Cisco ASR 9000 Series User manual

Cisco ASR 9000 Series Aggregation Services Router Broadband
Network Gateway Configuration Guide, Release 4.3.x
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-28375-03

©Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xi
Changes to This Document xi
Obtaining Documentation and Submitting a Service Request xi
CHAPTER 1 New and Changed BNG Features 1
New and Changed Information 1
CHAPTER 2 Broadband Network Gateway Overview 15
Understanding BNG 15
BNG Architecture 16
BNG Role in ISP Network Models 18
BNG Packaging 19
Installing and Activating the BNG Pie on Cisco ASR 9000 Series Router 19
BNG Configuration Process 21
Hardware Requirements for BNG 21
BNG Interoperability 22
CHAPTER 3 Configuring Authentication, Authorization, and Accounting Functions 25
AAA Overview 25
Using RADIUS Server Group 27
Configuring RADIUS Server Group 27
Specifying Method List 29
Configuring Method Lists for AAA 30
Defining AAA Attributes 31
Creating Attributes of Specific Format 33
Configuring RADIUS Attribute List 37
Configuring RADIUS Attribute Format 39
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 iii

Configuring RADIUS Attribute Nas-port-type 40
Configuring AAA Attribute Format Function 42
Making RADIUS Server Settings 43
Configuring RADIUS Server Settings 43
Configuring Automated Testing 47
Setting IP DSCP for RADIUS Server 49
Balancing Transaction Load on the RADIUS Server 50
Configuring Load Balancing for Global RADIUS Server Group 50
Configuring Load Balancing for a Named RADIUS Server Group 51
Throttling of RADIUS Records 53
Configuring RADIUS Throttling Globally 53
Configuring RADIUS Throttling on a Server Group 55
RADIUS Change of Authorization (CoA) Overview 56
Service Accounting 58
Configuring Service Accounting 60
Statistics Infrastructure 62
Configuring Statistics IDs (statsD) 62
Understanding Per-VRF AAA Function 63
RADIUS Double-Dip Feature 64
Additional References 64
CHAPTER 4 Activating Control Policy 67
Control Policy Overview 67
Creating Class-Map 68
Configuring a Class-Map 69
Creating Policy-Map 70
Control Policy Events 71
Configuring a Policy-Map 72
Activating Policy-Map 74
Enabling a Service-Policy on a Subscriber Interface 74
Defining Dynamic Templates 75
Additional References 76
CHAPTER 5 Establishing Subscriber Sessions 79
Subscriber Session Overview 79
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
iv OL-28375-03
Contents

Establishing IPoE Session 81
Enabling IPv4 or IPv6 on an Access Interface 82
Creating Dynamic Template for IPv4 or IPv6 Subscriber Session 84
Creating a Policy-Map to Run During IPoE Session 87
Enabling IPoE Subscribers on an Access Interface 88
Establishing PPPoE Session 92
Provisioning PPP PTA Session 93
Creating PPPoE Profiles 93
Creating a PPP Dynamic-Template 95
Creating a Policy-Map to Run During PPPoE Session 96
Applying the PPPoE Configurations to an Access Interface 98
Provisioning PPP LAC Session 100
L2TP Reassembly on LAC 101
Enabling L2TP Reassembly on LAC 102
L2TP Access Concentrator Stateful Switchover 103
Enabling LAC SSO 103
Enabling RPFO on Process-failures 105
Configuring the VPDN Template 106
Configuring Maximum Simultaneous VPDN Sessions 108
Activating VPDN Logging 110
Configuring Options to Apply on Calling Station ID 111
Configuring L2TP Session-ID Commands 112
Configuring L2TP Class Options 114
Configuring Softshut for VPDN 116
PPPoE Smart Server Selection 117
Configuring PADO Delay 118
PPPoE Session Limit and Throttle 120
PPPoE Session Limit 120
Configuring PPPoE Session Limit 120
PPPoE Session Throttle 122
Configuring PPPoE Session Throttle 122
Making DHCP Settings 124
Enabling DHCP Proxy 125
Configuring DHCP IPv4 Profile Proxy Class 126
Configuring a Circuit-ID for an Interface 127
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 v
Contents

