The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Last Updated: May 4, 2009
The Per-User QoS via AAA Policy Name feature provides the ability to download a policy name that describes quality of service (QoS) parameters for a user session from a RADIUS server and apply them for the particular session.
Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the "Feature Information for Per-User QoS via AAA Policy Name" section.
Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp. An account on Cisco.com is not required.
•Prerequisites for Per-User QoS via AAA Policy Name
•Information About Per-User QoS via AAA Policy Name
•How to Configure Per-User QoS via AAA Policy Name
•Configuration Example for Per-User QoS via AAA Policy Name
•Feature Information for Per-User QoS via AAA Policy Name
Before you configure the Per-User QoS via AAA Policy Name feature, you must locally define on your router the policy whose name is received from the RADIUS server.
Effective with Cisco IOS Release 12.2(15)T, separate Cisco vendor-specific attributes (VSAs) are added for the service map.
To configure the Per-User QoS via AAA Policy Name feature, you must understand the following concept:
Two new VSAs have been added for the service map, and the VSAs will bypass the parser while applying the policy for a particular user or session. The new VSAs are as follows:
•vendor-id=9 (Cisco) Vendor type 37 for upstream traffic to input policy name
•vendor-id=9 (Cisco) Vendor type 38 for downstream traffic to output policy name
This section contains the following procedure:
•Monitoring and Maintaining Per-User QoS via AAA Policy Name
To configure per-user QoS, use the authentication, authorization, and accounting (AAA) policy name that you have received from the RADIUS server. To configure QoS policy, refer to the "Related Documents" section.
To monitor and maintain per-user QoS using the AAA policy name, use the following debug commands:
1. enable
2. debug aaa authorization
3. debug aaa per-user
The following example shows per-user QoS being configured using the AAA policy name "policy_class_1_2":
!NAS configuration
class-map match-all class1
match access-group 101
class-map match-all class2
match qos-group 4
match access-group 101
policy-map policy_class_1_2
class class1
bandwidth 3000
queue-limit 30
class class2
bandwidth 2000
class class-default
bandwidth 500
!RADIUS Profile Configuration peruser_qos_1 Password = "password1"
Service-Type = Framed,
Framed-Protocol = PPP,
Cisco:Cisco-avpair = "ip:sub-policy-In=ssspolicy"
!ssspolicy in the above line is the name of the policy.
peruser_qos_2 Password = "password1"
Service-Type = Framed,
Framed-Protocol = PPP,
Cisco:Cisco-avpair = "ip:sub-policy-Out=ssspolicy"
The following sections provide references related to the Per-User QoS via AAA Policy Name.
|
|
---|---|
AAA per-user and QoS configurations and information about the policy-map command |
•Configuring Per-User Configuration |
|
|
---|---|
None |
— |
|
|
---|---|
None |
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: |
|
|
---|---|
No new or modified RFCs are supported by this feature. |
— |
Table 1 lists the release history for this feature.
Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.
Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp. An account on Cisco.com is not required.
Note Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.
RADIUS—Remote Authentication Dial-In User Service. RADIUS is a database for authenticating modem and ISDN connections and for tracking connection time.
VSA—vendor-specific attribute. A VSA is an attribute that has been implemented by a particular vendor. It uses the attribute Vendor-Specific to encapsulate the resulting AV pair: essentially, Vendor-Specific = protocol:attribute = value.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2000-2009 Cisco Systems, Inc. All rights reserved.