Cisco ASR 9000 Series User manual

Cisco ASR 9000 Series Aggregation Services Router Broadband

Network Gateway Configuration Guide, Release 4.3.x

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-28375-03

CONTENTS

Preface

Preface xi

Changes to This Document xi

Obtaining Documentation and Submitting a Service Request xi

CHAPTER 1

New and Changed BNG Features 1

New and Changed Information 1

CHAPTER 2

Broadband Network Gateway Overview 15

Understanding BNG 15

BNG Architecture 16

BNG Role in ISP Network Models 18

BNG Packaging 19

Installing and Activating the BNG Pie on Cisco ASR 9000 Series Router 19

BNG Configuration Process 21

Hardware Requirements for BNG 21

BNG Interoperability 22

CHAPTER 3

Configuring Authentication, Authorization, and Accounting Functions 25

AAA Overview 25

Using RADIUS Server Group 27

Configuring RADIUS Server Group 27

Specifying Method List 29

Configuring Method Lists for AAA 30

Defining AAA Attributes 31

Creating Attributes of Specific Format 33

Configuring RADIUS Attribute List 37

Configuring RADIUS Attribute Format 39

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release

4.3.x

OL-28375-03 iii

Configuring RADIUS Attribute Nas-port-type 40

Configuring AAA Attribute Format Function 42

Making RADIUS Server Settings 43

Configuring RADIUS Server Settings 43

Configuring Automated Testing 47

Setting IP DSCP for RADIUS Server 49

Balancing Transaction Load on the RADIUS Server 50

Configuring Load Balancing for Global RADIUS Server Group 50

Configuring Load Balancing for a Named RADIUS Server Group 51

Throttling of RADIUS Records 53

Configuring RADIUS Throttling Globally 53

Configuring RADIUS Throttling on a Server Group 55

RADIUS Change of Authorization (CoA) Overview 56

Service Accounting 58

Configuring Service Accounting 60

Statistics Infrastructure 62

Configuring Statistics IDs (statsD) 62

Understanding Per-VRF AAA Function 63

RADIUS Double-Dip Feature 64

Additional References 64

CHAPTER 4

Activating Control Policy 67

Control Policy Overview 67

Creating Class-Map 68

Configuring a Class-Map 69

Creating Policy-Map 70

Control Policy Events 71

Configuring a Policy-Map 72

Activating Policy-Map 74

Enabling a Service-Policy on a Subscriber Interface 74

Defining Dynamic Templates 75

Additional References 76

CHAPTER 5

Establishing Subscriber Sessions 79

Subscriber Session Overview 79

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,

Release 4.3.x

iv OL-28375-03

Contents

Establishing IPoE Session 81

Enabling IPv4 or IPv6 on an Access Interface 82

Creating Dynamic Template for IPv4 or IPv6 Subscriber Session 84

Creating a Policy-Map to Run During IPoE Session 87

Enabling IPoE Subscribers on an Access Interface 88

Establishing PPPoE Session 92

Provisioning PPP PTA Session 93

Creating PPPoE Profiles 93

Creating a PPP Dynamic-Template 95

Creating a Policy-Map to Run During PPPoE Session 96

