Cisco ASR 9000 Series Installation manual

Cisco ASR 9000 Series Aggregation Services Router Broadband
Network Gateway Command Reference, Release 5.2.x
First Published: 2014-07-03
Last Modified: 2014-10-24
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2014 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xiii
Changes to This Document xiii
Obtaining Documentation and Submitting a Service Request xiii
CHAPTER 1 BNG AAA Commands 1
aaa accounting service 3
aaa accounting subscriber 5
aaa accounting system rp-failover 7
aaa attribute format 9
aaa authentication subscriber 11
aaa authorization subscriber 13
aaa group server radius (BNG) 15
aaa intercept 17
aaa radius attribute 19
aaa service-accounting 21
aaa server radius dynamic-author 23
aaa radius attribute nas-port-type 25
accounting aaa list 27
accounting aaa list type service 29
radius-server attribute 31
radius-server dead-criteria 33
radius-server deadtime (BNG) 35
radius-server disallow null-username 37
radius-server host (BNG) 38
radius-server ipv4 dscp 41
radius-server key (BNG) 42
radius-server load-balance 44
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
iii

radius-server retransmit (BNG) 46
radius-server source-port 48
radius-server timeout (BNG) 49
radius-server vsa attribute ignore unknown 50
radius-server throttle 51
radius source-interface (BNG) 53
show aaa trace 55
show radius (BNG) 57
show radius server-groups detail 60
statistics period service-accounting 62
CHAPTER 2 ACL and ABF Commands 65
ipv4 access-group (BNG) 66
ipv4 access-list (BNG) 69
ipv6 access-group (BNG) 71
ipv6 access-list (BNG) 75
CHAPTER 3 Address Pool Service Commands 79
address-range 80
exclude 82
network (BNG) 84
prefix-length 86
prefix-range 88
pool vrf 90
pool ipv4 92
pool ipv6 94
utilization-mark 96
show pool ipv4 name 98
show pool ipv6 name 102
show pool vrf 109
CHAPTER 4 Control Policy Commands 113
activate 114
authenticate (BNG) 116
authorize 118
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
iv
Contents

class-map type control subscriber 120
deactivate 122
event 124
match (class-map) 127
policy-map type control subscriber 129
policy-map type pbr 131
service-policy type control subscriber 133
show class-map 135
show policy-map 137
CHAPTER 5 BNG DHCP Commands 139
address-pool 141
aftr-name 142
broadcast-flag policy check (BNG) 143
class 145
dhcp ipv4 (BNG) 147
dhcp ipv6 (BNG) 148
dhcpv6 address-pool 149
dhcpv6 delegated-prefix-pool 151
dns-server (BNG) 152
domain-name (DHCP IPv6 pool-BNG) 154
duplicate-mac-allowed 156
framed-prefix-pool 158
helper-address (BNG) 159
inner-cos 161
interface (DHCP-BNG) 162
interface subscriber-pppoe profile 164
lease 165
lease proxy client-lease-time 167
limit lease per-circuit-id 169
limit lease per-interface 171
limit lease per-remote-id 173
match option 175
match vrf 177
outer-cos 178
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
v
Contents

prefix-pool 179
profile (BNG) 180
rapid commit 182
relay information authenticate (BNG) 183
relay information check (BNG) 185
relay information option (BNG) 187
relay information option allow-untrusted (BNG) 189
relay information policy (BNG) 191
relay option remote-id 193
show dhcp ipv4 proxy binding 195
show dhcp ipv4 proxy interface (BNG) 199
show dhcp ipv4 proxy profile 201
show dhcp ipv4 proxy statistics 203
show dhcp ipv6 proxy binding (BNG) 205
show dhcp ipv6 proxy interface (BNG) 207
show dhcp ipv6 proxy profile 209
show dhcp ipv6 proxy statistics 211
show dhcp ipv6 server binding 213
show dhcp ipv6 server interface 216
show dhcp ipv6 server profile 218
show dhcp ipv6 server statistics 220
CHAPTER 6 BNG Interface Commands 223
encapsulation ambiguous dot1ad 224
encapsulation ambiguous dot1q 226
show ethernet tags 228
CHAPTER 7 Dynamic Template Commands 231
dynamic-template 232
dynamic-template type ipsubscriber 234
dynamic-template type ppp 236
dynamic-template type service 238
monitor-session (interface-dynamic-template-BNG) 240
service-policy (BNG) 242
test radius coa activate 244
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
vi
Contents

