Table Of Contents

Per-User QoS via AAA Policy Name

Finding Feature Information

Contents

Prerequisites for Per-User QoS via AAA Policy Name

Information About Per-User QoS via AAA Policy Name

VSAs Added for Per-User QoS via AAA Policy Name

How to Configure Per-User QoS via AAA Policy Name

Monitoring and Maintaining Per-User QoS via AAA Policy Name

Configuration Example for Per-User QoS via AAA Policy Name

Additional References

Related Documents

Standards

MIBs

RFCs

Technical Assistance

Feature Information for Per-User QoS via AAA Policy Name

Glossary

Per-User QoS via AAA Policy Name

---

First Published: March 31, 2000

Last Updated: May 4, 2009

The Per-User QoS via AAA Policy Name feature provides the ability to download a policy name that describes quality of service (QoS) parameters for a user session from a RADIUS server and apply them for the particular session.

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the "Feature Information for Per-User QoS via AAA Policy Name" section.

Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp. An account on Cisco.com is not required.

Contents

•Prerequisites for Per-User QoS via AAA Policy Name

•Information About Per-User QoS via AAA Policy Name

•How to Configure Per-User QoS via AAA Policy Name

•Configuration Example for Per-User QoS via AAA Policy Name

•Additional References

•Feature Information for Per-User QoS via AAA Policy Name

Prerequisites for Per-User QoS via AAA Policy Name

Before you configure the Per-User QoS via AAA Policy Name feature, you must locally define on your router the policy whose name is received from the RADIUS server.

Information About Per-User QoS via AAA Policy Name

Effective with Cisco IOS Release 12.2(15)T, separate Cisco vendor-specific attributes (VSAs) are added for the service map.

To configure the Per-User QoS via AAA Policy Name feature, you must understand the following concept:

VSAs Added for Per-User QoS via AAA Policy Name

Two new VSAs have been added for the service map, and the VSAs will bypass the parser while applying the policy for a particular user or session. The new VSAs are as follows:

•vendor-id=9 (Cisco) Vendor type 37 for upstream traffic to input policy name

•vendor-id=9 (Cisco) Vendor type 38 for downstream traffic to output policy name

How to Configure Per-User QoS via AAA Policy Name

This section contains the following procedure:

•Monitoring and Maintaining Per-User QoS via AAA Policy Name

To configure per-user QoS, use the authentication, authorization, and accounting (AAA) policy name that you have received from the RADIUS server. To configure QoS policy, refer to the "Related Documents" section.

Monitoring and Maintaining Per-User QoS via AAA Policy Name

To monitor and maintain per-user QoS using the AAA policy name, use the following debug commands:

SUMMARY STEPS

1. enable

2. debug aaa authorization

3. debug aaa per-user

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. •Enter your password if prompted.
Step 2	debug aaa authorization Example: Router# debug aaa authorization	Displays information about AAA/TACACS+ authorization.
Step 3	debug aaa per-user Example: Router# debug aaa per-user	Displays information about per-user QoS parameters.

Configuration Example for Per-User QoS via AAA Policy Name

The following example shows per-user QoS being configured using the AAA policy name "policy_class_1_2":

!NAS configuration 

class-map match-all class1 

 match access-group 101 

class-map match-all class2 

 match qos-group 4 

 match access-group 101 

policy-map policy_class_1_2 

 class class1 

 bandwidth 3000 

 queue-limit 30 

 class class2 

 bandwidth 2000 

 class class-default 

 bandwidth 500 

!RADIUS Profile Configuration 
peruser_qos_1    Password = "password1" 

 Service-Type = Framed, 

 Framed-Protocol = PPP, 

 Cisco:Cisco-avpair = "ip:sub-policy-In=ssspolicy"

!ssspolicy in the above line is the name of the policy.

peruser_qos_2    Password = "password1" 

 Service-Type = Framed, 

 Framed-Protocol = PPP, 

 Cisco:Cisco-avpair = "ip:sub-policy-Out=ssspolicy" 

Additional References

The following sections provide references related to the Per-User QoS via AAA Policy Name.

Related Documents

Related Topic	Document Title
AAA per-user and QoS configurations and information about the policy-map command	•Configuring Per-User Configuration •Cisco IOS Security Command Reference

Standards

Standards	Title
None	—

MIBs

MIBs	MIBs Link
None	To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: http://www.cisco.com/go/mibs

RFCs

RFCs	Title
No new or modified RFCs are supported by this feature.	—

Technical Assistance

Description

Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http://www.cisco.com/techsupport

Feature Information for Per-User QoS via AAA Policy Name

Table 1 lists the release history for this feature.

Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.

Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp. An account on Cisco.com is not required.

---

Note Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.

---

Table 1 Feature Information for Per-User QoS via AAA Policy Name

Feature Name	Releases	Feature Information
Per-User QoS via AAA Policy Name	12.2(15)B 12.2(15)T 12.2(33)SRC Cisco IOS XE Release 2.1	You can use the Per-User QoS via AAA Policy Name feature to download a policy name that describes QoS parameters for a user session from a RADIUS server and apply them for a particular session. In Cisco IOS XE Release 2.1, this feature was implemented on the Cisco ASR 1000 series routers.

Glossary

RADIUS—Remote Authentication Dial-In User Service. RADIUS is a database for authenticating modem and ISDN connections and for tracking connection time.

VSA—vendor-specific attribute. A VSA is an attribute that has been implemented by a particular vendor. It uses the attribute Vendor-Specific to encapsulate the resulting AV pair: essentially, Vendor-Specific = protocol:attribute = value.

CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco Ironport, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Stackpower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flip Video, Flip Video (Design), Flipshare (Design), Flip Ultra, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Store, and Flip Gift Card are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0907R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2000-2009 Cisco Systems, Inc. All rights reserved.