Applying the PPPoE Configurations to an Access Interface 98

Provisioning PPP LAC Session 100

L2TP Reassembly on LAC 101

Enabling L2TP Reassembly on LAC 102

L2TP Access Concentrator Stateful Switchover 103

Enabling LAC SSO 103

Enabling RPFO on Process-failures 105

Configuring the VPDN Template 106

Configuring Maximum Simultaneous VPDN Sessions 108

Activating VPDN Logging 110

Configuring Options to Apply on Calling Station ID 111

Configuring L2TP Session-ID Commands 112

Configuring L2TP Class Options 114

Configuring Softshut for VPDN 116

PPPoE Smart Server Selection 117

Configuring PADO Delay 118

PPPoE Session Limit and Throttle 120

PPPoE Session Limit 120

Configuring PPPoE Session Limit 120

PPPoE Session Throttle 122

Configuring PPPoE Session Throttle 122

Making DHCP Settings 124

Enabling DHCP Proxy 125

Configuring DHCP IPv4 Profile Proxy Class 126

Configuring a Circuit-ID for an Interface 127

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release

4.3.x

OL-28375-03 v

Contents

Configuring a Remote-ID 128

Configuring the Client Lease Time 130

Attaching a Proxy Profile to an Interface 131

Specifying DHCP Lease Limit 132

Specifying the Lease Limit for a Circuit-ID 133

Specifying the Lease Limit for a Remote-ID 134

Specifying the Lease Limit for an Interface 135

Understanding DHCP Option-82 137

Option 82 Relay Information Encapsulation 137

Configuring DHCPv4 Class of Service (CoS) 138

DHCPv6 Overview 138

DHCPv6 Server and DHCPv6 Proxy 139

Enabling DHCPv6 for Different Configuration Modes 139

Setting Up DHCPv6 Parameters 143

DHCPv6 Features 145

High Availability Support for DHCPv6 145

DHCPv6 Prefix Delegation 146

IPv6 IPoE Subscriber Support 146

Configuring IPv6 IPoE Subscriber Interface 146

IPv6 PPPoE Subscriber Support 154

Configuring IPv6 PPPoE Subscriber Interfaces 154

Ambiguous VLAN Support 161

Configuring Ambiguous VLANs 161

DHCPv6 Address or Prefix Pool 164

Configuring IPv6 Address or Prefix Pool Name 164

DHCPv6 Dual-Stack Lite Support 167

Configuring AFTR Fully Qualified Domain Name for DS-Lite 167

VRF Awareness in DHCPv6 169

Defining VRF in a Dynamic Template 169

Packet Handling on Subscriber Interfaces 170

IPv6 Neighbor Discovery 172

Additional References 172

CHAPTER 6

Deploying the Quality of Service (QoS) 175

Quality of Service Overview 175

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,

Release 4.3.x

vi OL-28375-03

Contents

Configuring Service-policy and Applying Subscriber Settings Through RADIUS 176

Configuring Service-policy and Applying Subscriber Settings Through Dynamic Template 178

Parameterized QoS 181

Parameterized QoS Syntax 182

Configuring Parameterized QoS Policy Through RADIUS 187

Modifying Service Policy through CoA 189

QoS Accounting 191

Configuring QoS Accounting 192

Support for Shared Policy Instance 194

Configuring a Policy with SPI in the Input or Output Direction Using Dynamic Template 195