timeout idle 246
vrf (dynamic-template-BNG) 248
CHAPTER 8 Excessive Punt Flow Trap Commands 251
lpts punt excessive-flow-trap 252
lpts punt excessive-flow-trap dampening 254
lpts punt excessive-flow-trap penalty-rate 255
lpts punt excessive-flow-trap penalty-timeout 257
lpts punt excessive-flow-trap subscriber-interfaces 259
show lpts punt excessive-flow-trap 260
show lpts punt excessive-flow-trap information 263
show lpts punt excessive-flow-trap interface 266
show lpts punt excessive-flow-trap protocol 269
CHAPTER 9 IPoE Commands 271
initiator dhcp 272
initiator unclassified-ip 274
initiator unclassified-source 276
ipsubscriber interface 278
ipsubscriber l2-connected 280
ipsubscriber routed 282
ipsubscriber session-limit 284
show ipsubscriber access-interface 286
show ipsubscriber interface 289
show ipsubscriber summary 293
CHAPTER 10 IPv4 and IPv6 Commands 297
ipv4 mtu (BNG) 298
ipv4 unnumbered (point-to-point -BNG) 300
ipv4 unreachables disable (BNG) 302
ipv4 verify unicast source reachable-via (BNG) 304
ipv6 enable (BNG) 306
ipv6 mtu (BNG) 308
ipv6 unreachables disable (BNG) 310
show ipv4 interface (BNG) 312
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
vii
Contents

show ipv4 traffic (BNG) 315
show ipv6 interface (BNG) 317
show ipv6 neighbors (BNG) 322
show ipv6 neighbors summary (BNG) 328
show ipv6 traffic (BNG) 330
CHAPTER 11 Multicast Commands 333
router igmp vrf 334
igmp accounting 335
igmp explicit-tracking 336
igmp query-interval 338
igmp query-max-response-time 340
multicast (BNG) 342
unicast-qos-adjust 344
show igmp unicast-qos-adjust statistics 346
show igmp vrf (BNG) 349
clear igmp unicast-qos-adjust 351
CHAPTER 12 Neighbor Discovery Commands 353
ipv6 nd dad attempts (BNG) 354
ipv6 nd framed-prefix-pool 357
ipv6 nd managed-config-flag (BNG) 358
ipv6 nd ns-interval (BNG) 360
ipv6 nd nud-enable 362
ipv6 nd other-config-flag (BNG) 363
ipv6 nd ra-initial 365
ipv6 nd ra-interval (BNG) 367
ipv6 nd ra-lifetime (BNG) 369
ipv6 nd ra-unicast 371
ipv6 nd reachable-time (BNG) 372
ipv6 nd suppress-cache-learning 374
ipv6 nd suppress-ra (BNG) 375
CHAPTER 13 BNG PPP Commands 377
ppp authentication (BNG) 378
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
viii
Contents

ppp chap 381
ppp ipcp 383
ppp lcp 385
ppp max-bad-auth (BNG) 387
ppp max-configure (BNG) 389
ppp max-failure (BNG) 391
ppp ms-chap 393
ppp timeout 395
show ppp interfaces (BNG) 397
show ppp statistics 405
show ppp summary 408
CHAPTER 14 PPPoE LAC-Specific Commands 411
l2tp-class 412
l2tp reassembly 414
process-failures switchover 415
redundancy (BNG) 417
session-limit (BNG) 418
template (BNG) 420
tunnel 422
vpdn 424
vpn 426
show l2tpv2 428
show l2tpv2 redundancy 430
show l2tpv2 redundancy mirroring 432
show vpdn 434
show vpdn redundancy 436
show vpdn redundancy mirroring 438
CHAPTER 15 PPPoE Commands 441
pado delay 442
pado delay circuit-id 444
pado delay remote-id 446
pado delay service-name 448
pppoe bba-group 450
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
ix
Contents

pppoe enable bba-group 453
pppoe in-flight-window 455
pppoe sessions limit 457
pppoe sessions throttle 460
clear pppoe statistics 462
show pppoe interfaces 464
show pppoe limits 466
show pppoe statistics 470
show pppoe summary 473
show pppoe throttles 475
CHAPTER 16 QOS Commands 479
qos account 480
qos output minimum-bandwidth 482
service-policy (QoS-BNG) 484
service-policy (interface BNG) 486
shape average (BNG) 489
show qos inconsistency (BNG) 491
show qos interface (BNG) 494
show qos shared-policy-instance (BNG) 504
show qos summary BNG 506
CHAPTER 17 Subscriber Commands 509
access-tracking 511
accounting interim variation 513
core-tracking 515
disable (subscriber redundancy) 516
hold-timer (subscriber redundancy) 518
interface-list 520
preferred-role 522
source-interface (subscriber redundancy) 524
subscriber redundancy 525
subscriber redundancy group 526
subscriber redundancy switchover 528
subscriber redundancy synchronize 530
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
x
Contents

subscriber session limit 532
tracking-disable 534
virtual-mac 535
virtual-mac-disable 537
virtual-mac-prefix 538
show subscriber database 540
show subscriber feature accounting 545
show subscriber manager sadb 547
show subscriber manager statistics 549
show subscriber redundancy group 557
show subscriber redundancy summary 561
show subscriber running-config 564
show subscriber session 566
clear subscriber session 574
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
xi
Contents

