![background image](http://html.mh-extra.com/html/cisco/ios-xe/ios-xe_configuration-manual_64936097.webp)
Configuring ISG Access for IP Subscriber Sessions
How to Configure ISG for IP Subscriber Sessions
13
•
Idle timeout and session timeout
Idle timeouts and session timeouts can be used to detect or impose termination of an IP session.
•
Control policy
A control policy containing the “service disconnect” action can be used to terminate a session.
IP Session Recovery for DHCP-Initiated IP Sessions
When an IP session is terminated (for example, by account logoff or session timeout) or lost (for
example, by router reload), the client may continue to hold an unexpired DHCP lease. When this
happens, ISG performs a session restart to prevent the client’s IP connection from being stuck until the
DHCP lease expires. A control policy can be configured to define the actions that ISG will take when
the session restart event occurs. If a policy is not defined, a default policy will take effect. The default
policy causes ISG to disconnect the session after 60 seconds following a session restart and is the
equivalent of the following configuration:
policy-map type control GLOBAL
class type control always event session-restart
1 service disconnect delay 60
This default policy appears in the output for the show subscriber policy rules command as follows:
Rule: internal-rule-session-restart
Class-map: always event session-restart
Action: 1 service disconnect delay 60
Executed: 0
Default Services for IP Subscriber Sessions
Newly created IP sessions may require a default service to allow subsequent subscriber packets to be
processed appropriately; for example, to permit or force TCP packets to a captive portal where
menu-driven authentication and service selection can be performed. A default service policy map or
service profile may be configured for IP sessions to redirect traffic, enable port-bundle host-key
functionality for session identification, or enable transparent autologon. A default service would also
likely include a network service, which allows subscribers to access a web portal for authentication and
service selection.
How to Configure ISG for IP Subscriber Sessions
Perform the following tasks to configure ISG Layer 3 access:
•
Creating ISG Sessions for IP Subscribers, page 13
(required)
•
Assigning ISG Subscriber IP Addresses Using DHCP, page 24
(required)
•
Configuring ISG Dynamic VPN Selection, page 29
(required)
Creating ISG Sessions for IP Subscribers
An ISG device creates IP sessions for IP traffic on subscriber-side interfaces. The following tasks enable
IP sessions and indicate how sessions will be identified:
Summary of Contents for IOS XE
Page 14: ...About Cisco IOS XE Software Documentation Additional Resources and Documentation Feedback xii ...
Page 28: ...Using the Command Line Interface in Cisco IOS XE Software Additional Information xiv ...
Page 36: ...Intelligent Services Gateway Features Roadmap 8 ...
Page 46: ...Overview of ISG Feature Information for the Overview of ISG 10 ...
Page 70: ...Configuring ISG Control Policies Feature Information for ISG Control Policies 24 ...
Page 136: ...Configuring MQC Support for IP Sessions Feature Information for MQC Support for IP Sessions 8 ...
Page 224: ...Configuring ISG Subscriber Services Feature Information for ISG Subscriber Services 20 ...
Page 344: ...Service Gateway Interface Feature Information for Service Gateway Interface 8 ...