[RADIATOR] Radius SLA profile and Cisco ASR

[Hugh Irvine]

Hello Rohan -

Yes I would have expected the first two replies to be equivalent.

The third one however doesn’t make sense, as you have observed.

For the accounting, it is sometimes the case with Cisco gear that you don’t get sensible data in the accounting start, but you do get it in the first and following accounting alives.

Please let me know how you get on, and what the solution turns out to be.

regards

Hugh


> On 23 Nov. 2016, at 11:36, rohan.henry cwjamaica.com <rohan.henry at cwjamaica.com> wrote:
> 
> Thanks Hugh,
> 
> It doesn't appear that there is any issue with my Radius reply config.
> 
> When my Radius reply config is:
> cisco-Policy-Up = "4Mbps",cisco-Policy-Down = "16Mbps"
> 
> The ASR output is:
> USER ATTRIBUTES
> 
> addr                 0   63.245.120.110
> route                0   "63.245.120.110 255.255.255.255 "
> sub-policy-In        0   "4Mbps"
> sub-policy-Out       0   "16Mbps"
> timeout              0   604800 (0x93A80)
> 
> 
> 
> When I changed to cisco-avpair:
> cisco-avpair = "sub-policy-In=4Mbps",cisco-avpair = "sub-policy-In=16Mbps"
> 
> 
> The output on the ASR is the same:
> 
> USER ATTRIBUTES
> 
> addr                 0   63.245.120.110
> route                0   "63.245.120.110 255.255.255.255 "
> sub-policy-In        0   "4Mbps"
> sub-policy-Out       0   "16Mbps"
> timeout              0   604800 (0x93A80)
> 
> However the ASR displays nothing when the following is used:
> 
> cisco-avpair = "cisco-Policy-Up=4Mbps",cisco-avpair = "cisco-Policy-Down=16Mbps"
> 
> 
> Note: The above tests are from ASR directly but wanted to confirm I have Radius Reply items configured properly. The issue is that the ASR is not sending accounting requests when a modem tries to authenticate. We are moving from Cisco CAR to Radiator. Working with Cisco Support. 
> 
> Regards,
> Rohan
> 
> ----- Original Message -----
> From: "Hugh Irvine" <hugh at open.com.au>
> To: "Rohan Henry" <rohan.henry at cwjamaica.com>
> Cc: radiator at open.com.au
> Sent: Tuesday, November 22, 2016 4:57:11 PM
> Subject: Re: [RADIATOR] Radius SLA profile and Cisco ASR
> 
> Hello Rohan -
> 
> The Radiator dictionary contains these definitions, which match what you show below:
> 
> 
> VENDORATTR      9       cisco-Policy-Up                 37      string
> VENDORATTR      9       cisco-Policy-Down               38      string
> 
> 
> However, you will need to check with Cisco for the correct format of the strings.
> 
> It is also often the case that you need to use the “cisco-avpair” attribute, but again, you will need to check with Cisco.
> 
> You will also need to do some experiments, because sometimes the official information is incorrect.
> 
> Watching a debug on the Cisco device while you send the RADIUS access accept is probably the best way to see what is going on.
> 
> regards
> 
> Hugh
> 
> 
>> On 23 Nov. 2016, at 08:42, rohan.henry cwjamaica.com <rohan.henry at cwjamaica.com> wrote:
>> 
>> Hello All,
>> 
>> Are the following the correct VSA's to use with Cisco ASR (1000) to define broadband user speed?
>> 
>> cisco-Policy-Up = "4Mbps"
>> cisco-Policy-Down = "16Mbps"
>> 
>> Thanks.
>> 
>> Regards,
>> Rohan
>> _______________________________________________
>> radiator mailing list
>> radiator at lists.open.com.au
>> http://lists.open.com.au/mailman/listinfo/radiator
> 
> 
> --
> 
> Hugh Irvine
> hugh at open.com.au
> 
> Radiator: the most portable, flexible and configurable RADIUS server 
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
> DIAMETER, SIM, etc. 
> Full source on Unix, Linux, Windows, MacOSX, Solaris, VMS, NetWare etc.
> 
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> http://lists.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
hugh at open.com.au

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER, SIM, etc. 
Full source on Unix, Linux, Windows, MacOSX, Solaris, VMS, NetWare etc.