Cisco ASR 9000 Series User manual

Cisco ASR 9000 Series Aggregation Services Router Broadband
Network Gateway Configuration Guide, Release 4.3.x
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-28375-03

©Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xi
Changes to This Document xi
Obtaining Documentation and Submitting a Service Request xi
CHAPTER 1 New and Changed BNG Features 1
New and Changed Information 1
CHAPTER 2 Broadband Network Gateway Overview 15
Understanding BNG 15
BNG Architecture 16
BNG Role in ISP Network Models 18
BNG Packaging 19
Installing and Activating the BNG Pie on Cisco ASR 9000 Series Router 19
BNG Configuration Process 21
Hardware Requirements for BNG 21
BNG Interoperability 22
CHAPTER 3 Configuring Authentication, Authorization, and Accounting Functions 25
AAA Overview 25
Using RADIUS Server Group 27
Configuring RADIUS Server Group 27
Specifying Method List 29
Configuring Method Lists for AAA 30
Defining AAA Attributes 31
Creating Attributes of Specific Format 33
Configuring RADIUS Attribute List 37
Configuring RADIUS Attribute Format 39
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 iii

Configuring RADIUS Attribute Nas-port-type 40
Configuring AAA Attribute Format Function 42
Making RADIUS Server Settings 43
Configuring RADIUS Server Settings 43
Configuring Automated Testing 47
Setting IP DSCP for RADIUS Server 49
Balancing Transaction Load on the RADIUS Server 50
Configuring Load Balancing for Global RADIUS Server Group 50
Configuring Load Balancing for a Named RADIUS Server Group 51
Throttling of RADIUS Records 53
Configuring RADIUS Throttling Globally 53
Configuring RADIUS Throttling on a Server Group 55
RADIUS Change of Authorization (CoA) Overview 56
Service Accounting 58
Configuring Service Accounting 60
Statistics Infrastructure 62
Configuring Statistics IDs (statsD) 62
Understanding Per-VRF AAA Function 63
RADIUS Double-Dip Feature 64
Additional References 64
CHAPTER 4 Activating Control Policy 67
Control Policy Overview 67
Creating Class-Map 68
Configuring a Class-Map 69
Creating Policy-Map 70
Control Policy Events 71
Configuring a Policy-Map 72
Activating Policy-Map 74
Enabling a Service-Policy on a Subscriber Interface 74
Defining Dynamic Templates 75
Additional References 76
CHAPTER 5 Establishing Subscriber Sessions 79
Subscriber Session Overview 79
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
iv OL-28375-03
Contents

Establishing IPoE Session 81
Enabling IPv4 or IPv6 on an Access Interface 82
Creating Dynamic Template for IPv4 or IPv6 Subscriber Session 84
Creating a Policy-Map to Run During IPoE Session 87
Enabling IPoE Subscribers on an Access Interface 88
Establishing PPPoE Session 92
Provisioning PPP PTA Session 93
Creating PPPoE Profiles 93
Creating a PPP Dynamic-Template 95
Creating a Policy-Map to Run During PPPoE Session 96
Applying the PPPoE Configurations to an Access Interface 98
Provisioning PPP LAC Session 100
L2TP Reassembly on LAC 101
Enabling L2TP Reassembly on LAC 102
L2TP Access Concentrator Stateful Switchover 103
Enabling LAC SSO 103
Enabling RPFO on Process-failures 105
Configuring the VPDN Template 106
Configuring Maximum Simultaneous VPDN Sessions 108
Activating VPDN Logging 110
Configuring Options to Apply on Calling Station ID 111
Configuring L2TP Session-ID Commands 112
Configuring L2TP Class Options 114
Configuring Softshut for VPDN 116
PPPoE Smart Server Selection 117
Configuring PADO Delay 118
PPPoE Session Limit and Throttle 120
PPPoE Session Limit 120
Configuring PPPoE Session Limit 120
PPPoE Session Throttle 122
Configuring PPPoE Session Throttle 122
Making DHCP Settings 124
Enabling DHCP Proxy 125
Configuring DHCP IPv4 Profile Proxy Class 126
Configuring a Circuit-ID for an Interface 127
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 v
Contents