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
xii
Contents

Preface
From Release 6.1.2 onwards, Cisco introduces support for the 64-bit Linux-based IOS XR operating system.
Extensive feature parity is maintained between the 32-bit and 64-bit environments. Unless explicitly marked
otherwise, the contents of this document are applicable for both the environments. For more details on Cisco
IOS XR 64 bit, refer to the Release Notes for Cisco ASR 9000 Series Routers, Release 6.1.2 document.
The Preface contains these topics:
•Changes to This Document, page xiii
•Obtaining Documentation and Submitting a Service Request, page xiii
Changes to This Document
This table lists the changes made to this document since it was first printed.
Table 1: Changes to This Document
Change SummaryDate
Republished with documentation updates for Cisco
IOS XR Release 5.2.2 features.
October 2014
Initial release of this document.July 2014
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service
request, and gathering additional information, see What's New in Cisco Product Documentation.
To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the What's
New in Cisco Product Documentation RSS feed. RSS feeds are a free service.
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
xiii

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
xiv
Preface
Obtaining Documentation and Submitting a Service Request

BNG AAA Commands
This module describes the Cisco IOS XR software commands used to configure the AAA commands for
Broadband Network Gateway (BNG) on the Cisco ASR 9000 Series Router. For details regarding the related
configurations, refer to the Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway
Configuration Guide.
•aaa accounting service, page 3
•aaa accounting subscriber, page 5
•aaa accounting system rp-failover, page 7
•aaa attribute format, page 9
•aaa authentication subscriber, page 11
•aaa authorization subscriber, page 13
•aaa group server radius (BNG), page 15
•aaa intercept, page 17
•aaa radius attribute, page 19
•aaa service-accounting, page 21
•aaa server radius dynamic-author, page 23
•aaa radius attribute nas-port-type, page 25
•accounting aaa list, page 27
•accounting aaa list type service, page 29
•radius-server attribute, page 31
•radius-server dead-criteria, page 33
•radius-server deadtime (BNG), page 35
•radius-server disallow null-username, page 37
•radius-server host (BNG), page 38
•radius-server ipv4 dscp, page 41
•radius-server key (BNG), page 42
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
1

•radius-server load-balance, page 44
•radius-server retransmit (BNG), page 46
•radius-server source-port, page 48
•radius-server timeout (BNG), page 49
•radius-server vsa attribute ignore unknown, page 50
•radius-server throttle, page 51
•radius source-interface (BNG), page 53
•show aaa trace, page 55
•show radius (BNG), page 57
•show radius server-groups detail, page 60
•statistics period service-accounting, page 62
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
2
BNG AAA Commands

aaa accounting service
To create an accounting list for service accounting, use the aaa accounting service command in Global
Configuration mode or Admin Configuration mode. To disable the service authentication method, use the no
form of this command.
aaa accounting service {list_name | default} {broadcast group {group_name | radius}| group {group_name
| radius}}
no aaa accounting subscriber {list_name | default} {broadcast group {group_name | radius}| group
{group_name | radius}}
Syntax Description Uses the listed authentication methods that follow this keyword as the
default list of methods for authentication.
default
Represents the character string of the list name for AAA authentication.
list-name
Specifies the broadcast accounting for the service.broadcast
Specifies the server-group.group
Specifies the server group name.
group_name
Specifies the list of all RADIUS hosts.radius
Command Default None
Command Modes Global Configuration mode
Command History ModificationRelease
This command was introduced.Release 4.3.1
Usage Guidelines No specific guidelines impact the use of this command.
Task ID OperationTask ID
read, writeaaa
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
3
BNG AAA Commands
aaa accounting service

Examples This is an example of configuring the aaa accounting service command for the grpFR server group:
RP/0/RSP0/CPU0:router(config)# aaa accounting service default group grpFR
Related Commands DescriptionCommand
Creates an accounting list for subscriber accounting.aaa accounting subscriber, on page 5
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
4
BNG AAA Commands
aaa accounting service

aaa accounting subscriber
To create an accounting list for subscriber accounting, use the aaa accounting subscriber command in Global
Configuration mode or Global Configuration mode. To disable this accounting list for subscriber accounting,
use the no form of this command.
aaa accounting subscriber {list_name | default} {broadcast group {group_name | radius}| group
{group_name | radius}}
no aaa accounting subscriber {list_name | default} {broadcast group {group_name | radius}| group
{group_name | radius}}
Syntax Description Uses the listed authentication
methods that follow this keyword
as the default list of methods for
authentication.
default
Represents the character string for
the list name for AAA
authentication.
list-name
Specifies the broadcast accounting
for subscriber.
broadcast
Specifies the server-group.group
Specifies the server group name.
group_name
Specifies the list of all RADIUS
hosts.
radius
Command Default None
Command Modes Global Configuration mode
Command History ModificationRelease
This command was introduced.Release 4.2.0
Usage Guidelines No specific guidelines impact the use of this command.
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
5
BNG AAA Commands
aaa accounting subscriber

Task ID OperationTask ID
read, writeaaa
Examples This is an example of configuring the aaa accounting subscriber command for sg1 server group:
RP/0/RSP0/CPU0:router(config)# aaa accounting subscriber sub1 broadcast group radius group
sg1
Related Commands DescriptionCommand
Creates an accounting list for system events.aaa accounting system rp-failover, on page 7
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference,
Release 5.2.x
6
BNG AAA Commands
aaa accounting subscriber