Configuring a Policy with SPI in the Input or Output Direction Using RADIUS 198

Merging QoS Policy-maps 200

Enabling Policy-maps Merge 201

QoS Features Supported on BNG 204

VLAN Policy on Access Interface 208

Configuring Policy on S-VLAN 209

Configuring VLAN Policy on an Access Interface 210

Additional References 212

CHAPTER 7

Configuring Subscriber Features 213

Excessive Punt Flow Trap 213

Enabling Excessive Punt Flow Trap Processing 215

Access Control List and Access Control List-based Forwarding 217

Configuring Access-Control Lists 217

Activating ACL 219

Support for Lawful Intercept 220

Per-session Lawful Intercept 221

Disabling SNMP-based Lawful Intercept 222

Configuring the Inband Management Plane Protection Feature 223

Enabling the Mediation Device to Intercept VoIP and Data Sessions 223

Radius-based Lawful Intercept 226

Enabling RADIUS-based Lawful Intercept 226

TCP MSS Adjustment 228

Configuring the TCP MSS Value of TCP Packets 229

Subscriber Session on Ambiguous VLANs 232

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release

4.3.x

OL-28375-03 vii

Contents

Establishing Subscriber Session on Ambiguous VLANs 232

uRPF 234

Multicast Services 235

Multicast Coexistence 235

Enabling Address Family for the VRF 235

Multicast Replication 236

HQoS Correlation 236

Configuring Minimum Unicast Bandwidth 237

Configuring Multicast HQOS Correlation Mode or Passive Mode 238

IGMP to Unicast QoS Shaper Correlation 239

Configuring the IGMP to HQoS Correlation Feature in a VRF 240

Configuring route-policy for Unicast QoS Shaper 241

Configuring IGMP Parameters for Subscriber Interfaces 243

IGMP Accounting 245

Configuring IGMP Accounting 245

DAPS Support 247

Configuring IPv4 Distributed Address Pool Service 247

Creating a Configuration Pool Submode 248

Configuring the Subnet Number and Mask for an Address Pool 250

Specifying a Range of IPv6 Addresses 252

Specifying a Utilization Threshold 253

Specifying the Length of the Prefix 255

Specifying a Set of Addresses or Prefixes Inside a Subnet 256

HTTP Redirect Using PBR 258

Identifying HTTP Destinations for Redirection 259

Configuring Class Maps for HTTP Redirection 263

Configuring Policy Map for HTTP Redirect 265

Configuring Dynamic Template for Applying HTTPR Policy 268

Configuring Web Logon 269

Additional References 273

APPENDIX A

XML Support for BNG Features 275

AAA XML Support 275

DHCP XML Support 278

Control Policy XML Support 281

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,

Release 4.3.x

viii OL-28375-03

Contents

DAPS XML Support 284

PPPoE XML Support 286

Subscriber Database XML Support 288

APPENDIX B

RADIUS Attributes 293

RADIUS IETF Attributes 293

IETF Tagged Attributes on LAC 295

RADIUS Vendor-Specific Attributes 296

Vendor-Specific Attributes for Account Operations 300

RADIUS ADSL Attributes 300

RADIUS ASCEND Attributes 301

RADIUS Microsoft Attributes 301

RADIUS Disconnect-Cause Attributes 301

APPENDIX C

Action Handlers 307

APPENDIX D

BNG Use Cases and Sample Configurations 309

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release

4.3.x

OL-28375-03 ix

Contents

Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,

Release 4.3.x

xOL-28375-03

Contents

Other manuals for ASR 9000 Series

Table of contents

Other Cisco Wireless Router manuals

Cisco

Cisco IR8140H Guide

Cisco

Cisco Linksys WRT54GS User manual

Cisco

Cisco Valet M10 User manual

Cisco

Cisco Linksys E900 User manual

Cisco

Cisco Universal Broadband Router uBR7200 Original instructions

Cisco

Cisco 3230 User manual

Cisco

Cisco Linksys WRT54G3G User manual

Cisco

Cisco Linksys SE1500 User manual

Cisco

Cisco 1100 Series User manual

Cisco

Cisco BBSM 1 User manual

Cisco

Cisco ASR 9010 Instruction Manual

Cisco

Cisco WAP54GP - Wireless-G Access Point User manual

Cisco

Cisco WRT320N - Wireless-N Gigabit Router Wireless User manual

Cisco

Cisco Valet User manual

Cisco

Cisco Linksys WRT54GS User manual

Cisco

Cisco RB-WRT54GS2 - Wireless-G Broadband Router User manual

Cisco

Cisco T-Mobile HIPORT+ User manual

Cisco

Cisco 1812W - Integrated Services Router Wireless User manual

Cisco

Cisco QuickVPN - PC Instruction Manual

Cisco

Cisco Firepower 8140 Instruction Manual

Cisco

Cisco Linksys X-Series User manual

Cisco

Cisco WRT54GL User manual

Cisco

Cisco Linksys E3000 User manual

Cisco

Cisco SR520W-FE-K9 User manual

Popular Wireless Router manuals by other brands

Milesight

Milesight UG67 user guide

Airlogic

Airlogic AirSync Class 1 Features

Samsung

Samsung WCH730B user manual

TELEFONICA

TELEFONICA USB Adapter quick start guide

NETGEAR

NETGEAR PowerLINE WiFi 1000 Series quick start

Askey

Askey RAC2V1K user manual

Alloy

Alloy WLF2454AP-S user guide

TP-Link

TP-Link TL-WR542G user guide

NETGEAR

NETGEAR WNR2000v4 user manual

Hama

Hama 53120 Operating instruction

Intellinet

Intellinet 524582 user manual

Asus

Asus RT-N10P user guide

D-Link

D-Link DIR-506L Quick installation guide

Sapido

Sapido GR297n user manual

Asus

Asus DSL-N55U user guide

AMTC

AMTC WR7502 user guide

Compaq

Compaq CP-2W - iPAQ Connection Point manual

SMC Networks

SMC Networks WBR14-N2 FICHE user guide