Configuring a Remote-ID 128
Configuring the Client Lease Time 130
Attaching a Proxy Profile to an Interface 131
Specifying DHCP Lease Limit 132
Specifying the Lease Limit for a Circuit-ID 133
Specifying the Lease Limit for a Remote-ID 134
Specifying the Lease Limit for an Interface 135
Understanding DHCP Option-82 137
Option 82 Relay Information Encapsulation 137
Configuring DHCPv4 Class of Service (CoS) 138
DHCPv6 Overview 138
DHCPv6 Server and DHCPv6 Proxy 139
Enabling DHCPv6 for Different Configuration Modes 139
Setting Up DHCPv6 Parameters 143
DHCPv6 Features 145
High Availability Support for DHCPv6 145
DHCPv6 Prefix Delegation 146
IPv6 IPoE Subscriber Support 146
Configuring IPv6 IPoE Subscriber Interface 146
IPv6 PPPoE Subscriber Support 154
Configuring IPv6 PPPoE Subscriber Interfaces 154
Ambiguous VLAN Support 161
Configuring Ambiguous VLANs 161
DHCPv6 Address or Prefix Pool 164
Configuring IPv6 Address or Prefix Pool Name 164
DHCPv6 Dual-Stack Lite Support 167
Configuring AFTR Fully Qualified Domain Name for DS-Lite 167
VRF Awareness in DHCPv6 169
Defining VRF in a Dynamic Template 169
Packet Handling on Subscriber Interfaces 170
IPv6 Neighbor Discovery 172
Additional References 172
CHAPTER 6 Deploying the Quality of Service (QoS) 175
Quality of Service Overview 175
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
vi OL-28375-03
Contents

Configuring Service-policy and Applying Subscriber Settings Through RADIUS 176
Configuring Service-policy and Applying Subscriber Settings Through Dynamic Template 178
Parameterized QoS 181
Parameterized QoS Syntax 182
Configuring Parameterized QoS Policy Through RADIUS 187
Modifying Service Policy through CoA 189
QoS Accounting 191
Configuring QoS Accounting 192
Support for Shared Policy Instance 194
Configuring a Policy with SPI in the Input or Output Direction Using Dynamic Template 195
Configuring a Policy with SPI in the Input or Output Direction Using RADIUS 198
Merging QoS Policy-maps 200
Enabling Policy-maps Merge 201
QoS Features Supported on BNG 204
VLAN Policy on Access Interface 208
Configuring Policy on S-VLAN 209
Configuring VLAN Policy on an Access Interface 210
Additional References 212
CHAPTER 7 Configuring Subscriber Features 213
Excessive Punt Flow Trap 213
Enabling Excessive Punt Flow Trap Processing 215
Access Control List and Access Control List-based Forwarding 217
Configuring Access-Control Lists 217
Activating ACL 219
Support for Lawful Intercept 220
Per-session Lawful Intercept 221
Disabling SNMP-based Lawful Intercept 222
Configuring the Inband Management Plane Protection Feature 223
Enabling the Mediation Device to Intercept VoIP and Data Sessions 223
Radius-based Lawful Intercept 226
Enabling RADIUS-based Lawful Intercept 226
TCP MSS Adjustment 228
Configuring the TCP MSS Value of TCP Packets 229
Subscriber Session on Ambiguous VLANs 232
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 vii
Contents

Establishing Subscriber Session on Ambiguous VLANs 232
uRPF 234
Multicast Services 235
Multicast Coexistence 235
Enabling Address Family for the VRF 235
Multicast Replication 236
HQoS Correlation 236
Configuring Minimum Unicast Bandwidth 237
Configuring Multicast HQOS Correlation Mode or Passive Mode 238
IGMP to Unicast QoS Shaper Correlation 239
Configuring the IGMP to HQoS Correlation Feature in a VRF 240
Configuring route-policy for Unicast QoS Shaper 241
Configuring IGMP Parameters for Subscriber Interfaces 243
IGMP Accounting 245
Configuring IGMP Accounting 245
DAPS Support 247
Configuring IPv4 Distributed Address Pool Service 247
Creating a Configuration Pool Submode 248
Configuring the Subnet Number and Mask for an Address Pool 250
Specifying a Range of IPv6 Addresses 252
Specifying a Utilization Threshold 253
Specifying the Length of the Prefix 255
Specifying a Set of Addresses or Prefixes Inside a Subnet 256
HTTP Redirect Using PBR 258
Identifying HTTP Destinations for Redirection 259
Configuring Class Maps for HTTP Redirection 263
Configuring Policy Map for HTTP Redirect 265
Configuring Dynamic Template for Applying HTTPR Policy 268
Configuring Web Logon 269
Additional References 273
APPENDIX A XML Support for BNG Features 275
AAA XML Support 275
DHCP XML Support 278
Control Policy XML Support 281
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
viii OL-28375-03
Contents