Configuring a Remote-ID 128
Configuring the Client Lease Time 130
Attaching a Proxy Profile to an Interface 131
Specifying DHCP Lease Limit 132
Specifying the Lease Limit for a Circuit-ID 133
Specifying the Lease Limit for a Remote-ID 134
Specifying the Lease Limit for an Interface 135
Understanding DHCP Option-82 137
Option 82 Relay Information Encapsulation 137
Configuring DHCPv4 Class of Service (CoS) 138
DHCPv6 Overview 138
DHCPv6 Server and DHCPv6 Proxy 139
Enabling DHCPv6 for Different Configuration Modes 139
Setting Up DHCPv6 Parameters 143
DHCPv6 Features 145
High Availability Support for DHCPv6 145
DHCPv6 Prefix Delegation 146
IPv6 IPoE Subscriber Support 146
Configuring IPv6 IPoE Subscriber Interface 146
IPv6 PPPoE Subscriber Support 154
Configuring IPv6 PPPoE Subscriber Interfaces 154
Ambiguous VLAN Support 161
Configuring Ambiguous VLANs 161
DHCPv6 Address or Prefix Pool 164
Configuring IPv6 Address or Prefix Pool Name 164
DHCPv6 Dual-Stack Lite Support 167
Configuring AFTR Fully Qualified Domain Name for DS-Lite 167
VRF Awareness in DHCPv6 169
Defining VRF in a Dynamic Template 169
Packet Handling on Subscriber Interfaces 170
IPv6 Neighbor Discovery 172
Additional References 172
CHAPTER 6 Deploying the Quality of Service (QoS) 175
Quality of Service Overview 175
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
vi OL-28375-03
Contents

Configuring Service-policy and Applying Subscriber Settings Through RADIUS 176
Configuring Service-policy and Applying Subscriber Settings Through Dynamic Template 178
Parameterized QoS 181
Parameterized QoS Syntax 182
Configuring Parameterized QoS Policy Through RADIUS 187
Modifying Service Policy through CoA 189
QoS Accounting 191
Configuring QoS Accounting 192
Support for Shared Policy Instance 194
Configuring a Policy with SPI in the Input or Output Direction Using Dynamic Template 195
Configuring a Policy with SPI in the Input or Output Direction Using RADIUS 198
Merging QoS Policy-maps 200
Enabling Policy-maps Merge 201
QoS Features Supported on BNG 204
VLAN Policy on Access Interface 208
Configuring Policy on S-VLAN 209
Configuring VLAN Policy on an Access Interface 210
Additional References 212
CHAPTER 7 Configuring Subscriber Features 213
Excessive Punt Flow Trap 213
Enabling Excessive Punt Flow Trap Processing 215
Access Control List and Access Control List-based Forwarding 217
Configuring Access-Control Lists 217
Activating ACL 219
Support for Lawful Intercept 220
Per-session Lawful Intercept 221
Disabling SNMP-based Lawful Intercept 222
Configuring the Inband Management Plane Protection Feature 223
Enabling the Mediation Device to Intercept VoIP and Data Sessions 223
Radius-based Lawful Intercept 226
Enabling RADIUS-based Lawful Intercept 226
TCP MSS Adjustment 228
Configuring the TCP MSS Value of TCP Packets 229
Subscriber Session on Ambiguous VLANs 232
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 vii
Contents

Establishing Subscriber Session on Ambiguous VLANs 232
uRPF 234
Multicast Services 235
Multicast Coexistence 235
Enabling Address Family for the VRF 235
Multicast Replication 236
HQoS Correlation 236
Configuring Minimum Unicast Bandwidth 237
Configuring Multicast HQOS Correlation Mode or Passive Mode 238
IGMP to Unicast QoS Shaper Correlation 239
Configuring the IGMP to HQoS Correlation Feature in a VRF 240
Configuring route-policy for Unicast QoS Shaper 241
Configuring IGMP Parameters for Subscriber Interfaces 243
IGMP Accounting 245
Configuring IGMP Accounting 245
DAPS Support 247
Configuring IPv4 Distributed Address Pool Service 247
Creating a Configuration Pool Submode 248
Configuring the Subnet Number and Mask for an Address Pool 250
Specifying a Range of IPv6 Addresses 252
Specifying a Utilization Threshold 253
Specifying the Length of the Prefix 255
Specifying a Set of Addresses or Prefixes Inside a Subnet 256
HTTP Redirect Using PBR 258
Identifying HTTP Destinations for Redirection 259
Configuring Class Maps for HTTP Redirection 263
Configuring Policy Map for HTTP Redirect 265
Configuring Dynamic Template for Applying HTTPR Policy 268
Configuring Web Logon 269
Additional References 273
APPENDIX A XML Support for BNG Features 275
AAA XML Support 275
DHCP XML Support 278
Control Policy XML Support 281
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
viii OL-28375-03
Contents

DAPS XML Support 284
PPPoE XML Support 286
Subscriber Database XML Support 288
APPENDIX B RADIUS Attributes 293
RADIUS IETF Attributes 293
IETF Tagged Attributes on LAC 295
RADIUS Vendor-Specific Attributes 296
Vendor-Specific Attributes for Account Operations 300
RADIUS ADSL Attributes 300
RADIUS ASCEND Attributes 301
RADIUS Microsoft Attributes 301
RADIUS Disconnect-Cause Attributes 301
APPENDIX C Action Handlers 307
APPENDIX D BNG Use Cases and Sample Configurations 309
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 ix
Contents

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
xOL-28375-03
Contents