Cisco ASR 9000 Series User manual

Cisco ASR 9000 Series Aggregation Services Router Broadband
Network Gateway Configuration Guide, Release 4.2.x
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-26148-02

©2013 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface ix
Changes to This Document ix
Obtaining Documentation and Submitting a Service Request ix
CHAPTER 1 Broadband Network Gateway Overview 1
Understanding BNG 1
BNG Architecture 2
BNG Role in ISP Network Models 4
BNG Configuration Process 5
Hardware Requirements for BNG 6
BNG Interoperability 7
CHAPTER 2 Configuring Authentication, Authorization, and Accounting Functions 9
AAA Overview 9
Using RADIUS Server Group 11
Configuring RADIUS Server Group 11
Specifying Method List 13
Configuring Method Lists for AAA 14
Defining AAA Attributes 15
Creating Attributes of Specific Format 17
Configuring RADIUS Attribute List 21
Configuring RADIUS Attribute Format 23
Configuring AAA Attribute Format Function 24
Making RADIUS Server Settings 25
Configuring RADIUS Server Settings 26
Configuring Automated Testing 30
Setting IP DSCP for RADIUS Server 31
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.2.x
OL-26148-02 iii

Balancing Transaction Load on the RADIUS Server 32
Configuring Load Balancing for Global RADIUS Server Group 32
Configuring Load Balancing for a Named RADIUS Server Group 34
Throttling of RADIUS Records 35
Configuring RADIUS Throttling Globally 36
Configuring RADIUS Throttling on a Server Group 37
RADIUS Change of Authorization (CoA) Overview 39
Understanding Per-VRF AAA Function 40
RADIUS Double-Dip Feature 40
Additional References 40
CHAPTER 3 Activating Control Policy 43
Control Policy Overview 43
Creating Class-Map 44
Configuring a Class-Map 45
Creating Policy-Map 46
Control Policy Events 47
Configuring a Policy-Map 48
Activating Policy-Map 50
Enabling a Service-Policy on a Subscriber Interface 50
Defining Dynamic Templates 51
Additional References 52
CHAPTER 4 Establishing Subscriber Sessions 55
Subscriber Session Overview 55
Establishing IPoE Session 57
Enabling IPv4 on an Access Interface 58
Creating Dynamic Template for IPv4 Subscriber Session 60
Creating a Policy-Map to Run During IPoE Session 62
Enabling IPoE Subscribers on an Access Interface 64
Establishing PPPoE Session 66
Provisioning PPP PTA Session 67
Creating PPPoE Profiles 68
Creating a PPP Dynamic-Template 69
Creating a Policy-Map to Run During PPPoE Session 70
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.2.x
iv OL-26148-02
Contents

Applying the PPPoE Configurations to an Access Interface 72
Provisioning PPP LAC Session 74
Configuring the VPDN Template 75
Configuring Maximum Simultaneous VPDN Sessions 77
Activating VPDN Logging 78
Configuring Options to Apply on Calling Station ID 80
Configuring L2TP Session-ID Commands 81
Configuring L2TP Class Options 82
Configuring Softshut for VPDN 85
Making DHCP Settings 86
Enabling DHCP Proxy 87
Configuring DHCP IPv4 Profile Proxy Class 88
Configuring a Circuit-ID for an Interface 90
Configuring a Remote-ID 91
Configuring the Client Lease Time 92
Attaching a Proxy Profile to an Interface 94
Specifying DHCP Lease Limit 95
Specifying the Lease Limit for a Circuit-ID 95
Specifying the Lease Limit for a Remote-ID 97
Specifying the Lease Limit for an Interface 98
Understanding DHCP Option-82 99
Packet Handling on Subscriber Interfaces 100
Additional References 101
CHAPTER 5 Deploying the Quality of Service (QoS) 103
Quality of Service Overview 103
Configuring Service-policy and Applying Subscriber Settings Through RADIUS 104
Configuring Service-policy and Applying Subscriber Settings Through Dynamic Template 106
Parameterized QoS 108
Parameterized QoS Syntax 109
Configuring Parameterized QoS Policy Through RADIUS 114
Modifying Service Policy through CoA 117
QoS Accounting 119
Configuring QoS Accounting 120
QoS Features Supported on BNG 121
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.2.x
OL-26148-02 v
Contents

Configuring Policy on S-VLAN 125
Additional References 127
CHAPTER 6 Configuring Subscriber Features 129
Access Control List and Access Control List-based Forwarding 129
Configuring Access-Control Lists 130
Activating ACL 131
Support for Lawful Intercept 132
Per-session Lawful Intercept 133
Disabling SNMP-based Lawful Intercept 134
Configuring the Inband Management Plane Protection Feature 135
Enabling the Mediation Device to Intercept VoIP and Data Sessions 135
Subscriber Session on Ambiguous VLANs 138
Establishing Subscriber Session on Ambiguous VLANs 138
uRPF 140
Multicast Services 141
Multicast Coexistence 141
Enabling Address Family for the VRF 141
Multicast Replication 142
HQoS Correlation 142
Configuring Minimum Unicast Bandwidth 143
Configuring Multicast HQOS Correlation Mode or Passive Mode 144
IGMP to Unicast QoS Shaper Correlation 145
Configuring the IGMP to HQoS Correlation Feature in a VRF 146
Configuring route-policy for Unicast QoS Shaper 147
Configuring IGMP Parameters for Subscriber Interfaces 149
IGMP Accounting 151
Configuring IGMP Accounting 151
DAPS Support 153
Configuring IPv4 Distributed Address Pool Service 153
HTTP Redirect Using PBR 154
Identifying HTTP Destinations for Redirection 155
Configuring Class Maps for HTTP Redirection 158
Configuring Policy Map for HTTP Redirect 160
Configuring Dynamic Template for Applying HTTPR Policy 162
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.2.x
vi OL-26148-02
Contents

Configuring Web Logon 163
Additional References 167
APPENDIX A XML Support for BNG Features 169
AAA XML Support 169
DHCP XML Support 172
Control Policy XML Support 175
DAPS XML Support 178
Subscriber Database XML Support 180
APPENDIX B RADIUS Attributes 185
RADIUS IETF Attributes 185
RADIUS Vendor-Specific Attributes 187
Vendor-Specific Attributes for Account Operations 191
RADIUS ADSL Attributes 191
RADIUS ASCEND Attributes 192
RADIUS Microsoft Attributes 192
RADIUS Disconnect-Cause Attributes 192
APPENDIX C Action Handlers 199
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.2.x
OL-26148-02 vii
Contents

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.2.x
viii OL-26148-02
Contents

Preface
This Preface contains these sections:
•Changes to This Document, page ix
•Obtaining Documentation and Submitting a Service Request, page ix
Changes to This Document
This table lists the technical changes made to this document since it was first printed.
SummaryDateRevision
Republished with documentation updates for
Cisco IOS XR Release 4.2.1 features.
June 2012OL-26148-02
Initial release of this document.December 2011OL-26148-01
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service
request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://
www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.
Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical
documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The
RSS feeds are a free service.
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.2.x
OL-26148-02 ix

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.2.x
xOL-26148-02
Preface
Obtaining Documentation and Submitting a Service Request