ASR9000 bba-group in subscriber radius messages

[c.maggiolini]

Hi all,
I was wondering if is it possible to insert into subscriber radius Access-Request and/or Accounting-Request the PPPoE bba-group from which the subscriber comes from.

Regards
Carlo

[Aleksandar Vidakovic]

You cannot programmatically include the BBA group, but you can create an AAA attribute of your choice:

aaa attribute format FOO
 format-string length 253 "foo bar %s" client-mac-address

So you could create one of these per BBA group. Then make use of it in the subscriber control policy.

[c.maggiolini]

Hi  Aleksandar,
thanks for the quick reply.
I don't think the solution you provide is what I was looking for.
I don't want to authorize the subscribe via client-mac-address.

I was trying to identify the "interface Bundle-Ether" from whitch the PPPoE session comes from.
With my previous ASR1K I used "aaa connect-info" .

Regards
Carlo

[Aleksandar Vidakovic]

hi Carlo,

the MAC address was just a sideline info. You can programmatically include the following:

RP/0/RSP0/CPU0:our9001(config-id-format)#format-string length 253 "%s" ?
OR OR between two attributes

addr Source IP address of subscriber
circuit-id-tag Circuit-Id Tag
client-mac-address MAC address of client
client-mac-address-custom1 MAC address of client in AA.BB.CC.DD.EE.FF format
client-mac-address-ietf MAC address of client in ietf format
client-mac-address-raw MAC address of client in raw format
dhcp-client-id DHCP Client Identifier
dhcp-client-id-spl DHCP Client Id special string
dhcp-user-class DHCP User Class
dhcp-vendor-class DHCP vendor class name
dhcpv6-interface-id DHCPv6 Interface-Id
inner-vlan-id Inner VLAN ID needed to form NAS Port
outer-vlan-id Outer VLAN ID needed to form NAS Port
physical-adapter Physical adapter needed to form NAS Port
physical-chassis Physical chassis needed to form NAS Port
physical-port Physical port needed to form NAS Port
physical-slot Physical slot needed to form NAS Port
physical-subslot Physical subslot needed to form NAS Port
port-type Interface/Port type
pppoe-session-id PPPOE Session Id
remote-id-tag Remote-Id Tag
service-name The name of the service
srg-group-id SRG Group ID
username The name of the user

If none of these do the trick you wanted, you can create one aaa attribute per boa-group and include it explicitly in the aaa format (as text):

 format-string length 253 "BBA group 2"

hth,

/Aleksandar

[c.maggiolini]

Hi Aleksandar,

is this the configuration you mean ?

aaa attribute format BBA_TEST
format-string length 253 "BBA_TEST_AREA_1"
!

!
policy-map type control subscriber PPPoE_USERS_xDSL_TEST
event session-start match-first
class type control subscriber PPP-Match do-until-failure
10 activate dynamic-template VTEMP-1
!
!
event session-activate match-first
class type control subscriber PPP-Match do-until-failure
10 authenticate aaa list RADIUS-TEST
20 authorize aaa list RADIUS-TEST format BBA_TEST password use-from-line
!
!
end-policy-map

Regards

[Aleksandar Vidakovic]

Yes, exactly that config!

/Aleksandar

[Aleksandar Vidakovic]

hi Carlo,

the MAC address was just a sideline info. You can programmatically include the following:

RP/0/RSP0/CPU0:our9001(config-id-format)#format-string length 253 "%s" ?
OR OR between two attributes

addr Source IP address of subscriber
circuit-id-tag Circuit-Id Tag
client-mac-address MAC address of client
client-mac-address-custom1 MAC address of client in AA.BB.CC.DD.EE.FF format
client-mac-address-ietf MAC address of client in ietf format
client-mac-address-raw MAC address of client in raw format
dhcp-client-id DHCP Client Identifier
dhcp-client-id-spl DHCP Client Id special string
dhcp-user-class DHCP User Class
dhcp-vendor-class DHCP vendor class name
dhcpv6-interface-id DHCPv6 Interface-Id
inner-vlan-id Inner VLAN ID needed to form NAS Port
outer-vlan-id Outer VLAN ID needed to form NAS Port
physical-adapter Physical adapter needed to form NAS Port
physical-chassis Physical chassis needed to form NAS Port
physical-port Physical port needed to form NAS Port
physical-slot Physical slot needed to form NAS Port
physical-subslot Physical subslot needed to form NAS Port
port-type Interface/Port type
pppoe-session-id PPPOE Session Id
remote-id-tag Remote-Id Tag
service-name The name of the service
srg-group-id SRG Group ID
username The name of the user

If none of these do the trick you wanted, you can create one aaa attribute per boa-group and include it explicitly in the aaa format (as text):

 format-string length 253 "BBA group 2"

hth,

/Aleksandar