Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASR9000 BNG PPPoE Setup: Redirecting to a HTTP after failed Authentication

Hello Guys,

On a PPPoE setup, and in a authentication-failure event (after a access-reject from Radius) can i still assign a IP address and redirect the subscriber to a Web server?

I only see examples for IP subscribers, so i am lost here. Can someone tell me if this is possible?

Thanks!


David           

  • XR OS and Platforms
2 REPLIES
New Member

ASR9000 BNG PPPoE Setup: Redirecting to a HTTP after failed Auth

My idea (only on paper for now) is to apply a dynamic-template similar to the one applied on session-start and  session-activate, use the regular ip address pool but include an ACL limiting access to the Web Server. Then in the same dynamic-template apply a PBR policy-map redirecting to the web server.

Will this work?

Cisco Employee

ASR9000 BNG PPPoE Setup: Redirecting to a HTTP after failed Auth

hi david, my recommendation is to make a particular dynamic template and define a specific (non routable) pool and assign it to the template

on auth failure activate that template for address assignment and apply the http-r

or you can use your global pool also, so that if they pay their bill you can remove http-r and have them running happily.

xander

Xander Thuijs CCIE #6775 Principal Engineer ASR9000, CRS, NCS6000 & IOS-XR
187
Views
0
Helpful
2
Replies