I've 7201-NPE-G2 running as a BRAS. currently all my accouting data is calulate using accouting information that I recieve from BRAS.
I have a Server farm and I want to have per-user accouting infomarion for all traffic from/to my server farm.
As far as I know I should be able to do this using Cisco ISG, I'm not sure but it looks that I should create two service per account, one for Internet and one for access to my server farm (lets call it walled garden), and recieve different accouting information for each of them.
Would you please kindly give me a sample configuration?
Indeed, if you need differentiated accounting for different services, ISG is a good approach. As you mentioned, you can defined N services depending on your requirements and apply accounting feature on those in order to do per service accounting.
To have a better idea of your current setup, could you let me know if you are currently using ISG at all? Are you familiarized with it? What tpe of sessions are we talking about here (IP, PPPoE, VPDN)? Could you please share your current configuration?
Thanks for your reply and sorry for being late in updateing this post.
- I haven't started to use ISG as I didn't have a clear Idea about ISG services.
- I've read about ISG recently and now I'm familiar with it.
- I'm going to setup ISG for PPPoE and wireless clients (IP Session)
I have stored all my user confiurations in a DB and I'm going to use freeradius as ISG Policy server, so Freeradius can get user data from DB and deliver to ISG.
AFAIK I should define control policy on BRAS so it will create a session for each subscriber, then I'll need to create my services on ISG or Radius.
what I want to need to know is that is it possible to define multiple services on ISG router and activate multiple services for each subscriber but with different QoS policy for each subscriber?
I have defined two services on ISG:
class-map type traffic match-any VPN
match access-group output name VPN_OUT
match access-group input name VPN_IN
class-map type traffic match-any DOWNLOAD_CENTER
match access-group input name DC_IN
match access-group output DC_OUT
policy-map type service vpn
class type traffic VPN
police input 5120000
police output 5120000
policy-map type service download
class type traffic DOWNLOAD_CENTER
police input 256000
police output 256000
Now using control policy , I can activate both of the vpn and download services for subscriber, what I want is that to be able to say , customer1 can use vpn service with 1Mb and download with 2Mb , and set another rate for the other customer.
If you need to set different rates in the police statement, then you will need to define different services, each one with the rate you need for each customer. Of course, if 2 or more customers are supposed to use the same rate, you can reuse services.
Introduction: The "external-out enable" command is available for
configuration under the "router ospf process" in case of the IOS-XR
operating system. This command basically enables advertisement of
intra-area routes on the device as external routes in th...
Introduction Basic configuration for netflow Scale parameters for
netflow Netflow support Architecture Packet flow for netflow Inside the
LC CPU Netflow Cache size, maintenance and memory Sample usage Cache
Size Aging Permanent cache Characteristics Which...