Cisco IOS XE, Руководство по настройке

Страница: 307 / 358

Redirecting Subscriber Traffic Using ISG Layer 4 Redirect
Configuration Examples for ISG Layer 4 Redirect
10
Service-policy type control DEFAULT-IP-POLICY
policy-map type control DEFAULT-IP-POLICY
class type control always event session-start
1 service-policy type service BLIND-RDT
!
class type control always event account-logon
1 authenticate aaa list AUTH-LIST
2 service-policy type service unapply BLIND-RDT
policy-map type service BLIND-RDT
class type traffic CLASS-ALL
redirect to group PORTAL
!
redirect server-group PORTAL
server ip 10.2.36.253 port 80
Redirecting Unauthorized Subscriber Traffic: Example
The following example shows the configuration of redirection for unauthorized subscribers. If the
subscriber is not logged onto the service called “svc”, traffic that matches “svc” is redirected to the
server group “PORTAL”. Once the subscriber logs in to the service, the traffic is no longer redirected.
When the subscriber logs out of the service, redirection is applied again.
service-policy type control THE_RULE
!
class-map type traffic match-any CLASS-ALL
!
class-map type traffic match-any CLASS-100_110
match access-group input 100
match access-group output 110
!
policy-map type service blind-rdt
class type traffic CLASS-ALL
redirect to group PORTAL
!
policy-map type service svc-rdt
class type traffic CLASS-ALL
redirect to group PORTAL
!
policy-map type service svc
class type traffic CLASS-100_110
class type traffic default in-out
drop
!
policy-map type control THE_RULE
class type control alwyas event account-logon
1 authenticate
2 service-policy type service name svc-rdt
class type control cond-svc-logon event service-start
1 service-policy type service unapply name svc-rdt
2 service-policy type service identifier service-name
class type control cond-svc-logon event service-stop
1 service-policy type service unapply name svc
2 service-policy type service name svc-rdt
!
class-map type control match-all cond-svc-logon
match identifier service-name svc
!
redirect server-group PORTAL
server ip 10.2.36.253 port 80