Cisco IOS XE, Configuration Manual

Page: 304 / 358

Redirecting Subscriber Traffic Using ISG Layer 4 Redirect
How to Configure ISG Layer 4 Redirect
7
Configuring Layer 4 Redirection in a Service Profile or User Profile on the AAA
Server
The Layer 4 Redirect feature can be configured as a Cisco vendor-specific attribute (VSA) in a user or
service profile on an authentication, authorization, and accounting (AAA) server. This attribute can
appear more than once in a profile to define different types of redirections for a session and can be used
in both user and service profiles simultaneously.
SUMMARY STEPS
1. Add the Layer 4 Redirect VSA to the user profile or service profile on the AAA server.
DETAILED STEPS
What to Do Next
If you configure ISG Layer 4 redirection in a service profile, you may want to configure a method of
activating the service profile; for example, control policies can be used to activate services. For more
information about methods of service activation, see the module “
Configuring ISG Subscriber Services ”.
Verifying ISG Traffic Redirection
Perform this task to verify the configuration and operation of ISG Layer 4 traffic redirection.
SUMMARY STEPS
1.
enable
2. show redirect translations [ip ip-address]
3.
show redirect group [group-name]
4. show subscriber session [detailed] [identifier identifier | uid session-id | username name]
Command or Action Purpose
Step 1
Add the Layer 4 Redirect VSA to the user profile or
subscriber profile on the AAA server.
Cisco-AVPair = “ip:l4redirect=redirect to {group
server-group-name | ip ip-address [port port-number]}
[duration seconds] [frequency seconds]”
Redirects traffic to a specified server or server group.