Cisco ASR 9000 Series Installation manual

Cisco ASR 9000 Series Aggregation Services Router Broadband
Network Gateway Command Reference, Release 5.2.x
First Published: 2014-07-03
Last Modified: 2014-10-24
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2014 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xiii
Changes to This Document xiii
Obtaining Documentation and Submitting a Service Request xiii
CHAPTER 1 BNG AAA Commands 1
aaa accounting service 3
aaa accounting subscriber 5
aaa accounting system rp-failover 7
aaa attribute format 9
aaa authentication subscriber 11
aaa authorization subscriber 13
aaa group server radius (BNG) 15
aaa intercept 17
aaa radius attribute 19
aaa service-accounting 21
aaa server radius dynamic-author 23
aaa radius attribute nas-port-type 25
accounting aaa list 27
accounting aaa list type service 29
radius-server attribute 31
radius-server dead-criteria 33
radius-server deadtime (BNG) 35
radius-server disallow null-username 37
radius-server host (BNG) 38
radius-server ipv4 dscp 41
radius-server key (BNG) 42
radius-server load-balance 44
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
iii

radius-server retransmit (BNG) 46
radius-server source-port 48
radius-server timeout (BNG) 49
radius-server vsa attribute ignore unknown 50
radius-server throttle 51
radius source-interface (BNG) 53
show aaa trace 55
show radius (BNG) 57
show radius server-groups detail 60
statistics period service-accounting 62
CHAPTER 2 ACL and ABF Commands 65
ipv4 access-group (BNG) 66
ipv4 access-list (BNG) 69
ipv6 access-group (BNG) 71
ipv6 access-list (BNG) 75
CHAPTER 3 Address Pool Service Commands 79
address-range 80
exclude 82
network (BNG) 84
prefix-length 86
prefix-range 88
pool vrf 90
pool ipv4 92
pool ipv6 94
utilization-mark 96
show pool ipv4 name 98
show pool ipv6 name 102
show pool vrf 109
CHAPTER 4 Control Policy Commands 113
activate 114
authenticate (BNG) 116
authorize 118
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
iv
Contents

class-map type control subscriber 120
deactivate 122
event 124
match (class-map) 127
policy-map type control subscriber 129
policy-map type pbr 131
service-policy type control subscriber 133
show class-map 135
show policy-map 137
CHAPTER 5 BNG DHCP Commands 139
address-pool 141
aftr-name 142
broadcast-flag policy check (BNG) 143
class 145
dhcp ipv4 (BNG) 147
dhcp ipv6 (BNG) 148
dhcpv6 address-pool 149
dhcpv6 delegated-prefix-pool 151
dns-server (BNG) 152
domain-name (DHCP IPv6 pool-BNG) 154
duplicate-mac-allowed 156
framed-prefix-pool 158
helper-address (BNG) 159
inner-cos 161
interface (DHCP-BNG) 162
interface subscriber-pppoe profile 164
lease 165
lease proxy client-lease-time 167
limit lease per-circuit-id 169
limit lease per-interface 171
limit lease per-remote-id 173
match option 175
match vrf 177
outer-cos 178
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
v
Contents

prefix-pool 179
profile (BNG) 180
rapid commit 182
relay information authenticate (BNG) 183
relay information check (BNG) 185
relay information option (BNG) 187
relay information option allow-untrusted (BNG) 189
relay information policy (BNG) 191
relay option remote-id 193
show dhcp ipv4 proxy binding 195
show dhcp ipv4 proxy interface (BNG) 199
show dhcp ipv4 proxy profile 201
show dhcp ipv4 proxy statistics 203
show dhcp ipv6 proxy binding (BNG) 205
show dhcp ipv6 proxy interface (BNG) 207
show dhcp ipv6 proxy profile 209
show dhcp ipv6 proxy statistics 211
show dhcp ipv6 server binding 213
show dhcp ipv6 server interface 216
show dhcp ipv6 server profile 218
show dhcp ipv6 server statistics 220
CHAPTER 6 BNG Interface Commands 223
encapsulation ambiguous dot1ad 224
encapsulation ambiguous dot1q 226
show ethernet tags 228
CHAPTER 7 Dynamic Template Commands 231
dynamic-template 232
dynamic-template type ipsubscriber 234
dynamic-template type ppp 236
dynamic-template type service 238
monitor-session (interface-dynamic-template-BNG) 240
service-policy (BNG) 242
test radius coa activate 244
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
vi
Contents

