This is similar to the sample configs I've been looking at however I can't see how service is differentiated based on login details. I would appear to differentiate based on the incoming VLAN.

What I'm trying to do is have a user login using PPPoE and be given a virtual template based on their RADIUS profile. The idea being that I can a embed QoS policing policy in the virtual template to provide different service levels to customers.

Hi,

AFAIK, to apply a different virtual-template you need to apply a different bba-group, and to apply a different bba-group you need to use VLANs and subinterfaces - i think that you can work around and use this model.

Another prospective to think with, is that you can search if what you require to do can be sent by the RADIUS as a Cisco RADIUS AV Pair according to the customer profile.

BR,

Mohammed Mahmoud.

I understand that it is a RADIUS AVP, the question being how to apply it.

D

Hi,

Fine, this doesn't mean that you'll apply a different virtual-template per each class, what you are going to do is to apply a Cisco AVP per customer profile to be used to clone the virtual-access.

cisco-avpair = "ip:sub-qos-policy-in=in-policy-name"

cisco-avpair = "ip:sub-qos-policy-out=out-policy-name"

BR,

Mohammed Mahmoud.

Ok, so single bba group with a single virtual template on a single interface.

Then a policy map for each user grouping.

I found this document which looks like it has most of the info I need.

http://www-europe.cisco.com/univercd/cc/td/doc/product/aggr/10000/swconfig/cfggdes/qoscf/10qrad.htm

Once I have it sussed I'll post the final config snippet