Cisco IOS XE, Configuration Manual

Page: 175 / 358

RADIUS-Based Policing
Configuration Examples for RADIUS-Based Policing
11
policy-map type service IPOne
10 class type traffic IPOne
accounting aaa list default
!
!
policy-map output_parent
class class-default
police 32000 32000 32000 conform-action transmit exceed-action drop violate-action
drop
service-policy output_child
!
!
policy-map output_child
class voip
police 32000 32000 32000 conform-action transmit exceed-action drop violate-action
drop
!
!
!
! RADIUS relays the string for service activation. After the VSA is received, a new ACL is
created.
ip access-list extended IPOne-acl-10.10.1.0/28,10.3.20/29
remark Voice-GW
permit ip host 10.0.1.40 any
permit ip 10.10.1.0 0.0.0.15 any
permit ip any 10.10.1.0 0.0.0.15
permit ip 10.3.2.0 0.0.0.7 any
permit ip any 10.3.2.0 0.0.0.7
!
! A new class map is created.
class-map match-any voip-10.10.1.0/28,10.3.20/29
match access-group name IPOne-acl-10.10.1.0/28,10.3.20/29
!
! The old class is replaced with the new class in the output QoS policy of the subscriber,
along with any other attributes.
Adding Parameterization of QoS ACLs with ISG Service accounting
The following example shows how to add QoS accounting by configuring the Intelligent Services
Gateway (ISG) accounting service:
policy-map type service IPOne
10 class type traffic IPOne
accounting aaa list default
!
class type traffic default in-out
!
!
! After the VSA is received, a new traffic class map is created on the service.
class-map type traffic match-any IPOne-10.10.1.0/28,10.3.2.0/29
match access-group output name IPOne-acl-10.10.1.0/28$10.3.2.0/29
match access-group input name IPOne-acl-10.10.1.0/28$10.3.2.0/29
!
! A new ISG service is created.
policy-map type service IPOne(tc_in=IPOne-acl-10.10.1.0/28$10.3.2.0/29)
10 class type traffic IPOne-10.10.1.0/28,10.3.2.0/29
accounting aaa list default
!
class type traffic default in-out
!