DAPS XML Support 284
PPPoE XML Support 286
Subscriber Database XML Support 288
APPENDIX B RADIUS Attributes 293
RADIUS IETF Attributes 293
IETF Tagged Attributes on LAC 295
RADIUS Vendor-Specific Attributes 296
Vendor-Specific Attributes for Account Operations 300
RADIUS ADSL Attributes 300
RADIUS ASCEND Attributes 301
RADIUS Microsoft Attributes 301
RADIUS Disconnect-Cause Attributes 301
APPENDIX C Action Handlers 307
APPENDIX D BNG Use Cases and Sample Configurations 309
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 ix
Contents

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
xOL-28375-03
Contents

Preface
This Preface contains these sections:
•Changes to This Document, page xi
•Obtaining Documentation and Submitting a Service Request, page xi
Changes to This Document
This table lists the technical changes made to this document since it was first released.
Table 1: Changes to This Document
SummaryDateRevision
Republished with documentation updates for
Cisco IOS XR Release 4.3.2 features.
September 2013OL-28375-03
Republished with documentation updates for
Cisco IOS XR Release 4.3.1 features.
May 2013OL-28375-02
Initial release of this document.December 2012OL-28375-01
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service
request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://
www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.
Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical
documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The
RSS feeds are a free service.
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 xi

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
xii OL-28375-03
Preface
Obtaining Documentation and Submitting a Service Request

CHAPTER 1
New and Changed BNG Features
This table summarizes the new and changed feature information for the Cisco ASR 9000 Series Aggregation
Services Router Broadband Network Gateway Configuration Guide, and tells you where they are documented.
For a complete list of new and changed features in Cisco IOS XR Software, Release 4.3.x, see the New and
Changed Features in Cisco IOS XR Software, Release 4.3.x for Cisco ASR 9000 Series Aggregation Services
Router document.
•New and Changed Information, page 1
New and Changed Information
This table summarizes the new and changed feature information for the Cisco ASR 9000 Series Aggregation
Services Router Broadband Network Gateway Configuration Guide, and tells you where they are documented.
Table 2: New and Changed Features
Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Establishing Subscriber
Sessions chapter:
•Configuring DHCPv4
Class of Service (CoS),
on page 138
Refer BNG DHCP
Commands chapter in Cisco
ASR 9000 Series Aggregation
Services Router Broadband
Network Gateway Command
Reference for information on
the commands used for
configuring DHCPv4 CoS.
Release 4.3.2This feature was
introduced.
Configuring
DHCPv4 Class of
Service (CoS)
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 1

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Configuring Subscriber
Features chapter:
•Support for Lawful
Intercept, on page 220
•Disabling SNMP-based
Lawful Intercept, on
page 222
Refer BNG AAA Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
lawful intercept.
Release 4.3.2By default, Lawful
Intercept is no longer a part
of the Cisco IOS XR
software.
Lawful Intercept
(LI) as a separate
package
Establishing Subscriber
Sessions chapter:
•PPPoE Smart Server
Selection, on page 117
•Configuring PADO
Delay, on page 118
XML Support for BNG
Features chapter:
•PPPoE XML Support,
on page 286
Refer PPPoE Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
configuring PADO delay for
PPPoE Smart Server
Selection feature.
Release 4.3.1This feature was
introduced.
PPPoE Smart
Server Selection
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
2OL-28375-03
New and Changed BNG Features
New and Changed Information

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Configuring Authentication,
Authorizing, and Accounting
Functions chapter:
•NAS-Port-Type on
Interface or VLAN
Sub-interface, on page
34
•Configuring RADIUS
Attribute
Nas-port-type, on page
40
Refer BNG AAA Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
configuring NAS-Port-Type.
Release 4.3.1NAS-Port-Type was made
configurable on interface or
VLAN sub-interface
NAS-Port-Type
on Interface or
VLAN
Sub-interface
Establishing Subscriber
Sessions chapter:
•L2TP Reassembly on
LAC, on page 101
•Enabling L2TP
Reassembly on LAC,
on page 102
Refer PPPoE LAC-Specific
Commands chapter in Cisco
ASR 9000 Series Aggregation
Services Router Broadband
Network Gateway Command
Reference for information on
the commands used for
configuring NAS-Port-Type.
Release 4.3.1This feature was
introduced.
L2TP Reassembly
on LAC
RADIUS Attributes Appendix
B chapter:
•IETF Tagged Attributes
on LAC, on page 295
Release 4.3.1The tag support was added
for IETF Attributes on
LAC.
IETF Tagged
Attributes on
LAC
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 3
New and Changed BNG Features
New and Changed Information

