![background image](http://html.mh-extra.com/html/cisco/ios-xe/ios-xe_configuration-manual_64936307.webp)
Redirecting Subscriber Traffic Using ISG Layer 4 Redirect
Configuration Examples for ISG Layer 4 Redirect
10
Service-policy type control DEFAULT-IP-POLICY
policy-map type control DEFAULT-IP-POLICY
class type control always event session-start
1 service-policy type service BLIND-RDT
!
class type control always event account-logon
1 authenticate aaa list AUTH-LIST
2 service-policy type service unapply BLIND-RDT
policy-map type service BLIND-RDT
class type traffic CLASS-ALL
redirect to group PORTAL
!
redirect server-group PORTAL
server ip 10.2.36.253 port 80
Redirecting Unauthorized Subscriber Traffic: Example
The following example shows the configuration of redirection for unauthorized subscribers. If the
subscriber is not logged onto the service called “svc”, traffic that matches “svc” is redirected to the
server group “PORTAL”. Once the subscriber logs in to the service, the traffic is no longer redirected.
When the subscriber logs out of the service, redirection is applied again.
service-policy type control THE_RULE
!
class-map type traffic match-any CLASS-ALL
!
class-map type traffic match-any CLASS-100_110
match access-group input 100
match access-group output 110
!
policy-map type service blind-rdt
class type traffic CLASS-ALL
redirect to group PORTAL
!
policy-map type service svc-rdt
class type traffic CLASS-ALL
redirect to group PORTAL
!
policy-map type service svc
class type traffic CLASS-100_110
class type traffic default in-out
drop
!
policy-map type control THE_RULE
class type control alwyas event account-logon
1 authenticate
2 service-policy type service name svc-rdt
class type control cond-svc-logon event service-start
1 service-policy type service unapply name svc-rdt
2 service-policy type service identifier service-name
class type control cond-svc-logon event service-stop
1 service-policy type service unapply name svc
2 service-policy type service name svc-rdt
!
class-map type control match-all cond-svc-logon
match identifier service-name svc
!
redirect server-group PORTAL
server ip 10.2.36.253 port 80
Summary of Contents for IOS XE
Page 14: ...About Cisco IOS XE Software Documentation Additional Resources and Documentation Feedback xii ...
Page 28: ...Using the Command Line Interface in Cisco IOS XE Software Additional Information xiv ...
Page 36: ...Intelligent Services Gateway Features Roadmap 8 ...
Page 46: ...Overview of ISG Feature Information for the Overview of ISG 10 ...
Page 70: ...Configuring ISG Control Policies Feature Information for ISG Control Policies 24 ...
Page 136: ...Configuring MQC Support for IP Sessions Feature Information for MQC Support for IP Sessions 8 ...
Page 224: ...Configuring ISG Subscriber Services Feature Information for ISG Subscriber Services 20 ...
Page 344: ...Service Gateway Interface Feature Information for Service Gateway Interface 8 ...