timeout idle 246
vrf (dynamic-template-BNG) 248
CHAPTER 8 Excessive Punt Flow Trap Commands 251
lpts punt excessive-flow-trap 252
lpts punt excessive-flow-trap dampening 254
lpts punt excessive-flow-trap penalty-rate 255
lpts punt excessive-flow-trap penalty-timeout 257
lpts punt excessive-flow-trap subscriber-interfaces 259
show lpts punt excessive-flow-trap 260
show lpts punt excessive-flow-trap information 263
show lpts punt excessive-flow-trap interface 266
show lpts punt excessive-flow-trap protocol 269
CHAPTER 9 IPoE Commands 271
initiator dhcp 272
initiator unclassified-ip 274
initiator unclassified-source 276
ipsubscriber interface 278
ipsubscriber l2-connected 280
ipsubscriber routed 282
ipsubscriber session-limit 284
show ipsubscriber access-interface 286
show ipsubscriber interface 289
show ipsubscriber summary 293
CHAPTER 10 IPv4 and IPv6 Commands 297
ipv4 mtu (BNG) 298
ipv4 unnumbered (point-to-point -BNG) 300
ipv4 unreachables disable (BNG) 302
ipv4 verify unicast source reachable-via (BNG) 304
ipv6 enable (BNG) 306
ipv6 mtu (BNG) 308
ipv6 unreachables disable (BNG) 310
show ipv4 interface (BNG) 312
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
vii
Contents

show ipv4 traffic (BNG) 315
show ipv6 interface (BNG) 317
show ipv6 neighbors (BNG) 322
show ipv6 neighbors summary (BNG) 328
show ipv6 traffic (BNG) 330
CHAPTER 11 Multicast Commands 333
router igmp vrf 334
igmp accounting 335
igmp explicit-tracking 336
igmp query-interval 338
igmp query-max-response-time 340
multicast (BNG) 342
unicast-qos-adjust 344
show igmp unicast-qos-adjust statistics 346
show igmp vrf (BNG) 349
clear igmp unicast-qos-adjust 351
CHAPTER 12 Neighbor Discovery Commands 353
ipv6 nd dad attempts (BNG) 354
ipv6 nd framed-prefix-pool 357
ipv6 nd managed-config-flag (BNG) 358
ipv6 nd ns-interval (BNG) 360
ipv6 nd nud-enable 362
ipv6 nd other-config-flag (BNG) 363
ipv6 nd ra-initial 365
ipv6 nd ra-interval (BNG) 367
ipv6 nd ra-lifetime (BNG) 369
ipv6 nd ra-unicast 371
ipv6 nd reachable-time (BNG) 372
ipv6 nd suppress-cache-learning 374
ipv6 nd suppress-ra (BNG) 375
CHAPTER 13 BNG PPP Commands 377
ppp authentication (BNG) 378
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
viii
Contents

ppp chap 381
ppp ipcp 383
ppp lcp 385
ppp max-bad-auth (BNG) 387
ppp max-configure (BNG) 389
ppp max-failure (BNG) 391
ppp ms-chap 393
ppp timeout 395
show ppp interfaces (BNG) 397
show ppp statistics 405
show ppp summary 408
CHAPTER 14 PPPoE LAC-Specific Commands 411
l2tp-class 412
l2tp reassembly 414
process-failures switchover 415
redundancy (BNG) 417
session-limit (BNG) 418
template (BNG) 420
tunnel 422
vpdn 424
vpn 426
show l2tpv2 428
show l2tpv2 redundancy 430
show l2tpv2 redundancy mirroring 432
show vpdn 434
show vpdn redundancy 436
show vpdn redundancy mirroring 438
CHAPTER 15 PPPoE Commands 441
pado delay 442
pado delay circuit-id 444
pado delay remote-id 446
pado delay service-name 448
pppoe bba-group 450
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
ix
Contents

pppoe enable bba-group 453
pppoe in-flight-window 455
pppoe sessions limit 457
pppoe sessions throttle 460
clear pppoe statistics 462
show pppoe interfaces 464
show pppoe limits 466
show pppoe statistics 470
show pppoe summary 473
show pppoe throttles 475
CHAPTER 16 QOS Commands 479
qos account 480
qos output minimum-bandwidth 482
service-policy (QoS-BNG) 484
service-policy (interface BNG) 486
shape average (BNG) 489
show qos inconsistency (BNG) 491
show qos interface (BNG) 494
show qos shared-policy-instance (BNG) 504
show qos summary BNG 506
CHAPTER 17 Subscriber Commands 509
access-tracking 511
accounting interim variation 513
core-tracking 515
disable (subscriber redundancy) 516
hold-timer (subscriber redundancy) 518
interface-list 520
preferred-role 522
source-interface (subscriber redundancy) 524
subscriber redundancy 525
subscriber redundancy group 526
subscriber redundancy switchover 528
subscriber redundancy synchronize 530
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
x
Contents