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Establishing Subscriber
Sessions chapter:
•PPPoE Session Limit,
on page 120
•PPPoE Session
Throttle, on page 122
•Configuring PPPoE
Session Limit, on page
120
•Configuring PPPoE
Session Throttle, on
page 122
Refer PPPoE Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
configuring PPPoE session
limit and throttle.
Release 4.3.1The PPPoE session limit
and throttle support was
extended for more
parameters, with the
addition of a threshold for
the limit and request-count,
request-period and blocking
period for the throttle.
PPPoE Session
Limit and
Throttle
Establishing Subscriber
Sessions chapter:
•Configuring
Ambiguous VLANs,
on page 161
Configuring Subscriber
Features chapter:
•#unique_22
Release 4.3.1Ambiguous VLAN
configuration was enhanced
to support two new
encapsulations.
Ambiguous
VLAN
Broadband Network Gateway
Overview chapter:
•Hardware
Requirements for
BNG, on page 21
Release 4.3.1BNG support is added on
Cisco ASR 9922 Series
Aggregation Services
Routers.
ASR 9922
Support
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
4OL-28375-03
New and Changed BNG Features
New and Changed Information

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Deploying the Quality of
Service (QoS) chapter:
•VLAN Policy on
Access Interface, on
page 208
•Configuring VLAN
Policy on an Access
Interface, on page 210
Refer QOS Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
configuring VLAN policy.
Release 4.3.1This feature was
introduced.
VLAN Policy on
Access Interface
Establishing Subscriber
Sessions chapter:
•Specifying DHCP
Lease Limit, on page
132
Release 4.3.1Support for accepting
session limit per Circuit-ID
from AAA and overriding
the lease limit configured
from profile, was added.
Session Limit per
Circuit-ID
Establishing Subscriber
Sessions chapter:
•L2TP Access
Concentrator Stateful
Switchover, on page
103
•Enabling LAC SSO,
on page 103
•Enabling RPFO on
Process-failures, on
page 105
Refer PPPoE LAC-Specific
Commands chapter in Cisco
ASR 9000 Series Aggregation
Services Router Broadband
Network Gateway Command
Reference for information on
the commands used for
configuring LAC SSO.
Release 4.3.1This feature was
introduced.
LAC SSO
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 5
New and Changed BNG Features
New and Changed Information

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Configuring Authentication,
Authorizing, and Accounting
Functions chapter:
•Service Accounting, on
page 58
•Configuring Service
Accounting, on page
60
•Statistics
Infrastructure, on page
62
•Configuring Statistics
IDs (statsD), on page
62
Refer BNG AAA Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
configuring Service
Accounting.
Release 4.3.1This feature was
introduced.
Service
Accounting for
QoS
Deploying the Quality of
Service (QoS) chapter:
•Merging QoS
Policy-maps, on page
200
•Enabling Policy-maps
Merge, on page 201
Refer QOS Commands
chapter in Cisco ASR 9000
Series Aggregation Services
Router Broadband Network
Gateway Command
Reference for information on
the commands used for
Merging QoS Policy-maps.
Release 4.3.1This feature was
introduced.
Merging QoS
Policy-maps
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
6OL-28375-03
New and Changed BNG Features
New and Changed Information

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Establishing Subscriber
Sessions chapter:
•Option 82 Relay
Information
Encapsulation, on page
137
Refer BNG DHCP
Commands chapter in Cisco
ASR 9000 Series Aggregation
Services Router Broadband
Network Gateway Command
Reference for information on
the commands used for
Option 82 Relay Information
Encapsulation.
Release 4.3.1This feature was
introduced.
Option 82 Relay
Information
Encapsulation
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
4.3.x
OL-28375-03 7
New and Changed BNG Features
New and Changed Information

Where DocumentedIntroduced/Updated ReleaseDescriptionFeature
Establishing Subscriber
Sessions chapter:
•DHCPv6 Overview, on
page 138
•DHCPv6 Server and
DHCPv6 Proxy, on
page 139
•DHCPv6 Features, on
page 145
•Enabling DHCPv6 for
Different Configuration
Modes, on page 139
•Setting Up DHCPv6
Parameters, on page
143
•Configuring IPv6 IPoE
Subscriber Interface,
on page 146
•Configuring IPv6
PPPoE Subscriber
Interfaces, on page 154
•Configuring IPv6
Address or Prefix Pool
Name, on page 164
Refer BNG DHCP
Commands chapter in Cisco
ASR 9000 Series Aggregation
Services Router Broadband
Network Gateway Command
Reference for information on
the commands used for
configuring DHCP IPv6.
Release 4.3.0This feature was supported
on IPv6.
DHCPv6
Establishing Subscriber
Sessions chapter:
•DHCPv6 Dual-Stack
Lite Support, on page
167
•Configuring AFTR
Fully Qualified Domain
Name for DS-Lite, on
page 167
Release 4.3.0This feature was
introduced.
DS-Lite
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
8OL-28375-03
New and Changed BNG Features
New and Changed Information