Cisco VSA configured on RADIUS and the original
hierarchical policy map that is configured on the ISG. When the ISG receives an Access-Accept or CoA
message with the following VSA, the ISG first copies the policy map named Parent and then changes the
shaping rate of the VoIP class from 5000 bps to 6000 bps. The ISG makes changes to only the transient
policy named New_Parent; no changes are made to the original Parent policy.
RADIUS Configuration
radius subscriber 6
!
vsa cisco generic 1 string "qos-policy-out=add-class(sub,(class-default, voip),
shape(6000))"
ISG Configuration
!
policy-map Child
policy-map Parent
!
!
ISG New Shaping Rate
!
policy-map New_Child
policy-map New_Parent
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
6-14
class voip
shape average 5000
class class-default
shape average 10000
service-policy Child
[New cloned child policy]
class voip
shape average 6000
[New shaping rate]
!
[New cloned parent policy]
class class-default
shape average 10000
service-policy New_Child
"RADIUS Attributes" section on page
[New cloned child policy attached to the new
cloned parent policy]
Chapter 6
RADIUS-Based Shaping and Policing
6-1.
OL-14660-03